Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206378.roa
File: AS206378.roa (raw, json)
Hash identifier: M5FzaaxH1k4qzF92uwOgRhjQ3qI29R4AbEKtR9BSAtQ=
Subject key identifier: 20:54:B0:54:3A:9C:5B:C7:A2:E7:EB:EB:BB:BD:ED:62:8A:F6:A1:BC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 34F982E6A9CC5B3B4DD289AE290E7E8268CBD6F1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206378.roa
Signing time: Tue 29 Jul 2025 13:51:43 +0000
ROA not before: Tue 29 Jul 2025 13:46:43 +0000
ROA not after: Tue 28 Jul 2026 13:51:43 +0000
asID: 206378
IP address blocks: 143.14.59.0/24 maxlen: 24
143.14.67.0/24 maxlen: 24
143.14.75.0/24 maxlen: 24
143.14.164.0/24 maxlen: 24
167.148.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f9:82:e6:a9:cc:5b:3b:4d:d2:89:ae:29:0e:7e:82:68:cb:d6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 29 13:46:43 2025 GMT
Not After : Jul 28 13:51:43 2026 GMT
Subject: CN=2054B0543A9C5BC7A2E7EBEBBBBDED628AF6A1BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:7a:6a:58:19:d5:b0:a0:c4:8b:87:a1:b7:
c8:c0:25:de:8e:01:60:e4:fc:46:55:45:d7:f6:60:
b1:cf:61:3e:58:ae:28:a2:57:68:e0:f1:66:89:44:
2b:78:57:35:b4:95:c3:0d:68:a3:37:d1:99:6c:11:
27:71:7b:01:03:05:ee:6f:bf:6f:db:9c:7f:c8:41:
59:e9:fa:34:e6:95:b7:46:96:3d:46:8d:f7:27:1a:
eb:be:d3:8a:09:cf:c8:35:05:07:54:46:a7:b9:7c:
7e:14:1f:bd:6e:db:42:16:41:c2:3a:07:2a:e1:60:
bc:16:d3:7a:d4:81:0f:73:30:c5:0f:99:b6:e7:92:
c6:89:64:4c:ed:36:c5:e8:8f:0e:ed:4d:fc:ae:e2:
68:fc:95:fb:26:84:e8:47:1a:4c:21:71:e6:d2:3c:
be:3b:a8:da:ec:f3:2b:b5:59:eb:d1:b8:a2:65:5b:
bc:7e:49:2f:81:44:48:75:4e:76:72:9e:8a:11:17:
78:90:be:68:2b:f6:61:c0:55:43:17:0e:8b:a9:6a:
8d:0f:d9:a9:88:22:ad:2b:6e:bc:52:60:2c:88:67:
96:04:92:38:2b:10:e1:13:e6:44:c5:fe:46:ee:65:
13:14:93:e9:ed:c3:0e:1b:a5:6a:87:ed:cd:90:31:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:54:B0:54:3A:9C:5B:C7:A2:E7:EB:EB:BB:BD:ED:62:8A:F6:A1:BC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206378.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.59.0/24
143.14.67.0/24
143.14.75.0/24
143.14.164.0/24
167.148.161.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:8e:b8:df:66:44:e9:68:ff:bd:b3:37:dd:2f:3f:b9:fe:8c:
68:ed:ee:a5:89:c9:a1:35:e7:78:51:ae:39:d3:91:4b:7a:fd:
1a:9f:cc:f7:1a:9d:1a:4e:cc:ca:0f:36:d9:75:66:ed:bf:4e:
27:fa:8e:6f:0b:c7:5e:b5:6c:57:17:6c:ab:85:f6:71:a5:9d:
80:86:5d:d1:ae:a2:db:4f:28:33:9d:01:7c:86:3e:90:d1:74:
c6:32:66:ea:28:a8:c4:bb:a9:ac:d4:ca:7f:7a:c3:7b:a2:ee:
9f:40:fe:82:e7:c6:ba:a3:6c:a0:b7:39:4b:ad:f0:fa:48:9b:
c8:90:f1:6b:06:aa:fa:c8:4f:08:84:97:6b:ec:93:30:71:2b:
b4:31:a1:de:4e:81:8b:f3:17:31:5a:b5:15:1c:2e:21:41:52:
8e:38:64:7e:eb:62:dc:04:02:a3:9c:d1:94:26:80:e2:63:39:
20:ea:ee:aa:b1:72:9b:d6:b5:6a:1f:8b:94:ab:f4:93:9a:a1:
08:e4:8b:7c:99:92:2e:9b:9d:8e:ee:67:8d:c4:06:dc:1b:5e:
7b:23:33:42:53:a2:b2:3d:44:86:ea:42:af:e2:55:53:49:b5:
43:a2:47:bd:a5:1f:fc:94:4b:df:1c:7e:86:dc:50:83:41:90:
57:c5:36:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:39:55 2025 by rpki-client