Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS202071.roa
File: AS202071.roa (raw, json)
Hash identifier: bKPo2hK7w53p/wbpeEO0RwlhzDTwoH5ytzmHjrqcDbI=
Subject key identifier: 1E:8E:4C:6F:A6:A3:8C:45:A6:83:40:20:53:B8:81:DE:55:44:55:4E
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 2C02F6590FB0BA84802EB4DD01A917A53C92C36A
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS202071.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 202071
IP address blocks: 5.199.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:02:f6:59:0f:b0:ba:84:80:2e:b4:dd:01:a9:17:a5:3c:92:c3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=1E8E4C6FA6A38C45A683402053B881DE5544554E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:52:0a:ff:61:ba:45:d7:53:b1:2e:c8:42:
6b:bc:4d:9c:2f:41:54:10:9f:50:cb:b7:42:d9:4d:
69:7f:5c:eb:85:9b:fb:54:85:db:b2:2c:b2:72:db:
ae:87:f7:fa:c3:0b:13:4d:88:74:af:86:7f:11:e0:
0a:16:2f:cc:ed:d6:08:7b:a2:5b:68:43:b0:4d:a2:
23:59:d7:ba:d6:9c:80:4c:a8:2b:f9:58:90:3b:5f:
6a:6e:74:de:6d:63:a4:e9:e7:ae:ce:56:ce:b6:a9:
1c:0d:18:d6:6e:9c:13:2f:cc:49:4c:0d:8b:70:11:
34:13:e1:07:d0:db:0b:22:5c:fa:cf:ab:cd:ca:cf:
b3:db:52:ef:1e:b8:fb:9a:2d:ce:24:b5:62:4e:f9:
6c:9d:d0:cf:54:0d:2b:b8:24:78:ed:10:7c:b0:4b:
0c:8c:d0:b2:c6:9a:93:c1:09:29:96:ae:2a:dd:19:
e7:67:51:a4:2c:84:38:f7:a7:26:8d:c1:8b:62:af:
22:fb:dd:60:98:ef:2e:a4:00:af:b7:01:c2:da:0e:
9d:87:59:bf:17:ea:3a:1e:c4:05:a9:00:41:59:6f:
e7:42:8b:65:58:0d:ee:be:ab:e9:09:83:12:1a:51:
d4:02:50:9b:71:b8:64:3b:ce:1b:9e:b1:17:e9:e8:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8E:4C:6F:A6:A3:8C:45:A6:83:40:20:53:B8:81:DE:55:44:55:4E
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS202071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.9.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:08:fd:59:96:6c:21:4f:9b:fc:a8:2c:c7:5f:f7:28:b4:2a:
00:1c:75:51:b0:b1:e2:e7:9c:15:5c:60:f4:6b:57:65:e2:6a:
16:24:89:36:60:de:3d:f6:ac:22:51:ba:e3:41:19:7c:22:ae:
5d:ab:b4:3c:31:9b:64:98:cf:f9:12:41:fb:b2:8c:bc:bf:c9:
f3:43:71:71:4c:46:e3:7c:45:14:7a:31:9a:3c:6f:61:fa:a0:
f0:42:49:9e:33:a0:7e:62:eb:e6:e3:18:7d:18:11:21:65:d5:
96:f6:16:21:e9:e4:5a:17:5e:0d:09:79:4a:3d:87:4d:65:9a:
db:39:9f:16:93:6a:f4:d9:e8:61:68:af:07:09:4c:99:2e:80:
57:05:d3:7d:98:88:6a:38:2a:ad:f8:a2:19:7b:c6:0e:fd:c6:
48:cb:14:a8:c0:0f:36:32:ef:20:af:06:c1:bc:dc:08:aa:d7:
a3:ac:d1:f3:62:5b:4c:21:e6:30:59:01:d9:a6:16:ef:c9:48:
8d:c0:c4:8f:a7:28:6f:66:68:fe:c1:eb:4a:be:9d:5c:ca:c8:
b2:f2:a8:92:ff:a8:a6:6e:50:45:11:a4:a5:ea:94:51:3c:2d:
ff:21:72:8a:3f:00:b9:21:dd:95:d0:45:4a:9b:d8:a9:8c:6f:
aa:fb:d7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:29 2026 by rpki-client