Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402276.roa
File: AS402276.roa (raw, json)
Hash identifier: a5An8hVCazhjbkyPkRECRl0NROGMFgcNaEgB7DG0TXg=
Subject key identifier: A9:D2:DE:A6:24:8F:13:0A:25:01:91:33:15:D2:D0:73:52:76:D2:9B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 011C6333BE5BB6AA6BEFFFD22781383C9EB4B938
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402276.roa
Signing time: Mon 08 Jun 2026 14:13:26 +0000
ROA not before: Mon 08 Jun 2026 14:08:26 +0000
ROA not after: Mon 07 Jun 2027 14:13:26 +0000
asID: 402276
IP address blocks: 188.220.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1c:63:33:be:5b:b6:aa:6b:ef:ff:d2:27:81:38:3c:9e:b4:b9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 8 14:08:26 2026 GMT
Not After : Jun 7 14:13:26 2027 GMT
Subject: CN=A9D2DEA6248F130A2501913315D2D0735276D29B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:a7:3d:f2:67:7a:99:eb:2a:f8:64:d1:ee:
9b:aa:a0:b6:8d:05:75:4c:0e:7a:1b:1b:11:e9:95:
f5:0e:99:2c:a5:e9:a6:cb:6e:57:fc:c8:51:5d:22:
af:bc:15:e0:9b:e9:8b:9f:f4:43:e1:4d:a3:59:89:
e3:53:54:36:15:72:93:c2:99:03:aa:3a:16:34:41:
75:00:6c:f3:e6:2c:b2:a3:0b:be:83:1a:83:c1:d1:
af:23:b9:b2:a4:3f:0c:34:b3:2d:07:3e:9e:ae:78:
9c:d2:c3:a5:a7:78:b3:a2:81:a5:2a:bc:fb:a2:07:
07:da:a0:72:ac:f7:70:42:e4:74:a3:95:f1:64:7e:
6a:69:7b:15:fc:29:3e:2c:a8:e6:8b:1f:e7:bf:a5:
23:01:51:2f:8e:49:47:ca:e4:fc:4a:36:b5:5a:6b:
8d:f8:8a:31:40:dd:ee:94:10:cc:52:f4:fa:c7:77:
f3:0c:bb:cf:35:4d:2a:6d:ef:63:1d:59:54:0a:fe:
c2:59:90:c1:ec:cb:5f:f0:ac:0f:b8:a7:6c:80:06:
0b:ed:75:08:89:9a:41:64:b9:0f:ea:f6:5a:64:7a:
44:53:ee:5f:68:0e:55:86:c4:f4:db:29:81:21:61:
0d:32:78:e1:8c:55:f6:8c:1c:54:fd:50:9a:58:e3:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D2:DE:A6:24:8F:13:0A:25:01:91:33:15:D2:D0:73:52:76:D2:9B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:02:8b:a5:a3:df:b8:ed:72:3e:8b:b8:3c:d8:cd:0c:ee:4e:
70:05:df:4c:59:5c:25:db:d6:e7:0a:5b:5c:04:22:84:72:5a:
05:98:15:ad:e6:55:d5:11:e5:85:7a:44:e7:1d:e8:a3:b1:29:
3a:9b:33:cc:f1:e9:15:1a:c3:44:63:93:5e:33:96:86:8e:5a:
55:b3:20:45:0f:19:3f:be:f6:66:1f:ea:ec:1c:41:9d:ec:30:
99:35:78:6a:55:cb:e9:54:8c:6d:14:52:8d:7a:31:c6:32:05:
b7:a7:fa:58:cb:44:9f:81:4e:dd:20:02:69:01:d3:37:1b:45:
f1:25:f7:e5:b5:a0:45:37:75:2d:63:6c:e3:4e:ab:93:78:00:
e2:7e:d9:69:e0:e0:1a:3b:a7:2c:bf:da:b1:64:c2:4e:41:31:
5c:0f:0e:6c:cd:55:b1:cd:b3:90:ae:40:9f:34:67:b3:a2:03:
59:1c:13:0d:9f:e3:48:d4:4c:6c:cb:59:19:78:0f:2f:97:28:
74:60:73:7e:a1:9a:34:96:8c:27:a7:e6:f6:41:5d:79:0d:8c:
f8:3a:8a:fe:82:f3:a4:40:e6:c1:e1:55:d4:4c:2c:8d:39:6a:
ba:79:3e:10:1d:b3:d1:60:09:3d:d9:a6:da:77:3f:6d:9f:cf:
70:3a:f5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:37:22 2026 by rpki-client