Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201724.roa
File: AS201724.roa (raw, json)
Hash identifier: GbVI7gBfXVLKaxwyXk5FuK8MX2p14bnVEqvpzxbXSXE=
Subject key identifier: F6:3A:2B:9F:F1:5B:C3:AB:0B:B2:76:FA:5B:1E:12:A7:45:EE:40:E6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 69E29B1424064A819B1D235150E1DE08E11154B5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201724.roa
Signing time: Wed 08 Apr 2026 08:59:47 +0000
ROA not before: Wed 08 Apr 2026 08:54:47 +0000
ROA not after: Wed 07 Apr 2027 08:59:47 +0000
asID: 201724
IP address blocks: 168.222.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e2:9b:14:24:06:4a:81:9b:1d:23:51:50:e1:de:08:e1:11:54:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 8 08:54:47 2026 GMT
Not After : Apr 7 08:59:47 2027 GMT
Subject: CN=F63A2B9FF15BC3AB0BB276FA5B1E12A745EE40E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bf:8b:1b:16:c9:7f:f5:a0:18:53:e3:03:fd:
7c:5a:c8:bc:89:b0:ed:e4:ba:3c:e3:fd:b2:86:d4:
af:31:d5:e8:0d:a8:01:31:8c:74:2a:c0:b1:74:40:
7e:4d:b8:a3:1c:b7:43:fa:db:65:e6:dc:e5:71:8b:
2d:4f:39:7a:77:9b:96:4b:0e:32:ee:1f:31:86:3c:
08:a5:00:25:4c:44:9a:08:5a:d6:bd:6f:e4:d8:8e:
76:16:96:cc:f4:ea:bd:cd:26:dc:db:08:8a:53:16:
78:ea:6d:83:c9:0c:cf:94:07:b8:3c:1e:a7:45:ae:
43:d6:14:8d:33:a6:92:09:35:96:75:e9:a5:6e:91:
4a:05:95:1a:c4:1f:b5:2c:4b:70:ca:52:56:c0:44:
95:67:80:be:b0:f7:a4:b4:a4:c1:63:a7:4d:0c:bd:
06:cf:ae:ea:ef:f6:b3:b7:6c:c7:85:4f:71:0e:5e:
db:d4:65:22:43:3d:a4:d2:af:00:7e:ab:2b:00:a2:
a7:17:08:07:d7:34:e1:58:46:09:c1:f4:b6:1c:e3:
b0:76:db:7c:c5:6a:bf:92:1f:d4:d4:fc:49:d7:b2:
f6:59:bd:48:47:9c:82:99:c2:43:6e:8e:64:7a:ea:
9b:6d:b6:3f:56:14:f3:68:ca:b1:25:e8:1d:94:f1:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3A:2B:9F:F1:5B:C3:AB:0B:B2:76:FA:5B:1E:12:A7:45:EE:40:E6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f2:d5:78:55:ff:5e:af:4c:4c:13:84:29:d4:98:7a:f3:6c:
2c:f7:a8:01:08:5e:22:7a:b0:d4:13:9f:69:4f:3a:00:06:75:
5e:a1:1d:46:e6:c1:49:8a:e7:d3:f2:2f:05:33:45:7e:ca:1a:
f4:8a:00:f5:42:f6:ac:94:08:4f:84:27:54:9c:cc:1e:9d:d9:
d3:32:e1:24:a6:b7:5e:8b:3d:1a:ec:e0:47:96:c7:40:cc:6e:
83:37:9e:1c:4d:2d:a3:c6:2e:2a:87:9b:a4:a4:3d:93:b8:3f:
32:65:bf:70:85:77:24:7b:e3:30:5c:11:95:1b:15:e4:0b:fa:
93:e1:21:f7:12:6b:1f:e9:04:da:73:41:77:78:22:e0:43:75:
92:cc:6d:9e:14:78:5c:a2:bf:fe:59:99:a8:b8:03:09:e1:80:
df:07:8b:9e:27:02:bf:bd:79:7c:b8:18:30:df:7e:c8:b0:d2:
38:5b:de:b4:8a:cf:a7:e6:ad:21:81:37:83:36:28:1d:b6:4c:
c9:67:17:0f:6b:8b:00:f7:e3:d6:e3:66:4d:07:16:d7:8b:dd:
c2:34:2c:32:08:00:29:d0:0e:1c:d4:73:37:19:94:34:1e:aa:
95:57:02:c0:04:05:14:ba:4f:fb:b7:68:1e:b7:40:ce:85:1c:
8d:c5:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:10 2026 by rpki-client