Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201907.roa
File: AS201907.roa (raw, json)
Hash identifier: 6/aMdID57jJXbYBFnucNoGLEA/cPHOOYM/pXQTubBeI=
Subject key identifier: E7:3C:83:72:CB:3F:F8:4D:4A:A5:53:A0:2B:36:C4:7B:F7:F6:AF:59
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 69442CE66EF6B951D4C5FD36A6B699532A5C40D8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201907.roa
Signing time: Wed 04 Feb 2026 05:03:16 +0000
ROA not before: Wed 04 Feb 2026 04:58:16 +0000
ROA not after: Wed 03 Feb 2027 05:03:16 +0000
asID: 201907
IP address blocks: 143.14.187.0/24 maxlen: 24
143.14.194.0/24 maxlen: 24
155.117.13.0/24 maxlen: 24
168.222.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:44:2c:e6:6e:f6:b9:51:d4:c5:fd:36:a6:b6:99:53:2a:5c:40:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 4 04:58:16 2026 GMT
Not After : Feb 3 05:03:16 2027 GMT
Subject: CN=E73C8372CB3FF84D4AA553A02B36C47BF7F6AF59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:27:05:67:10:89:df:79:ee:31:c0:0d:16:
9d:16:e4:3a:88:b5:8a:53:d8:c9:17:a1:9f:aa:12:
ff:97:a5:8d:32:a0:56:c0:28:fd:a5:64:88:4c:65:
4c:5e:96:15:4d:55:91:36:3c:9b:54:84:c2:54:b6:
23:73:37:dd:22:90:52:15:6a:a0:b4:fa:91:75:8e:
f3:ed:be:56:03:dd:84:97:e1:06:3d:6b:08:15:44:
b5:d7:26:09:1c:c5:b9:38:07:e1:74:57:8b:b6:25:
b8:8a:77:9d:63:ec:c9:c1:00:84:cf:b1:45:71:32:
e9:a2:7b:04:56:b8:76:3d:89:1f:ff:e5:26:10:c1:
6f:55:13:2e:f4:56:c3:10:5f:71:d1:62:f3:1e:a5:
bb:05:f7:67:f2:0b:34:58:ff:15:2a:2f:f9:7f:cb:
eb:ed:df:35:86:05:e1:be:3e:5a:36:67:e9:d4:4a:
96:45:49:b9:bb:b9:18:c0:b3:07:25:d5:a2:83:9b:
c7:d4:5d:51:62:c2:93:8d:ae:e6:83:99:2c:bb:81:
c8:87:9b:07:6f:e8:ab:94:0d:f5:26:c6:c3:df:ce:
d7:bd:a0:be:99:c3:ca:61:41:a0:31:41:7c:28:28:
52:57:2b:10:86:4c:5f:6f:b9:0e:f6:09:aa:9f:1d:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3C:83:72:CB:3F:F8:4D:4A:A5:53:A0:2B:36:C4:7B:F7:F6:AF:59
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201907.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.187.0/24
143.14.194.0/24
155.117.13.0/24
168.222.64.0/20
Signature Algorithm: sha256WithRSAEncryption
77:01:7c:3d:71:7d:f0:c7:86:ed:5f:2b:67:2d:97:2c:12:89:
ad:29:66:20:81:38:d5:d7:35:69:1d:1d:75:ac:39:27:aa:1b:
d6:89:9d:74:bf:d2:5a:b6:f2:0f:24:0d:b4:80:80:fc:00:37:
57:1b:54:32:ee:0a:51:2e:e2:91:f4:f2:21:d5:10:33:7d:f6:
4f:19:1a:de:62:00:d0:df:d7:09:f1:e0:74:b4:33:0b:18:39:
8e:14:c1:77:92:29:d2:be:bd:86:32:20:f1:c0:e8:5b:17:55:
36:43:27:0e:a8:7c:4b:ba:a6:6f:34:f1:91:b6:39:43:0a:e7:
0e:ff:a3:d0:27:ec:1a:5d:a1:e5:9a:75:f7:13:e3:3e:38:48:
3f:2a:ee:a8:d4:68:c1:6e:1e:13:8a:9c:01:51:7f:0b:09:c1:
8c:34:8a:3f:77:5c:5c:cd:54:1b:e1:fe:69:53:9e:04:1f:f7:
63:48:09:b0:cf:28:85:cd:8b:21:55:e5:a7:30:b2:4b:c4:ed:
17:5b:8e:5f:79:46:f2:3b:aa:91:22:93:67:af:f8:ea:bd:10:
c1:c9:75:ba:a6:f0:1d:54:7b:6d:83:24:99:d2:da:66:53:e6:
5f:a0:55:c0:3a:46:88:15:d2:77:12:51:e1:bd:d5:27:cc:bf:
eb:e5:8d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:49 2026 by rpki-client