Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204261.roa
File: AS204261.roa (raw, json)
Hash identifier: b64DXFM/uR7+CMPGteY48DmwoOjgziaxXCC/Nh/Tezg=
Subject key identifier: C9:D7:BE:24:9B:C2:98:4B:A3:17:0D:93:B0:6A:0C:BB:5F:1F:19:8A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6BD346582BE4F5C0B97E03DB0D4D22437846C892
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204261.roa
Signing time: Thu 29 Jan 2026 22:20:52 +0000
ROA not before: Thu 29 Jan 2026 22:15:52 +0000
ROA not after: Thu 28 Jan 2027 22:20:52 +0000
asID: 204261
IP address blocks: 143.14.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d3:46:58:2b:e4:f5:c0:b9:7e:03:db:0d:4d:22:43:78:46:c8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 29 22:15:52 2026 GMT
Not After : Jan 28 22:20:52 2027 GMT
Subject: CN=C9D7BE249BC2984BA3170D93B06A0CBB5F1F198A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:27:b5:25:3b:05:42:f3:b8:81:c9:55:d9:
b0:03:1a:86:84:52:18:72:c2:32:03:ac:8b:20:5c:
f3:6f:76:b2:d9:74:46:72:b0:da:68:6f:ee:d4:8a:
e3:81:55:80:b2:25:9f:a6:c4:b8:c9:fe:54:c6:f1:
d6:74:cf:c8:aa:10:d3:95:4e:ec:47:56:22:d3:36:
b6:32:fa:7c:aa:26:ea:48:aa:19:8c:c9:6d:ce:68:
67:be:89:35:48:0b:ae:f3:99:58:11:7e:fe:8b:2f:
a5:71:19:cf:98:0a:f4:84:59:d0:be:a2:ed:12:c0:
ff:c5:e0:7f:f9:87:07:62:45:44:b2:32:eb:17:b3:
9c:45:9a:2f:50:00:5b:86:8e:2c:92:5c:d8:44:02:
6f:92:ac:72:98:df:a4:53:15:f9:cc:70:ac:63:52:
31:74:31:fb:c6:11:1b:78:a7:74:a9:fa:a5:75:aa:
dc:d6:39:11:4a:d7:23:8c:5e:0a:b5:9e:b6:c3:e4:
f8:7f:c7:bc:d2:f4:b0:c4:a2:cc:44:4f:d9:72:89:
63:98:d6:e4:73:82:1e:28:23:fb:85:33:a7:51:55:
92:c6:f7:22:d5:bd:d7:f1:4f:20:67:bb:9f:dc:b6:
5f:90:1f:0a:63:dd:e1:62:9c:19:bd:9e:dd:ad:f9:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:BE:24:9B:C2:98:4B:A3:17:0D:93:B0:6A:0C:BB:5F:1F:19:8A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204261.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.46.0/24
Signature Algorithm: sha256WithRSAEncryption
12:09:97:f4:f1:49:a7:e1:93:e4:b2:c8:0a:f0:7e:db:3f:11:
75:44:2b:81:7e:28:07:7a:25:9a:4a:c4:9d:40:bb:73:87:d1:
21:00:76:49:08:4d:69:99:c2:ab:8c:74:22:95:9e:6a:20:f4:
cf:70:f5:20:f5:97:b1:94:d1:a2:ba:42:fc:62:a7:24:7e:7d:
45:58:17:ca:17:5b:70:68:9e:d0:93:24:cc:eb:c0:58:9e:0b:
ed:1c:a4:9d:cf:f4:fe:25:12:e3:28:56:51:20:22:73:ea:59:
68:fe:40:9c:1f:bf:e8:e5:a8:ee:20:42:15:c6:94:b9:35:d1:
2f:64:0b:d9:cc:ae:93:41:8d:b6:92:a6:75:44:3d:36:04:16:
6f:bf:37:8f:9c:84:db:f0:87:40:16:ad:b9:b3:34:69:df:99:
3d:02:89:8c:14:f0:af:f6:81:06:62:85:f3:55:93:49:7e:89:
e7:86:a9:06:e5:18:67:08:73:30:a3:d4:47:2e:d7:64:9e:3c:
b1:b0:3f:1d:17:35:3e:96:3d:84:2b:4b:07:8e:17:1a:70:58:
ee:d2:8f:73:00:f5:b8:07:a1:c2:e5:64:85:4c:a1:d3:bf:5f:
11:5f:21:d0:3c:76:dd:af:42:4c:d8:f9:17:4b:ee:59:ab:c7:
fd:85:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:45 2026 by rpki-client