Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: 49UueRrQKAGj35SJ97PEJUhSPNEeatGfw+cGP2bABkw=
Subject key identifier: E3:23:C1:93:0F:2F:18:AC:EE:9A:E4:7C:CB:C6:2C:55:61:74:D2:08
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 277057BB35E96DCD9A78677AA6DA63E1FDC697D6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401776.roa
Signing time: Tue 27 Oct 2026 14:12:01 +0000
ROA not before: Tue 27 Oct 2026 14:07:01 +0000
ROA not after: Tue 26 Oct 2027 14:12:01 +0000
asID: 401776
IP address blocks: 94.118.139.0/24 maxlen: 24
188.220.67.0/24 maxlen: 24
188.220.223.0/24 maxlen: 24
188.220.227.0/24 maxlen: 24
188.221.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:70:57:bb:35:e9:6d:cd:9a:78:67:7a:a6:da:63:e1:fd:c6:97:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 27 14:07:01 2026 GMT
Not After : Oct 26 14:12:01 2027 GMT
Subject: CN=E323C1930F2F18ACEE9AE47CCBC62C556174D208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:19:27:32:be:5a:b1:af:c4:47:bb:9f:8c:
dd:c8:d4:91:9a:e0:99:64:32:7b:dc:fa:83:1c:8e:
33:d5:31:a5:62:4d:8b:a5:d0:30:65:85:d6:4f:5b:
52:4f:dd:3c:92:f4:2b:c1:71:8d:29:fc:9e:84:b9:
b8:b3:d5:6c:0d:94:52:b1:b5:d5:4d:7b:96:fb:f5:
3f:d5:dc:2d:37:76:ab:c6:7c:8e:91:bd:7b:1f:55:
ea:77:e0:ec:ec:63:e2:ad:a3:81:a2:4b:ec:a1:08:
be:dd:d5:f3:56:63:b2:bc:01:b0:dd:27:e1:d8:49:
cd:db:6a:50:7f:75:54:5b:b5:c7:ce:88:cb:3f:0d:
71:e1:f9:5a:0f:4e:5f:a1:16:b1:27:2b:03:76:90:
70:ed:68:a9:63:44:4b:d8:25:ee:9c:53:45:c1:4b:
06:22:61:81:28:31:ca:6a:bd:0e:7f:b7:1a:b5:79:
e3:ee:2e:9f:9f:44:c4:88:a4:c3:5d:2f:ff:78:15:
4a:e0:6a:ad:e9:f8:79:67:e0:d8:c6:07:d6:fb:e0:
9c:8e:6d:af:7a:82:9c:08:22:36:20:ec:74:91:88:
e8:48:29:9f:51:30:af:36:db:2f:b8:6b:2f:87:91:
1a:ac:b8:ec:c7:e5:6d:93:74:f4:cf:dc:46:90:b9:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:23:C1:93:0F:2F:18:AC:EE:9A:E4:7C:CB:C6:2C:55:61:74:D2:08
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.139.0/24
188.220.67.0/24
188.220.223.0/24
188.220.227.0/24
188.221.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:15:6b:5a:50:d8:fd:63:ec:9e:49:18:51:dc:f7:89:4f:7c:
5e:c9:17:40:61:3a:01:f9:aa:90:6d:d2:05:11:7f:e5:5c:89:
4d:7c:33:9b:06:71:fd:3b:fc:41:ef:4e:8f:2b:44:a1:9d:d0:
7d:cf:54:b9:c8:77:0a:3d:98:bc:24:a7:16:c9:ba:67:b2:fe:
4d:2f:6b:ed:4b:40:01:df:1b:f7:0f:69:34:02:d4:27:7d:41:
d0:95:9c:1c:1a:2a:30:5f:6d:1a:55:02:19:ce:60:1d:74:35:
56:8a:98:ec:e8:e5:3a:77:a9:80:74:ff:e9:cd:6c:fa:14:27:
c2:3a:84:fb:65:79:7c:3c:10:66:b6:d3:b1:9b:43:de:56:b9:
c5:d8:e8:31:39:57:98:1f:fe:c5:5e:46:c5:bb:b9:83:7a:46:
23:bd:3a:31:a6:5c:15:25:ff:67:fa:33:39:5b:f5:d7:3a:03:
fc:d2:94:1f:18:b8:22:9d:37:d0:e8:ed:43:1d:84:e3:fe:d3:
cb:bb:bf:00:bd:47:06:67:0a:74:0c:e9:b9:c4:c0:a3:65:e8:
1f:bc:88:75:36:bb:e9:86:11:54:35:cf:a6:7d:90:cc:0f:bf:
9a:c7:46:52:82:f3:12:74:47:1c:f7:cc:2b:da:96:6c:13:8a:
7d:f6:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 06:35:00 2026 by rpki-client