Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: iQxqe/VEJ2dbYe7vlRmPu5ZcXJvao8GkozPejTVnArE=
Subject key identifier: 8C:7C:03:03:1E:51:44:C7:61:F8:C3:E0:0F:8D:66:D8:00:69:EB:09
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3393CF426F38F314F7E01B3AE9C3E9DFCAE28602
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS0.roa
Signing time: Thu 12 Nov 2026 07:10:18 +0000
ROA not before: Thu 12 Nov 2026 07:05:18 +0000
ROA not after: Thu 11 Nov 2027 07:10:18 +0000
asID: 0
IP address blocks: 188.220.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:93:cf:42:6f:38:f3:14:f7:e0:1b:3a:e9:c3:e9:df:ca:e2:86:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 12 07:05:18 2026 GMT
Not After : Nov 11 07:10:18 2027 GMT
Subject: CN=8C7C03031E5144C761F8C3E00F8D66D80069EB09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:01:b1:b2:e6:96:b8:c2:28:e1:0b:2b:1f:
c3:6b:86:da:7f:d6:60:71:af:c9:3e:95:d8:33:ab:
c8:0e:7b:d1:09:2f:f0:81:cd:3d:c9:17:d1:dd:9b:
30:00:f2:26:83:1b:9f:38:10:fb:da:76:cc:5d:c5:
6e:f6:0a:f9:2a:be:8e:1e:66:6c:12:7d:f4:f3:e6:
03:99:84:30:ad:10:dc:fc:e0:3c:65:e1:22:74:b6:
94:8f:4d:c4:0a:7e:c7:f7:d7:24:85:58:60:f6:f4:
03:70:4a:98:7a:63:29:af:c8:44:fb:1a:98:8f:8b:
20:ae:8f:8a:3d:9c:cd:be:88:ef:9c:d3:7f:d2:9c:
a8:93:bb:0b:27:00:c3:cd:95:00:0f:f5:19:c9:66:
bd:79:b3:32:5a:46:ed:26:5e:03:84:ad:95:f1:2a:
66:9b:9f:92:16:5e:b8:26:8c:a6:f2:7e:09:4f:d1:
64:37:1f:74:be:1f:6b:f0:0b:54:70:f7:fc:1e:59:
31:24:ac:2a:51:b6:a9:0c:81:5c:46:d4:46:f5:d5:
13:1c:39:22:fe:5c:cb:d1:6b:fe:59:63:0e:78:f5:
34:c3:fb:1c:a5:86:09:c6:9f:01:1e:99:a7:6a:b8:
01:13:43:f3:4c:3c:d8:22:08:de:9e:78:e3:dc:25:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7C:03:03:1E:51:44:C7:61:F8:C3:E0:0F:8D:66:D8:00:69:EB:09
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.101.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ba:86:01:df:71:9f:95:88:49:e1:a7:f7:8f:6f:38:06:9a:
64:30:f6:f5:96:3f:ab:6c:12:bd:fb:d8:ad:bf:cc:03:a3:bf:
6b:04:90:bc:db:58:6d:f3:71:70:c9:b3:16:55:e5:6e:7e:75:
b8:07:63:59:2a:45:0d:cc:c0:14:72:8c:d4:b8:85:ce:c2:61:
2b:ed:81:95:67:66:f5:00:d8:9b:f1:c3:ba:f6:9d:a4:1f:ca:
9e:d0:8e:87:e1:c9:6a:64:28:28:76:23:32:ed:f4:e2:ed:49:
ef:5b:25:72:8a:42:fc:f8:58:3d:0c:4c:0f:bd:89:cb:5c:0e:
20:9e:23:da:d8:71:a2:19:70:f5:e4:0e:40:5b:04:bc:65:bc:
82:12:24:cb:19:44:44:c2:12:e7:6a:70:ba:22:1a:5e:44:41:
52:b8:3e:27:ed:b4:e5:7b:3d:3a:b0:40:9a:59:30:43:4b:d2:
79:51:7e:ce:b8:a0:c3:c0:8d:ec:45:3b:2b:95:cb:ef:b3:1a:
50:01:f3:3f:89:0d:2c:1e:d4:d9:df:f9:12:59:53:27:df:61:
a2:8f:94:27:ff:89:5f:c3:92:f3:df:29:0d:bd:01:4a:27:a9:
b9:3c:09:f7:2a:46:24:55:41:cc:a0:f0:a6:86:e4:c8:57:15:
2b:ec:85:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:13:51 2026 by rpki-client