Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS394192.roa
File: AS394192.roa (raw, json)
Hash identifier: 8kLpvGCR5U6GYevbtI5azuVSgpLA3xlSBCv1ZoNLa6E=
Subject key identifier: 20:91:5D:E6:34:B7:2C:82:6A:03:1C:5C:8C:11:53:4E:AC:50:A6:51
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 46B0C526DE44578EA2A6108A87244DF3C78AC64E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS394192.roa
Signing time: Mon 21 Sep 2026 19:49:58 +0000
ROA not before: Mon 21 Sep 2026 19:44:58 +0000
ROA not after: Mon 20 Sep 2027 19:49:58 +0000
asID: 394192
IP address blocks: 87.81.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b0:c5:26:de:44:57:8e:a2:a6:10:8a:87:24:4d:f3:c7:8a:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 21 19:44:58 2026 GMT
Not After : Sep 20 19:49:58 2027 GMT
Subject: CN=20915DE634B72C826A031C5C8C11534EAC50A651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:0f:56:83:ab:fb:b5:45:90:40:a3:7a:b3:
ef:44:7a:d3:27:ed:c0:e5:1b:f5:8f:76:d5:39:b2:
c6:04:e0:0f:2c:d5:84:5b:82:31:ef:a0:71:59:15:
04:1a:4e:71:a7:a0:35:ba:19:85:38:1f:79:56:96:
9b:69:07:4a:b5:56:5c:33:d1:f9:92:75:c8:96:a0:
2c:55:a2:26:38:15:a8:9b:0f:d2:12:97:2e:07:26:
d3:ac:5d:ee:45:7f:a6:c9:8c:26:b7:b3:91:ac:a8:
6d:ff:3b:02:51:57:ae:9b:98:f2:5c:20:77:ec:5b:
3a:b9:88:71:36:f1:35:9f:b5:25:f9:76:9e:ee:56:
31:bf:e2:9f:5a:c6:cf:32:17:66:5f:fd:b9:ae:8d:
d6:4e:6b:c6:41:a5:ec:44:87:8a:96:68:92:66:90:
cd:c7:cf:f6:01:e9:1c:69:d2:5b:9f:1a:59:af:bc:
98:c2:07:7e:e4:6e:72:1b:b4:fe:4c:aa:31:7f:81:
19:b3:6e:3a:7e:38:02:67:f6:25:d5:17:52:8d:b8:
0a:1f:2e:f0:b6:7f:6b:a5:16:b7:df:c4:1f:d1:81:
d6:95:24:2e:21:8c:ec:54:2e:dc:73:ff:07:e5:c0:
1b:e7:4d:c7:2b:49:12:f5:7b:0f:13:12:cc:e9:a2:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:91:5D:E6:34:B7:2C:82:6A:03:1C:5C:8C:11:53:4E:AC:50:A6:51
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS394192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.81.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:44:32:7d:bd:3e:02:55:33:38:96:75:62:22:a6:4f:d7:3a:
24:4a:38:8b:88:69:1b:ef:ed:1a:81:45:eb:74:e4:8e:fd:bb:
60:b6:e4:b4:3d:d8:13:93:ee:ef:45:6d:f9:59:79:d5:b9:2f:
14:e0:71:a0:06:a2:7d:56:78:2b:8a:52:e8:22:63:d8:57:4e:
8b:37:49:ad:72:d5:74:4d:78:70:d2:16:15:11:2e:ea:8c:23:
bd:a3:fe:8f:bb:58:6b:59:41:e2:d9:90:b1:9a:b9:d2:19:2b:
30:87:74:bd:df:d4:4d:81:d2:14:cf:9c:fb:0c:68:61:69:97:
af:92:5f:fe:55:da:9d:ca:38:38:53:ba:f4:fa:9b:06:9f:dd:
d9:8c:cb:dd:58:31:1f:5f:da:37:22:2c:08:e5:e7:a2:11:86:
ce:c2:ff:40:40:87:c5:fa:0b:0e:00:b9:95:21:bc:e1:21:de:
ba:2c:1c:2d:15:f0:4f:dc:89:1c:40:5e:b5:98:da:b0:aa:8c:
5b:31:e6:8c:04:96:2e:20:84:b4:57:c7:a2:0d:36:33:c3:28:
9b:a0:94:56:5c:28:83:ce:0f:c4:b5:88:d6:08:2f:5a:a6:f9:
e4:0d:3e:ec:86:b8:52:14:d9:f6:5e:4b:ff:93:15:2f:57:fa:
6d:cb:bf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:59:19 2026 by rpki-client