Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201129.roa
File: AS201129.roa (raw, json)
Hash identifier: BnxUG3MSnYB2oYcoehuSDnqwYvvo8o4pC/ql+ZeOgdQ=
Subject key identifier: 0F:D9:C5:ED:4C:A9:F9:3E:65:72:F8:6B:12:55:C5:B5:B3:C0:CE:B2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 675DA38561A8D89DEB859C137A81782F70720D42
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201129.roa
Signing time: Fri 03 Apr 2026 10:42:23 +0000
ROA not before: Fri 03 Apr 2026 10:37:23 +0000
ROA not after: Fri 02 Apr 2027 10:42:23 +0000
asID: 201129
IP address blocks: 84.75.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:5d:a3:85:61:a8:d8:9d:eb:85:9c:13:7a:81:78:2f:70:72:0d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 3 10:37:23 2026 GMT
Not After : Apr 2 10:42:23 2027 GMT
Subject: CN=0FD9C5ED4CA9F93E6572F86B1255C5B5B3C0CEB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:0c:fd:1d:3e:b1:1d:e9:91:3d:d0:fd:83:
6c:b5:a4:bb:77:4d:9f:33:e1:25:26:f7:9c:5f:19:
1c:b3:15:94:db:9a:d9:45:54:58:16:97:d4:86:fd:
fe:0d:bb:8c:a8:a1:04:8b:cf:1d:28:8e:ea:aa:a3:
f8:6e:af:ca:b7:85:56:e1:71:04:58:c5:23:3a:4e:
8e:2c:0d:59:4c:94:37:73:af:ad:fa:e6:81:6e:16:
2e:b1:15:65:5b:91:ce:03:14:c7:e6:b8:62:bf:fe:
94:c5:94:5d:ab:2c:fe:8e:a5:f5:ac:56:70:6d:ca:
9c:95:8d:1c:ac:26:12:df:e5:70:73:40:cd:29:3c:
f8:05:63:55:5e:7d:7a:20:e0:1c:08:9a:a3:e2:91:
b5:67:32:a2:97:5e:0d:07:54:27:d8:05:66:15:54:
82:fd:7f:70:10:0b:fa:88:1f:ab:13:d8:8f:4a:2e:
d1:3d:2f:59:6a:d0:b9:ee:ba:5d:15:cd:0b:94:d6:
cd:a7:10:54:d6:b1:ba:c0:cb:91:c2:10:1d:a7:0b:
e4:60:d7:0e:6c:f9:61:d9:1d:77:4d:b9:a3:18:53:
b3:96:14:2d:d0:a4:3c:b2:08:f2:f3:7e:45:80:86:
85:c4:7f:da:de:f0:33:eb:ad:ad:50:b0:b2:ee:82:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D9:C5:ED:4C:A9:F9:3E:65:72:F8:6B:12:55:C5:B5:B3:C0:CE:B2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.24.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0b:51:bf:bb:c3:85:49:2b:79:4a:32:ab:da:6b:a8:ed:fc:
de:54:93:0e:96:10:65:66:8a:9b:78:ce:bb:db:b7:2f:24:f3:
35:ea:e2:84:3f:50:36:2e:1f:06:f5:8c:d9:9b:0f:84:63:1b:
b0:7b:31:2e:52:b9:64:18:ec:58:38:d9:c3:18:8a:9d:02:03:
60:4f:41:19:87:6b:5b:1a:6a:56:00:a0:2d:96:8f:37:6b:cd:
62:94:84:56:8c:28:a2:29:b9:8b:33:16:3e:6b:1b:75:26:30:
65:bd:6e:0b:e0:11:1d:64:92:74:90:8e:e6:1e:35:34:ea:48:
52:00:98:9a:26:fe:74:19:69:ed:f0:8f:bf:b6:61:10:b9:bd:
da:4d:85:5f:6d:9c:6b:86:f0:25:52:8e:10:d9:d2:f6:bb:f6:
62:d3:f8:de:9d:84:1d:1e:24:79:f6:d3:7e:23:3b:03:ab:a8:
d1:60:c2:0c:50:06:e4:eb:24:23:71:58:50:db:41:a0:2c:79:
22:3b:b9:f2:06:77:5a:c0:52:1e:e7:01:f5:19:b6:d9:ef:9d:
5f:62:2a:33:89:a1:fc:18:78:cc:9a:c4:d4:46:df:7b:f8:dc:
e2:1f:6c:2c:62:10:8d:80:c9:7f:21:bf:36:96:31:0f:88:ca:
e9:a2:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:10 2026 by rpki-client