Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201256.roa
File: AS201256.roa (raw, json)
Hash identifier: fBRfDThbXNroQ2hDGdWEkxlBmmxKM6gorGb15IaGqFs=
Subject key identifier: 4F:80:56:DF:D1:45:35:53:C0:97:C0:D2:F7:E3:E3:59:9A:7C:0A:19
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0D3CA6D42C6925FEB70BFF7CC1E67C138050BFD2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201256.roa
Signing time: Tue 03 Nov 2026 12:32:10 +0000
ROA not before: Tue 03 Nov 2026 12:27:10 +0000
ROA not after: Tue 02 Nov 2027 12:32:10 +0000
asID: 201256
IP address blocks: 82.21.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3c:a6:d4:2c:69:25:fe:b7:0b:ff:7c:c1:e6:7c:13:80:50:bf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 3 12:27:10 2026 GMT
Not After : Nov 2 12:32:10 2027 GMT
Subject: CN=4F8056DFD1453553C097C0D2F7E3E3599A7C0A19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:81:78:fa:40:96:e6:e9:83:a6:25:f0:1b:
17:14:6e:97:9b:60:53:1a:a2:b7:29:02:08:9f:a3:
1a:de:d8:f0:5c:e2:6a:aa:72:06:c8:f0:fb:c8:6a:
45:8b:95:f4:62:9d:79:85:6d:a6:2c:bd:d0:4b:0b:
79:bf:ac:af:1d:ba:06:db:db:bd:03:96:97:ae:3d:
23:32:e3:39:ff:9f:50:36:75:ad:c6:b2:61:a9:96:
57:af:e3:37:20:f6:f3:85:89:5f:8f:29:f7:c2:db:
37:ef:15:17:dd:ae:17:08:47:b7:f3:e0:9d:cb:9a:
55:8d:27:cd:25:fa:b9:4c:be:b7:dc:f9:23:62:69:
d1:8a:53:0a:3d:2a:1a:00:0e:f2:ff:ed:95:ab:9b:
44:c3:ae:17:ba:17:19:15:00:e9:b4:54:b1:77:0d:
4b:f2:4a:75:b1:63:ec:21:e7:f5:68:0f:b2:95:44:
0b:9e:27:69:41:c6:72:ac:a5:03:5c:f1:af:82:fb:
a2:f7:d8:71:88:2a:02:eb:18:61:11:b1:6c:66:1d:
b0:82:bf:d6:bd:3e:30:62:a8:7c:54:3e:db:60:c9:
a8:65:42:dd:fe:cd:13:0b:c4:ee:39:f2:9a:52:25:
09:80:62:f1:57:b3:b3:6d:4a:65:0c:2b:d6:9d:fa:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:80:56:DF:D1:45:35:53:C0:97:C0:D2:F7:E3:E3:59:9A:7C:0A:19
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5f:28:6a:52:a7:1b:1b:fc:75:81:f1:f6:15:2d:0f:9f:90:
00:e9:df:2b:9b:7b:06:3c:cc:08:43:5a:8f:26:0c:72:ba:8e:
74:4e:eb:77:97:e9:18:55:45:8e:d1:2b:62:1e:41:99:9e:47:
5e:58:41:60:47:e3:31:2a:91:ef:9c:10:5b:4e:83:f3:0d:d3:
22:f5:21:43:32:33:96:0e:b7:4a:d8:a7:b5:90:63:a2:86:41:
e3:2c:c8:e1:de:23:4c:9c:a0:3d:41:82:5d:d2:fc:a0:c6:a7:
8d:f4:0f:69:53:8c:a7:c2:25:a3:ca:8c:76:cb:a6:90:57:af:
75:93:ea:b3:ec:68:2b:70:f7:0f:88:73:33:93:4f:49:a6:1b:
8a:c1:4f:f0:24:a5:a1:66:a6:f4:7c:a9:7e:8b:31:f6:d2:1f:
08:b0:19:97:0d:50:32:65:0b:0a:0c:a7:ae:56:0f:14:0a:b4:
ba:29:00:ea:de:4c:e4:38:9e:3a:53:17:d9:03:8c:1c:92:70:
76:26:a6:15:2a:da:a6:88:4c:e6:63:3f:ff:93:84:7f:f2:95:
a2:83:66:b7:97:b4:d9:80:8f:ed:93:8b:83:aa:40:5d:41:1d:
82:2c:2a:2d:80:53:b3:e7:b4:52:54:7d:5f:23:1c:6d:d8:8b:
6a:41:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:47:40 2026 by rpki-client