Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: flv35FkyaUNdXeBBPu24CRMq/cZZ1CDrbr8bHgX4xOg=
Subject key identifier: A4:F2:C0:DE:55:1B:77:2F:D2:7E:99:BD:64:D3:9C:DF:15:D7:7A:CD
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 11A856B834C30D3A52A997A71D433FBBA5E54B8C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401776.roa
Signing time: Thu 03 Sep 2026 09:54:48 +0000
ROA not before: Thu 03 Sep 2026 09:49:48 +0000
ROA not after: Thu 02 Sep 2027 09:54:48 +0000
asID: 401776
IP address blocks: 188.220.67.0/24 maxlen: 24
188.220.223.0/24 maxlen: 24
188.220.227.0/24 maxlen: 24
188.221.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:a8:56:b8:34:c3:0d:3a:52:a9:97:a7:1d:43:3f:bb:a5:e5:4b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 3 09:49:48 2026 GMT
Not After : Sep 2 09:54:48 2027 GMT
Subject: CN=A4F2C0DE551B772FD27E99BD64D39CDF15D77ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:cc:e4:f4:75:25:dd:90:f8:6c:48:6f:d8:
60:2d:71:65:0b:1f:2a:b8:bc:17:02:ee:55:4b:d1:
07:a1:42:79:c4:51:a0:90:40:16:13:a3:ed:6d:34:
aa:de:e1:20:32:9c:25:90:d3:f6:e1:12:04:54:5a:
92:6a:63:16:10:93:f1:40:c1:db:cf:3e:77:13:11:
f3:43:58:c3:c2:65:bd:79:1c:39:bd:47:10:69:c6:
dc:50:c7:48:02:70:be:05:a6:4d:02:6b:a9:9f:50:
d7:60:98:40:e6:70:9d:41:8a:98:d2:ad:b9:b2:b7:
2c:a4:0a:7c:eb:5c:5d:7b:b3:5a:fa:6d:05:6d:ad:
2f:76:0b:27:04:0f:8d:7a:9f:33:74:7d:f8:d2:27:
d7:9d:80:d0:35:2b:a1:b4:46:22:53:0f:7f:ca:70:
45:e4:27:41:e2:17:7e:79:5e:6a:66:d3:54:8c:ae:
e9:09:56:22:11:c5:98:f8:30:38:5c:33:df:dd:b3:
5d:0c:95:45:ed:70:05:c6:ba:e3:99:68:68:88:8c:
9b:d6:85:4b:60:29:2f:87:7c:0d:cd:be:2b:69:57:
f8:bb:1c:d7:77:0c:4a:bb:65:8a:39:68:0a:a7:a2:
c1:b5:07:1a:c1:d1:b8:6a:cb:80:04:be:ae:70:e4:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F2:C0:DE:55:1B:77:2F:D2:7E:99:BD:64:D3:9C:DF:15:D7:7A:CD
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.67.0/24
188.220.223.0/24
188.220.227.0/24
188.221.144.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d8:89:e9:9e:14:d7:15:da:e2:87:cd:a2:a5:0b:16:d3:cd:
cf:fc:7f:4b:cc:0f:91:e6:99:58:b4:54:be:68:16:54:da:2e:
45:2a:e3:67:50:c0:18:3f:72:10:09:63:ca:da:32:7c:7f:2b:
67:d9:ee:61:28:9d:bb:42:83:89:65:40:6d:3a:a1:46:56:e4:
2d:5b:0d:5c:e7:d5:aa:02:68:0c:cb:69:fb:56:1d:bf:4e:c9:
d3:7e:dc:3b:90:90:f3:00:f3:81:7c:17:d0:de:30:3d:d9:bb:
7d:ab:91:3e:c3:f0:85:07:d3:47:75:b0:9a:4d:97:53:d5:17:
4a:f5:95:b9:93:88:f2:37:ca:8e:a7:ae:0e:8a:01:94:34:b6:
ff:b6:1b:05:09:0a:4a:31:0c:68:15:94:e7:f8:9c:c0:52:05:
93:e1:ff:f2:cc:49:af:4e:4f:3c:82:09:7a:65:cc:20:eb:b3:
76:2f:e3:3d:b3:76:a3:77:0b:3f:6a:a0:c1:23:fe:14:bb:2b:
db:6e:ca:b3:53:c4:35:5e:30:1f:38:e7:dc:94:9c:04:62:86:
78:ac:50:3f:61:9b:8c:e0:2b:97:4f:41:5b:13:29:aa:e2:2f:
df:58:32:34:56:13:b5:24:ae:4e:07:c8:8e:04:84:17:38:23:
b0:2e:81:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:00 2026 by rpki-client