Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS394192.roa
File: AS394192.roa (raw, json)
Hash identifier: 2Mn+0n+eUq5YlQO6tOkFep9ND9Xbsb5um52G5xFXSkA=
Subject key identifier: 04:1C:B9:B6:35:09:FC:96:87:37:01:04:AF:05:91:E0:95:F0:3E:44
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 52E08BFC61EA19B2DF4B4E7768C0C1870C4BC1
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS394192.roa
Signing time: Mon 05 Oct 2026 19:24:43 +0000
ROA not before: Mon 05 Oct 2026 19:19:43 +0000
ROA not after: Mon 04 Oct 2027 19:24:43 +0000
asID: 394192
IP address blocks: 87.81.224.0/19 maxlen: 24
94.192.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e0:8b:fc:61:ea:19:b2:df:4b:4e:77:68:c0:c1:87:0c:4b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 5 19:19:43 2026 GMT
Not After : Oct 4 19:24:43 2027 GMT
Subject: CN=041CB9B63509FC9687370104AF0591E095F03E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:9c:e1:67:1e:e8:10:a5:61:f0:08:e4:e8:
74:90:63:e3:c6:7d:f6:98:0c:34:e0:8f:0f:54:5a:
3f:20:9d:13:fb:ad:e0:07:51:94:98:ad:4b:b4:7b:
0c:b9:38:ed:98:ea:eb:0c:e1:5e:55:6f:bc:20:54:
b8:b4:ee:99:2f:5f:7a:87:37:53:72:69:c9:fe:9e:
ee:be:95:4f:f1:f2:46:e0:eb:9b:f4:e2:b8:12:7f:
3b:59:1f:93:5b:41:4d:0b:c1:e4:3e:0f:22:c6:78:
33:17:60:ec:38:cf:39:3e:ee:93:6a:ed:7c:18:21:
01:a3:6c:2d:2f:5b:53:df:0a:c4:ce:9c:34:8e:c5:
98:58:44:72:8f:2c:72:3c:eb:12:d8:47:15:b1:01:
78:33:08:37:56:df:a6:0a:78:e6:bf:e8:b2:b8:c9:
77:44:4e:fc:8c:e2:e9:31:35:1a:d7:55:9d:10:27:
6c:e8:1f:f3:1a:b3:6a:53:3e:af:d1:42:1a:6a:68:
0a:49:00:b7:dd:a8:0a:02:2a:c5:4b:e3:4d:82:ed:
70:ad:6b:71:cc:4b:40:aa:14:41:fd:ac:de:1d:a0:
54:c1:a9:bf:79:09:bc:38:31:3f:d1:5c:94:27:67:
87:5a:e4:e6:6c:83:1c:82:72:de:51:88:eb:10:3e:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1C:B9:B6:35:09:FC:96:87:37:01:04:AF:05:91:E0:95:F0:3E:44
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS394192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.81.224.0/19
94.192.64.0/19
Signature Algorithm: sha256WithRSAEncryption
72:d7:b3:65:c0:99:d2:9f:d8:cb:c2:a0:c3:10:2b:e2:87:62:
c5:be:73:ea:90:bb:4b:4f:80:c7:0b:b2:e4:b9:69:af:9c:ec:
90:b3:db:60:55:66:6b:d7:4a:69:a5:d1:16:a8:46:ee:86:6c:
e6:0a:ab:f9:66:92:3d:f4:9b:5c:51:5f:1f:52:ca:b6:14:e3:
d3:d8:48:a1:95:3f:6f:e5:55:0b:48:5b:7d:fd:e2:ab:26:a8:
7c:67:de:fe:d2:06:09:e0:15:f7:e8:85:29:36:81:a0:ab:f6:
dd:33:ab:a8:a3:90:75:6e:2c:39:70:d2:7d:ea:c4:6b:b2:35:
c1:bc:20:94:d3:85:06:cf:72:fc:a1:98:16:a9:75:fc:66:de:
3c:4a:fb:a6:63:25:37:17:cf:c4:f0:7f:ab:fc:5e:98:69:45:
93:84:33:fe:05:23:67:8d:52:96:6c:68:d2:4c:73:58:c2:ad:
98:ce:2c:b8:66:11:ec:8e:d0:54:74:df:45:6c:e1:17:82:2a:
6c:2f:37:d1:ea:f4:3a:91:5d:d5:c7:90:cf:ae:ba:40:bf:32:
04:27:4f:14:c6:e5:66:34:2c:c4:71:c4:12:20:e5:6b:ac:76:
b0:76:cd:a2:e5:d1:2d:89:0b:c5:ae:7c:1e:17:a6:b7:66:e7:
f5:33:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:12:52 2026 by rpki-client