Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202846.roa
File: AS202846.roa (raw, json)
Hash identifier: vTMPRqbhv00aHq+a6UxMRUHzPThUu3+dEqZbRYBAtcw=
Subject key identifier: 1C:83:77:5C:AC:E4:AC:A9:3C:7C:0E:60:0A:52:A4:F3:D5:30:10:A7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0B201C1DA3CF11B6C0C4EF65BF152874D26870CD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202846.roa
Signing time: Mon 13 Apr 2026 07:05:33 +0000
ROA not before: Mon 13 Apr 2026 07:00:33 +0000
ROA not after: Mon 12 Apr 2027 07:05:33 +0000
asID: 202846
IP address blocks: 147.79.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:20:1c:1d:a3:cf:11:b6:c0:c4:ef:65:bf:15:28:74:d2:68:70:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 13 07:00:33 2026 GMT
Not After : Apr 12 07:05:33 2027 GMT
Subject: CN=1C83775CACE4ACA93C7C0E600A52A4F3D53010A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:01:b1:1e:fb:4d:b7:0c:de:b3:78:a8:8b:
c7:14:3c:48:ec:06:7f:f5:8a:67:95:6d:66:9c:b7:
32:09:bd:58:38:fa:73:98:0a:88:bd:12:a9:32:b5:
97:cd:93:5f:ed:7c:05:47:15:07:53:b6:82:7d:43:
55:a0:39:69:85:3d:7b:e8:8e:03:46:ef:4f:1b:56:
df:9b:6b:d5:f2:2b:b8:aa:07:23:54:1c:5e:66:80:
df:d8:53:c2:25:13:6b:8a:90:a2:ef:32:09:77:89:
dd:9a:93:29:c6:5a:11:b5:db:f8:6e:8f:eb:48:1d:
97:1f:16:57:cc:23:18:ed:cf:66:0b:62:f4:7a:58:
dd:0d:a5:7e:d2:a3:60:4a:fb:37:71:3b:c8:5b:db:
63:1b:14:c4:3a:8d:f8:13:cc:c6:68:72:f2:1a:c1:
47:04:db:93:05:14:14:3c:9f:0d:ea:0a:19:b9:98:
9b:90:3f:88:a9:c9:73:cf:16:bc:f6:13:bb:0a:30:
d6:68:de:58:8c:1c:4e:4e:47:ae:be:7a:94:b2:f9:
bd:a8:5b:9d:7c:f1:2d:d8:c3:22:d5:6d:bf:c1:fb:
4d:87:d5:e9:1a:9e:11:a4:a2:93:fd:c2:38:13:6c:
61:41:1b:73:e0:b4:e4:ef:df:4a:fd:97:db:fd:71:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:83:77:5C:AC:E4:AC:A9:3C:7C:0E:60:0A:52:A4:F3:D5:30:10:A7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202846.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.1.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d6:72:27:0f:35:6b:a1:75:3e:68:e5:88:55:fc:0b:f1:8b:
00:73:77:ef:cb:b9:1c:0a:c6:d5:ac:80:34:81:be:08:2f:c1:
e8:db:0e:29:47:78:2a:c5:80:63:70:d7:5d:9c:dc:cd:25:6c:
56:13:2b:5a:d2:69:68:0b:16:58:24:68:1e:eb:d9:27:74:8f:
19:a5:11:4e:c5:69:40:cb:9f:4e:72:33:9b:9d:a0:d9:9a:43:
e5:e2:45:da:d0:93:b6:ca:a0:d3:e7:fb:41:7d:55:21:be:b2:
c8:99:18:de:3c:3b:5d:4c:09:49:29:ae:14:a5:5b:99:76:2e:
2b:2f:fc:30:51:6f:ad:fa:20:6a:c1:cb:24:47:75:98:97:41:
f9:0c:f7:37:7f:d4:9c:1a:7c:cf:4b:16:a2:07:62:06:a8:c8:
43:31:be:cf:1f:c8:66:da:b3:9d:af:d9:45:dc:7f:2d:56:27:
24:fe:2e:b6:d1:97:79:04:24:a1:12:79:13:02:0e:81:03:1b:
65:1a:77:22:2d:17:a1:ed:34:1a:31:23:fe:12:57:06:62:04:
d1:06:b2:68:e3:ef:91:b7:6f:7a:8a:ac:ef:68:6f:25:2e:c5:
01:27:98:d3:b1:8b:ab:15:96:80:af:32:8a:f7:d9:45:2b:3a:
e4:f6:d9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:51 2026 by rpki-client