Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202264.roa
File: AS202264.roa (raw, json)
Hash identifier: Qsjx+2Hu+NHuFiJOlpVPJvd4ODeU+NQcfq8RcdoMKyU=
Subject key identifier: 53:22:8E:CA:40:9E:97:D4:04:00:41:8D:F0:43:DB:32:9B:23:71:2B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2038875011B9B75A8AD6D86D676A2BDE2A34111E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202264.roa
Signing time: Wed 08 Apr 2026 12:20:02 +0000
ROA not before: Wed 08 Apr 2026 12:15:02 +0000
ROA not after: Wed 07 Apr 2027 12:20:02 +0000
asID: 202264
IP address blocks: 82.38.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:38:87:50:11:b9:b7:5a:8a:d6:d8:6d:67:6a:2b:de:2a:34:11:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 8 12:15:02 2026 GMT
Not After : Apr 7 12:20:02 2027 GMT
Subject: CN=53228ECA409E97D40400418DF043DB329B23712B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:19:8c:c0:48:68:1c:e7:d1:23:96:00:9c:
98:03:c7:aa:21:9b:58:d2:62:a6:92:10:2d:67:2f:
d3:c2:c9:ec:96:99:2d:c8:b7:04:d3:05:57:df:d9:
27:cc:b0:2b:d9:2e:69:58:83:f9:19:95:0a:58:dc:
41:bd:b4:13:24:99:03:28:a4:58:8c:f9:b8:39:c4:
3b:af:5b:3c:45:70:7c:b0:64:ba:23:29:20:6c:1d:
79:38:b3:9e:64:56:1e:f5:9e:0e:50:74:a6:ab:bb:
fd:79:fb:c7:81:72:61:75:9c:96:fa:85:d9:0c:43:
c8:a0:48:58:6d:17:25:e4:de:9a:4a:bf:b7:43:4c:
22:be:73:f4:27:16:9f:fd:95:d6:c5:53:b1:59:50:
d6:f9:d2:29:ab:5c:18:4d:8b:28:42:64:11:bb:8c:
af:83:ad:b6:b3:1c:1a:00:84:a2:3a:67:7d:68:e0:
56:8b:ac:d3:a6:3d:37:20:f0:e5:f0:20:59:1b:c4:
9f:fb:9c:b2:38:6c:f5:7d:b0:82:4e:de:32:6c:f6:
8f:08:b8:d4:a5:e7:89:d8:4a:dd:3f:47:9e:a6:0d:
46:70:8a:74:60:37:c9:5e:a0:4d:39:5c:c4:10:ac:
43:6e:21:da:9e:2d:96:1a:fa:87:3e:8f:ff:2d:32:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:8E:CA:40:9E:97:D4:04:00:41:8D:F0:43:DB:32:9B:23:71:2B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202264.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.10.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:05:d3:b4:ba:09:8f:e2:bd:f6:ef:40:96:7c:01:54:3a:68:
49:08:3f:e9:31:68:55:13:46:b8:f1:fd:cb:6a:4e:9a:9c:5e:
12:71:83:5e:21:f7:fe:a2:3c:85:7e:f0:ad:1c:ae:4c:76:88:
58:6e:14:05:0b:19:9e:3e:f7:75:b0:31:9d:93:24:29:4b:14:
5f:cd:4a:df:ca:b5:2e:a4:6b:20:f2:70:f3:73:8f:fe:eb:49:
1e:c0:e8:cb:71:f6:c1:d1:1b:d6:2b:cf:d4:ac:80:96:7e:58:
c9:3f:6a:07:42:4a:fd:19:42:93:10:83:6b:7a:74:b4:2a:a1:
8d:e9:4d:73:35:f9:10:9a:b7:4e:ba:f5:a0:e1:4c:7f:71:48:
c5:ef:f5:c9:8b:cc:38:e0:18:5b:79:5f:46:e3:94:62:e6:93:
00:66:3b:57:00:e4:33:a0:bd:3d:b9:29:27:26:7c:1e:84:83:
f4:a6:47:f6:6a:7d:af:fb:bb:62:da:d6:98:6c:4b:b5:07:62:
f4:5b:aa:cf:0f:6f:da:48:00:3f:2f:d5:4c:8b:f2:9d:d4:84:
e2:2c:ef:a4:55:af:b7:ae:18:bc:d6:fe:04:74:29:3a:29:59:
db:93:ca:26:fd:ed:d0:79:92:5e:06:59:76:d8:a6:dd:dc:72:
d7:b8:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:07 2026 by rpki-client