Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS400031.roa
File: AS400031.roa (raw, json)
Hash identifier: V6LfdyEYA5PCocNTe4QKxjMvIKKF+qglR+AKI7DnDCc=
Subject key identifier: 08:CF:19:33:D0:0B:35:02:A9:46:DA:5F:37:32:F3:D1:56:C9:17:F4
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5145DC08166791284FE38AB4F529EB7F789A2C76
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS400031.roa
Signing time: Wed 28 Oct 2026 12:18:13 +0000
ROA not before: Wed 28 Oct 2026 12:13:13 +0000
ROA not after: Wed 27 Oct 2027 12:18:13 +0000
asID: 400031
IP address blocks: 188.220.184.0/22 maxlen: 22
188.220.188.0/22 maxlen: 22
188.220.244.0/22 maxlen: 22
188.220.252.0/22 maxlen: 22
188.221.4.0/22 maxlen: 22
188.221.24.0/22 maxlen: 22
188.221.48.0/22 maxlen: 22
188.221.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:45:dc:08:16:67:91:28:4f:e3:8a:b4:f5:29:eb:7f:78:9a:2c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 28 12:13:13 2026 GMT
Not After : Oct 27 12:18:13 2027 GMT
Subject: CN=08CF1933D00B3502A946DA5F3732F3D156C917F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:f6:3e:70:5e:97:6d:0b:87:50:02:78:95:
ff:0c:1d:70:0f:a0:6b:99:80:7e:82:20:e3:31:6a:
0d:9e:92:57:e9:28:20:02:24:dc:9d:88:75:ef:34:
25:a1:1d:e1:c0:7e:04:37:9e:b1:4c:bb:b7:e7:34:
5f:47:33:a3:ec:9c:e2:49:9e:80:c3:b2:c0:08:94:
d4:d3:45:11:c9:9e:12:25:b4:26:40:04:da:f2:7b:
8a:31:22:c7:50:3f:9d:9e:12:c7:71:38:3d:4f:05:
3a:fe:01:a2:81:d1:89:64:e9:73:cd:92:09:3c:af:
b4:0a:f8:65:11:30:26:c0:7c:54:e2:f8:2e:44:23:
28:93:73:b0:fd:3b:dc:8c:a4:a2:e0:51:60:cd:d5:
ab:57:63:ef:e9:cf:2f:09:37:3e:b3:63:d3:c1:b9:
fb:95:dc:a0:1d:dc:45:18:98:ff:78:e3:95:35:b2:
fc:b5:d4:ef:ce:db:17:27:36:82:e3:4a:23:2c:f8:
36:ee:a6:32:3a:04:77:bf:e8:05:32:91:a6:e8:72:
4c:17:92:d0:df:79:c0:a7:14:a7:8f:32:70:3a:cb:
3b:98:3d:28:3b:dc:2d:44:82:cb:90:48:bf:2a:2f:
55:75:e6:b5:68:3d:e7:70:5e:d2:4b:cd:f3:0f:eb:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CF:19:33:D0:0B:35:02:A9:46:DA:5F:37:32:F3:D1:56:C9:17:F4
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS400031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.184.0/21
188.220.244.0/22
188.220.252.0/22
188.221.4.0/22
188.221.24.0/22
188.221.48.0/22
188.221.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:a8:bb:82:e3:17:98:1c:0f:ff:fe:20:c4:84:ed:11:2c:f2:
42:7b:c8:f2:41:08:bc:86:0c:10:6a:a5:d2:22:db:c0:ea:82:
09:3f:2b:7a:54:c8:18:f6:1b:d3:d4:80:80:13:4b:c3:c5:ed:
10:86:c8:50:4b:ce:ef:73:23:f8:7b:91:ff:5a:79:fe:59:78:
d4:14:2e:9a:d0:4f:aa:df:db:e9:d6:f4:da:8b:30:ec:d0:70:
51:10:ce:31:65:a2:05:30:76:da:1d:93:57:6e:5f:fd:5b:c6:
28:be:bd:42:6e:78:1e:67:46:32:80:d9:9a:9f:f0:db:a4:f2:
0a:e8:a7:22:72:8c:a1:a7:18:e0:f8:66:9b:5a:7d:6e:ce:f2:
08:31:04:59:35:f8:b2:db:d2:15:25:bf:2b:68:50:a3:7f:1e:
61:19:f2:d9:3a:14:f5:87:d5:91:8f:fe:b1:11:74:85:28:ab:
14:cf:d2:fb:34:55:86:16:a4:b6:58:ae:b5:cd:ba:fd:03:ff:
b7:09:bc:f7:3a:b8:f2:a5:9f:96:c5:fa:7a:01:f3:34:11:f0:
a6:7a:26:fd:34:ba:41:b5:ef:83:60:68:52:96:a8:c0:aa:e7:
f0:fc:a7:cc:6b:2a:a8:18:08:71:b2:42:32:5c:08:a8:7e:a4:
d8:0a:d8:4a
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUUUXcCBZnkShP44q09Snrf3iaLHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMjgxMjEzMTNaFw0yNzEwMjcxMjE4MTNaMDMxMTAvBgNV
BAMTKDA4Q0YxOTMzRDAwQjM1MDJBOTQ2REE1RjM3MzJGM0QxNTZDOTE3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1f/Y+cF6XbQuHUAJ4lf8MHXAP
oGuZgH6CIOMxag2eklfpKCACJNydiHXvNCWhHeHAfgQ3nrFMu7fnNF9HM6PsnOJJ
noDDssAIlNTTRRHJnhIltCZABNrye4oxIsdQP52eEsdxOD1PBTr+AaKB0Ylk6XPN
kgk8r7QK+GURMCbAfFTi+C5EIyiTc7D9O9yMpKLgUWDN1atXY+/pzy8JNz6zY9PB
ufuV3KAd3EUYmP9445U1svy11O/O2xcnNoLjSiMs+DbupjI6BHe/6AUykabockwX
ktDfecCnFKePMnA6yzuYPSg73C1EgsuQSL8qL1V15rVoPedwXtJLzfMP62VBAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUCM8ZM9ALNQKpRtpfNzLz0VbJF/QwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAwMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDvNy4
AwQCvNz0AwQCvNz8AwQCvN0EAwQCvN0YAwQCvN0wAwQCvN04MA0GCSqGSIb3DQEB
CwUAA4IBAQAeqLuC4xeYHA///iDEhO0RLPJCe8jyQQi8hgwQaqXSItvA6oIJPyt6
VMgY9hvT1ICAE0vDxe0QhshQS87vcyP4e5H/Wnn+WXjUFC6a0E+q39vp1vTaizDs
0HBREM4xZaIFMHbaHZNXbl/9W8Yovr1CbngeZ0YygNman/DbpPIK6Kcicoyhpxjg
+GabWn1uzvIIMQRZNfiy29IVJb8raFCjfx5hGfLZOhT1h9WRj/6xEXSFKKsUz9L7
NFWGFqS2WK61zbr9A/+3Cbz3OrjypZ+Wxfp6AfM0EfCmeib9NLpBte+DYGhSlqjA
qufw/KfMayqoGAhxskIyXAiofqTYCthK
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:22:21 2026 by rpki-client