Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201353.roa
File: AS201353.roa (raw, json)
Hash identifier: 1aCJuw9f/KT8nBgjq8ztN4/Lza+XSeXUXtNOty5Eglc=
Subject key identifier: B4:30:91:31:30:CD:34:A9:FE:FB:60:C3:23:5A:E8:D3:8F:1E:83:34
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7DE0656081CBF49FAAEF3B17ABCB3DCBCCB917B5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201353.roa
Signing time: Fri 27 Feb 2026 15:21:18 +0000
ROA not before: Fri 27 Feb 2026 15:16:18 +0000
ROA not after: Fri 26 Feb 2027 15:21:18 +0000
asID: 201353
IP address blocks: 2a0f:85c1:e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e0:65:60:81:cb:f4:9f:aa:ef:3b:17:ab:cb:3d:cb:cc:b9:17:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 27 15:16:18 2026 GMT
Not After : Feb 26 15:21:18 2027 GMT
Subject: CN=B430913130CD34A9FEFB60C3235AE8D38F1E8334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:7f:65:e7:ce:00:63:d3:a3:f9:44:9d:43:
88:be:5b:43:98:f8:01:86:89:44:e5:2e:02:14:f7:
6c:47:9a:19:66:27:af:22:a3:01:a7:70:c1:80:d9:
51:1d:dc:2b:20:ba:4b:d0:07:3c:c1:ca:2e:35:52:
e1:27:aa:6e:5d:a7:93:b1:e1:ac:2e:20:80:f6:c3:
84:5b:9e:67:0a:0e:a5:b3:f8:e4:d1:04:4b:a1:c0:
fd:fd:87:67:c9:be:37:c3:4b:e0:1f:9a:64:53:fa:
d0:4f:ca:fb:8f:13:44:52:ce:20:ca:61:e4:bd:8b:
66:4b:83:fc:20:ac:77:fe:92:7d:47:43:c5:08:b1:
7c:a5:2e:69:1e:ee:77:09:bc:ba:e8:c9:59:d7:f8:
16:45:68:06:65:da:04:92:21:a8:4e:13:f0:69:06:
f8:ba:73:27:86:8c:4a:dc:99:72:e9:e5:b3:d7:9e:
0f:ce:85:1b:ca:56:79:3a:25:86:ea:03:11:5c:5d:
1f:60:30:51:68:f6:68:0a:b9:e6:5a:69:de:29:d5:
2a:5e:9e:cc:5a:ca:1d:df:f5:02:0c:22:10:12:72:
1d:e1:b9:0b:6c:5e:bc:ca:6e:53:76:46:83:bb:ef:
1b:31:07:f0:ed:17:81:ec:bd:1d:7b:4d:ac:8d:0e:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:91:31:30:CD:34:A9:FE:FB:60:C3:23:5A:E8:D3:8F:1E:83:34
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201353.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:e40::/48
Signature Algorithm: sha256WithRSAEncryption
8f:75:dd:d1:bb:17:e5:4e:ae:c9:ad:18:72:b1:9d:75:99:9e:
f5:f5:02:74:ef:0c:6f:e9:51:2e:77:2e:14:58:45:db:8d:45:
c4:8d:da:5c:38:f8:f4:95:75:6d:6b:3a:89:f8:f5:46:9d:86:
36:8c:84:73:a5:b7:08:ff:bd:fe:fe:58:4c:ea:6c:ea:df:88:
51:c1:ac:dc:ce:47:4e:cc:32:9b:cf:87:d1:95:98:5a:6d:ea:
a1:f8:27:30:5a:e4:7e:f6:23:e9:01:64:5a:ce:9e:d6:d6:c3:
16:9b:98:49:97:42:82:87:24:a6:b8:be:31:9d:fc:8d:37:ed:
89:5f:85:f7:f0:a1:36:f1:89:a0:14:86:3f:2c:3c:d6:91:3f:
5b:a8:69:bb:1c:5d:8e:1a:35:3c:67:ce:be:e0:ef:3d:45:a6:
d7:24:d8:36:83:8e:fa:b9:7e:36:50:08:dc:1e:37:33:c3:8e:
cc:88:1e:cf:8c:37:ef:b2:e0:79:1a:03:c4:db:00:fa:ea:e2:
0e:81:b7:42:cb:7d:63:2c:63:e5:0e:75:4f:e1:d1:b7:7c:db:
32:79:d4:59:16:3e:c6:4f:1d:b9:98:4c:b0:4f:aa:31:a8:83:
df:d7:d0:a7:25:44:27:ad:da:09:62:83:26:00:c0:25:2a:3e:
68:d0:2c:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUfeBlYIHL9J+q7zsXq8s9y8y5F7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjAyMjcxNTE2MThaFw0yNzAyMjYxNTIxMThaMDMxMTAvBgNV
BAMTKEI0MzA5MTMxMzBDRDM0QTlGRUZCNjBDMzIzNUFFOEQzOEYxRTgzMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9iX9l584AY9Oj+USdQ4i+W0OY
+AGGiUTlLgIU92xHmhlmJ68iowGncMGA2VEd3CsgukvQBzzByi41UuEnqm5dp5Ox
4awuIID2w4RbnmcKDqWz+OTRBEuhwP39h2fJvjfDS+AfmmRT+tBPyvuPE0RSziDK
YeS9i2ZLg/wgrHf+kn1HQ8UIsXylLmke7ncJvLroyVnX+BZFaAZl2gSSIahOE/Bp
Bvi6cyeGjErcmXLp5bPXng/OhRvKVnk6JYbqAxFcXR9gMFFo9mgKueZaad4p1Spe
nsxayh3f9QIMIhASch3huQtsXrzKblN2RoO77xsxB/DtF4HsvR17TayNDsBPAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUtDCRMTDNNKn++2DDI1ro048egzQwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjAxMzUzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQ5AMA0GCSqGSIb3DQEBCwUAA4IBAQCPdd3RuxflTq7JrRhysZ11mZ719QJ07wxv
6VEudy4UWEXbjUXEjdpcOPj0lXVtazqJ+PVGnYY2jIRzpbcI/73+/lhM6mzq34hR
wazczkdOzDKbz4fRlZhabeqh+CcwWuR+9iPpAWRazp7W1sMWm5hJl0KChySmuL4x
nfyNN+2JX4X38KE28YmgFIY/LDzWkT9bqGm7HF2OGjU8Z86+4O89RabXJNg2g476
uX42UAjcHjczw47MiB7PjDfvsuB5GgPE2wD66uIOgbdCy31jLGPlDnVP4dG3fNsy
edRZFj7GTx25mEywT6oxqIPf19CnJUQnrdoJYoMmAMAlKj5o0Cxd
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:41 2026 by rpki-client