Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
File: AS204765.roa (raw, json)
Hash identifier: WdqFP/pqHgab1iBIiljTnmcKCjEHMK/Wg9JnILewwlY=
Subject key identifier: 0F:09:BE:20:BB:B3:84:E9:04:D8:74:E7:F8:64:5B:1D:60:96:96:33
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1AAECC0F019D8D9B721F413530B21BFDAADECD25
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
Signing time: Wed 28 Oct 2026 12:36:26 +0000
ROA not before: Wed 28 Oct 2026 12:31:26 +0000
ROA not after: Wed 27 Oct 2027 12:36:26 +0000
asID: 204765
IP address blocks: 143.14.252.0/24 maxlen: 24
162.141.139.0/24 maxlen: 24
167.148.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ae:cc:0f:01:9d:8d:9b:72:1f:41:35:30:b2:1b:fd:aa:de:cd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 28 12:31:26 2026 GMT
Not After : Oct 27 12:36:26 2027 GMT
Subject: CN=0F09BE20BBB384E904D874E7F8645B1D60969633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:e1:5e:2e:53:30:42:af:6f:0c:b9:88:ff:
6a:3f:57:8a:b5:ba:28:10:43:c7:03:f2:37:f8:28:
a3:b4:74:60:cc:86:9f:b8:38:5d:a5:d2:fa:7b:7d:
9e:70:e7:36:f9:7e:ef:48:9f:36:be:7a:91:cc:87:
84:d0:69:c8:30:f0:aa:8f:b1:89:2c:3d:22:a6:3b:
fa:3b:9b:15:2f:6e:45:27:20:08:ea:23:64:46:83:
57:d9:52:b8:27:ce:f0:74:80:77:69:25:a0:fe:e5:
24:ec:95:ac:57:84:fa:32:41:c9:0c:a2:31:8d:e4:
67:e3:44:e7:6e:73:7e:13:dd:f2:3c:f0:82:41:7e:
ae:56:08:0b:36:5b:a6:69:9c:28:7b:40:1f:27:02:
ea:1d:13:0a:69:3a:f8:b6:8b:36:b0:ec:c7:36:55:
e1:8c:86:b5:3e:11:5f:37:61:de:70:07:0d:9a:b0:
20:9a:88:34:47:a6:68:89:b5:ac:3a:e5:03:b0:d6:
77:7c:ce:3f:fa:3a:a7:8c:91:85:0e:df:11:8e:ec:
ef:7c:da:36:64:db:ec:d6:ec:d3:94:6b:66:a8:bd:
64:c2:44:4a:79:16:79:fc:b6:0b:88:37:2d:61:82:
b4:16:b5:c5:f5:fa:a6:41:e8:78:e9:a4:3a:22:3b:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:BE:20:BB:B3:84:E9:04:D8:74:E7:F8:64:5B:1D:60:96:96:33
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.252.0/24
162.141.139.0/24
167.148.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a1:a4:cf:95:75:37:5e:88:95:79:75:99:db:e7:60:37:6a:
b0:25:13:ce:76:ee:25:e6:e4:8c:2a:a8:75:59:21:1e:a8:0e:
20:e7:47:04:83:4e:d8:c3:87:90:d9:be:8d:2c:bd:b7:e4:51:
a8:db:4d:db:e0:79:60:cb:40:67:a8:54:94:e8:50:37:6e:3f:
79:90:ac:b1:2e:f5:49:70:a2:60:90:10:d6:85:52:7a:08:bb:
df:ce:01:54:41:1c:bd:77:32:4f:e7:7f:a8:47:cf:da:3f:0d:
fb:9c:00:55:b1:21:1c:72:44:02:82:0b:70:7a:3c:64:28:fc:
36:5d:9b:4b:2c:70:88:90:69:8c:b8:1f:36:27:42:24:43:50:
c7:66:eb:2d:9b:cb:25:a4:aa:50:dd:3e:f8:49:33:5a:8a:83:
90:4e:a5:2c:85:8c:8e:37:50:40:b6:e1:1d:31:66:8c:7d:14:
c6:34:b8:3d:3f:e8:ff:a6:c5:a9:48:a3:c1:2f:e9:94:1c:86:
28:f8:bd:aa:da:e3:bb:67:bd:70:35:70:fc:38:28:c0:37:68:
75:9c:80:d6:8f:7a:59:4b:d7:12:21:71:ba:e7:9e:a7:70:ff:
9c:0f:af:2e:47:5d:9b:55:01:f1:99:34:75:19:22:ba:01:a2:
a2:3a:37:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:13:11 2026 by rpki-client