Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201694.roa
File: AS201694.roa (raw, json)
Hash identifier: jvVZc82rFseNP0wFKGoMTe+/yHgWjAbRzwjCoZwkkNY=
Subject key identifier: 67:30:42:A2:FE:73:B2:41:A8:93:B0:34:0B:04:5C:D6:E2:EF:74:BD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 52A0C332003D001FC9B3BC71F58F8744EE729F07
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201694.roa
Signing time: Wed 25 Feb 2026 14:37:47 +0000
ROA not before: Wed 25 Feb 2026 14:32:47 +0000
ROA not after: Wed 24 Feb 2027 14:37:47 +0000
asID: 201694
IP address blocks: 155.117.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a0:c3:32:00:3d:00:1f:c9:b3:bc:71:f5:8f:87:44:ee:72:9f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 25 14:32:47 2026 GMT
Not After : Feb 24 14:37:47 2027 GMT
Subject: CN=673042A2FE73B241A893B0340B045CD6E2EF74BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:99:73:9a:09:b0:03:2b:51:8c:d6:10:0a:
8a:d9:fa:2b:5e:c6:5c:db:34:c0:f2:78:dc:70:ee:
bb:ae:88:e8:c8:1f:d3:fe:de:c7:48:a5:5c:d7:6d:
e4:8c:7d:1d:4c:2e:4a:57:c1:7a:07:44:f4:fa:07:
95:ed:51:94:6f:47:db:9d:80:0c:f3:63:58:2a:55:
e6:a5:20:2e:d2:87:d4:c7:54:c3:9d:ac:bb:da:b9:
70:c6:ad:f5:21:f4:c5:02:03:94:56:d9:eb:e8:8f:
d5:38:e9:56:15:af:91:d4:bc:a1:9e:4c:66:a1:30:
b9:de:79:fa:9e:a8:c3:ed:13:e0:ff:30:7a:6d:b3:
45:d1:aa:7a:23:7d:90:9f:23:50:a0:b4:72:22:e4:
bc:83:0f:d3:37:62:02:49:74:7c:d5:c3:11:e6:75:
3f:9c:6f:ba:36:5d:0c:b2:3e:3d:5f:b8:1a:26:de:
38:5a:84:ab:7d:c0:13:c7:34:67:59:6b:a1:64:3c:
05:ad:39:99:6c:90:10:02:86:b8:02:2b:45:33:e0:
6f:86:71:09:3f:62:cb:1d:95:7f:49:4b:70:c1:55:
60:4c:33:3a:1c:14:ed:26:a2:a9:16:bb:99:26:64:
c0:a4:44:d8:7f:8f:39:cf:2e:7a:99:63:2f:2b:8c:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:30:42:A2:FE:73:B2:41:A8:93:B0:34:0B:04:5C:D6:E2:EF:74:BD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201694.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.140.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c3:62:41:ff:9d:20:76:45:68:f2:42:04:4d:f0:23:01:0a:
99:cf:f0:83:6c:fc:a4:d0:4d:36:52:72:c4:7e:96:38:17:4d:
2c:15:50:3a:61:41:6a:29:68:a9:50:2d:53:f1:08:02:16:44:
cf:39:9d:4d:7a:be:d4:44:c8:b5:12:5e:6d:69:2c:11:fa:20:
0d:97:88:70:57:9e:aa:fc:44:b9:ef:53:06:e3:0f:da:32:15:
00:ba:fd:1a:c3:54:bd:d2:51:28:39:89:c9:10:fc:3c:ca:f3:
15:95:02:61:50:61:f4:7a:8f:86:bd:71:88:3b:a4:23:e0:ae:
e3:5e:a2:5c:3c:43:98:ac:78:61:0b:88:11:af:0f:82:4c:d0:
75:d3:1d:79:d1:70:c6:05:62:d5:b1:7b:64:19:5d:33:ff:44:
d5:4e:dc:00:f3:95:1c:59:61:e8:ab:6e:27:28:c8:9e:79:10:
b1:80:f2:55:c7:5f:e4:53:aa:eb:79:7d:d1:dc:e7:b0:a0:0a:
23:56:7b:e6:6c:52:88:2d:57:80:8b:9b:dd:b5:a5:d6:eb:80:
f2:0e:fd:05:b7:02:c8:87:e0:14:3d:2f:65:8e:95:5e:bd:2d:
31:6c:e2:fa:f6:52:14:69:5c:4d:b9:eb:12:6a:99:f1:93:cf:
4d:3a:49:37
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUUqDDMgA9AB/Js7xx9Y+HRO5ynwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAyMjUxNDMyNDdaFw0yNzAyMjQxNDM3NDdaMDMxMTAvBgNV
BAMTKDY3MzA0MkEyRkU3M0IyNDFBODkzQjAzNDBCMDQ1Q0Q2RTJFRjc0QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVnJlzmgmwAytRjNYQCorZ+ite
xlzbNMDyeNxw7ruuiOjIH9P+3sdIpVzXbeSMfR1MLkpXwXoHRPT6B5XtUZRvR9ud
gAzzY1gqVealIC7Sh9THVMOdrLvauXDGrfUh9MUCA5RW2evoj9U46VYVr5HUvKGe
TGahMLneefqeqMPtE+D/MHpts0XRqnojfZCfI1CgtHIi5LyDD9M3YgJJdHzVwxHm
dT+cb7o2XQyyPj1fuBom3jhahKt9wBPHNGdZa6FkPAWtOZlskBAChrgCK0Uz4G+G
cQk/YssdlX9JS3DBVWBMMzocFO0moqkWu5kmZMCkRNh/jznPLnqZYy8rjNxPAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUZzBCov5zskGok7A0CwRc1uLvdL0wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjAxNjk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3WM
MA0GCSqGSIb3DQEBCwUAA4IBAQBmw2JB/50gdkVo8kIETfAjAQqZz/CDbPyk0E02
UnLEfpY4F00sFVA6YUFqKWipUC1T8QgCFkTPOZ1Ner7URMi1El5taSwR+iANl4hw
V56q/ES571MG4w/aMhUAuv0aw1S90lEoOYnJEPw8yvMVlQJhUGH0eo+GvXGIO6Qj
4K7jXqJcPEOYrHhhC4gRrw+CTNB10x150XDGBWLVsXtkGV0z/0TVTtwA85UcWWHo
q24nKMieeRCxgPJVx1/kU6rreX3R3OewoAojVnvmbFKILVeAi5vdtaXW64DyDv0F
twLIh+AUPS9ljpVevS0xbOL69lIUaVxNuesSapnxk89NOkk3
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:44 2026 by rpki-client