Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
File: AS204765.roa (raw, json)
Hash identifier: Z7ohd04WniNM4KWUCXNtUdGpAcPTibRnmnYFBJfkJAY=
Subject key identifier: C3:16:E6:72:A0:1F:55:79:5E:7A:AB:BF:FD:B2:A6:51:75:1E:BF:1E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 297A57DED0BA8EAC63BF7A8448994B5A5298AB5F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
Signing time: Sun 06 Sep 2026 09:49:57 +0000
ROA not before: Sun 06 Sep 2026 09:44:57 +0000
ROA not after: Sun 05 Sep 2027 09:49:57 +0000
asID: 204765
IP address blocks: 143.14.252.0/24 maxlen: 24
162.141.91.0/24 maxlen: 24
162.141.139.0/24 maxlen: 24
167.148.68.0/24 maxlen: 24
167.148.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:7a:57:de:d0:ba:8e:ac:63:bf:7a:84:48:99:4b:5a:52:98:ab:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 6 09:44:57 2026 GMT
Not After : Sep 5 09:49:57 2027 GMT
Subject: CN=C316E672A01F55795E7AABBFFDB2A651751EBF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:28:4e:fc:d5:e8:7b:c5:0c:03:76:7a:5a:
0b:8e:0f:eb:73:47:24:86:e2:da:ca:70:36:f1:20:
d1:8c:20:aa:96:ca:19:92:f4:83:5c:0d:bc:ef:42:
05:9a:44:07:1b:69:17:cf:e3:08:78:d1:1f:10:d4:
4b:29:2d:ca:e5:aa:d4:55:c4:01:44:e8:af:1b:d6:
3f:b3:56:22:81:1c:8d:c4:78:35:74:cd:4b:dd:d8:
fc:1c:08:be:14:ef:cb:47:9c:67:80:9b:b8:1c:9a:
e0:70:72:02:12:fc:0f:af:06:ad:e8:6c:13:60:2b:
32:0d:fb:2f:db:3c:8a:ec:af:a0:27:a5:d9:6c:c4:
95:04:26:a2:23:9e:88:6e:be:ea:c2:50:d7:5e:6a:
4a:9e:61:f0:b6:58:c9:77:0e:5b:4a:83:b5:03:50:
81:cc:27:3e:e4:4e:d3:ed:f9:26:a1:fe:d6:f5:d8:
db:5c:aa:6a:ba:3c:b1:19:f2:b1:d7:fd:7e:d4:59:
79:6b:a0:54:19:9e:cc:32:37:e9:4d:de:a0:c8:36:
22:58:62:3b:c6:8b:eb:cd:86:39:aa:8f:b8:f2:4e:
21:5e:9a:6e:6d:8f:e8:ea:4c:c6:3d:ac:32:dc:90:
1f:02:19:eb:96:47:88:13:a9:a6:ee:d7:72:9b:69:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:16:E6:72:A0:1F:55:79:5E:7A:AB:BF:FD:B2:A6:51:75:1E:BF:1E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.252.0/24
162.141.91.0/24
162.141.139.0/24
167.148.68.0/24
167.148.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:09:9f:bc:89:f8:8f:8a:3f:62:2e:4e:bc:88:17:ab:cc:12:
e3:60:e7:9d:3e:d4:d3:e0:a9:a0:60:d5:2a:d9:ba:f7:e9:fd:
4b:2a:17:1f:ae:e0:5a:73:d9:52:4d:b1:69:bb:21:a8:60:36:
8f:95:21:eb:48:98:32:9b:2a:01:53:0f:9b:46:2a:95:a2:ba:
f4:14:b8:53:e8:55:a7:31:4f:53:0e:80:5b:4d:a3:15:45:6b:
1b:18:33:25:c0:b7:4d:09:1b:96:ba:ef:81:37:64:d5:a8:a7:
7c:9b:db:28:14:db:71:63:ee:83:47:c0:24:8c:c9:6b:71:4a:
86:ea:93:80:6d:f3:4d:7d:0a:22:3c:77:b1:26:a4:46:a2:9e:
00:9a:81:e5:b5:b0:b9:dc:6e:63:13:ac:6e:52:05:34:3e:9b:
c7:0b:6a:ac:03:c8:6c:f0:61:10:40:be:3e:09:1a:fc:b6:fc:
34:99:3f:3c:27:7d:e2:35:bf:0e:52:ee:4d:a1:4a:fc:ac:84:
ff:f3:21:b5:35:8d:65:65:13:3c:4e:b3:0d:02:75:1c:a1:34:
2b:a2:9d:5a:48:b2:42:13:63:bd:15:b1:26:bd:5b:30:b6:fd:
bc:5e:72:73:db:7b:1b:9a:51:95:b6:c1:4e:79:6e:ca:01:ff:
e1:92:d0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:01:33 2026 by rpki-client