Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402221.roa
File: AS402221.roa (raw, json)
Hash identifier: w+glh/TYwjpSLHHRNMTWW7es6fmiT0omStpYeG/9vis=
Subject key identifier: 30:77:06:7D:33:8E:0A:31:9A:97:72:C2:8E:A7:EA:CD:77:7F:E3:A2
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5DF713C451F8475D83B8CFB3D576702C1F9A775F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402221.roa
Signing time: Thu 04 Jun 2026 11:32:57 +0000
ROA not before: Thu 04 Jun 2026 11:27:57 +0000
ROA not after: Thu 03 Jun 2027 11:32:57 +0000
asID: 402221
IP address blocks: 188.220.117.0/24 maxlen: 24
188.220.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f7:13:c4:51:f8:47:5d:83:b8:cf:b3:d5:76:70:2c:1f:9a:77:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 4 11:27:57 2026 GMT
Not After : Jun 3 11:32:57 2027 GMT
Subject: CN=3077067D338E0A319A9772C28EA7EACD777FE3A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9f:98:9b:1b:d4:3c:50:d3:43:60:d9:d3:47:
d9:c8:1a:4d:ae:4a:38:8c:e5:b5:a2:b9:47:d0:87:
89:f0:77:ab:40:8d:d3:ca:66:a3:96:dd:15:54:aa:
d1:c5:9c:ac:45:4b:28:fc:56:a6:a9:94:35:0f:f9:
8e:0f:96:bc:5c:81:eb:4a:4a:95:50:b9:68:fb:4b:
af:90:ac:4f:65:1b:47:4f:d2:5e:a2:15:d9:a4:3f:
d2:69:9f:8d:a8:5f:a5:c3:d3:92:bf:36:96:e5:f6:
d8:45:aa:06:28:9b:df:d1:37:05:1e:ce:c0:85:2c:
c7:81:f4:35:9d:6f:fd:4b:83:be:2b:eb:44:c1:bc:
70:0e:af:0e:8e:b8:fb:62:40:a1:97:6e:fb:17:86:
4e:8c:11:75:48:29:ab:27:15:36:00:7b:3f:70:b8:
78:2e:4d:c5:fd:06:75:9b:4b:f8:ae:82:26:7e:7a:
2e:e9:32:3f:62:7b:23:e4:27:7b:9f:fd:d5:ea:50:
89:ac:39:2b:82:5b:36:a0:d6:39:3e:37:43:a7:e2:
e4:c4:23:3e:6e:82:1b:18:32:d0:a7:54:13:3b:c1:
31:37:5a:60:8e:b3:89:cd:c8:f7:0a:3f:41:5e:4d:
b0:3d:e4:9b:90:c8:4b:87:8e:9d:4f:5c:fb:d7:9c:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:77:06:7D:33:8E:0A:31:9A:97:72:C2:8E:A7:EA:CD:77:7F:E3:A2
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.117.0/24
188.220.207.0/24
Signature Algorithm: sha256WithRSAEncryption
03:98:9f:3a:d3:9d:ab:15:ef:b1:f2:5b:25:8f:31:32:38:0b:
9e:a9:0c:d1:a0:0c:a3:89:cf:68:07:43:84:13:ae:1a:bc:e2:
4e:51:91:9d:a3:07:56:8a:62:17:f6:25:5b:60:9b:b1:c8:2d:
d0:b5:47:34:d2:54:a7:47:97:09:35:fc:bf:4e:3f:66:d4:d8:
b2:88:01:a2:33:ae:f8:7b:41:2d:18:c2:df:12:fa:01:2b:5d:
61:34:f0:9f:74:82:61:c5:de:c2:a3:e5:6b:cd:1f:d2:fd:14:
68:58:50:d0:c1:4c:8e:fd:71:3e:50:28:54:8b:ea:d0:5a:cf:
01:7f:4d:fe:a5:08:66:6f:3c:5f:de:07:0c:92:1d:0b:b0:07:
ea:59:65:de:db:69:98:2e:76:6c:8b:35:08:74:1c:89:99:e2:
57:ea:3d:0b:c0:a5:0c:3e:3c:67:0e:54:0a:6c:a1:d0:3e:6b:
74:65:20:71:ec:e8:7b:b2:c4:4f:38:81:98:a5:9e:2b:28:bb:
9f:a4:97:b1:aa:52:16:be:61:85:a6:bd:93:3d:1c:1e:5e:4c:
1c:0d:c4:93:49:3a:c1:e8:c1:6d:69:49:0c:da:90:f7:4c:68:
04:ff:a4:fb:44:39:1e:fa:13:c1:23:ee:40:72:39:d6:ce:61:
a2:79:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:31 2026 by rpki-client