Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201364.roa
File: AS201364.roa (raw, json)
Hash identifier: yfonlcCqRO+JqHvP4vtO/D7oN2favWAivChD6z2GDeE=
Subject key identifier: B2:7C:CF:A6:25:8E:18:68:6B:5F:0A:85:69:E0:F5:42:88:B4:C8:5C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7914924BB6DC3C98F676411C542D8D2AD88878A9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201364.roa
Signing time: Mon 09 Feb 2026 23:08:22 +0000
ROA not before: Mon 09 Feb 2026 23:03:22 +0000
ROA not after: Mon 08 Feb 2027 23:08:22 +0000
asID: 201364
IP address blocks: 2a0f:85c1:8ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:14:92:4b:b6:dc:3c:98:f6:76:41:1c:54:2d:8d:2a:d8:88:78:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 9 23:03:22 2026 GMT
Not After : Feb 8 23:08:22 2027 GMT
Subject: CN=B27CCFA6258E18686B5F0A8569E0F54288B4C85C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:61:75:b5:b8:ee:9e:88:1e:6e:04:9b:2a:
c7:4b:ef:56:02:a1:df:4c:8e:b4:6e:a6:ee:1c:08:
89:c2:98:f0:30:ff:ed:3c:07:95:34:c3:3a:66:5d:
25:37:bb:81:cc:39:81:85:42:3c:95:4b:bc:89:41:
7c:1c:dd:bb:9b:6d:8d:d8:4a:d6:f0:72:9b:b3:3d:
8a:05:48:3d:7c:02:3a:71:f8:f5:f9:c0:18:86:51:
c2:08:40:fa:a6:09:37:e1:e4:5a:00:9b:8f:61:86:
5b:04:7e:b2:63:f0:53:d8:f9:55:29:74:84:df:b0:
b6:08:0c:f6:ee:14:e1:40:2b:2d:1f:f4:52:ad:49:
a8:0e:bc:4f:27:1b:9c:aa:be:6e:6b:1e:54:a7:48:
ae:bc:82:f4:94:81:15:2c:77:35:2e:aa:ca:37:dd:
92:b6:3d:50:e7:38:6d:1c:74:1a:5c:b1:d3:6b:8b:
ae:b2:fc:5c:6f:80:4b:8c:e9:e7:3c:5f:a5:09:99:
e3:c8:77:5f:d2:dc:54:16:3a:c9:0d:de:ac:20:1e:
7b:57:e8:c1:db:e9:6d:32:d3:83:47:25:f6:16:61:
5c:73:d1:06:29:db:80:b4:f4:5d:e9:aa:08:8e:cb:
20:95:df:aa:2d:f2:25:f5:82:b1:3d:a2:54:ca:65:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7C:CF:A6:25:8E:18:68:6B:5F:0A:85:69:E0:F5:42:88:B4:C8:5C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8ce::/48
Signature Algorithm: sha256WithRSAEncryption
31:ff:5f:ee:69:aa:35:92:a9:66:e8:18:f9:41:98:1d:ab:c2:
bf:15:c5:a0:6b:69:5d:2d:d4:ed:61:3a:96:fa:39:6a:90:4c:
6e:bf:d4:1b:b5:d5:c6:09:e2:6d:96:24:6b:71:70:63:82:45:
55:98:d8:03:dd:f5:10:b1:98:cb:ac:88:1a:f9:eb:d4:a2:c7:
c0:e8:2e:9d:35:fc:85:d6:46:ac:13:27:04:18:5a:3f:5b:7a:
47:82:78:5a:d6:fc:94:d7:82:89:1a:e7:4c:1f:45:94:15:e9:
8b:55:5f:20:91:cc:c7:48:8f:9d:d4:e5:cd:9b:65:dc:0b:c8:
0d:d6:ac:23:9a:0a:30:78:79:51:e4:28:b4:76:d6:93:1b:19:
d7:92:ec:b9:fe:e9:2a:15:ea:e0:63:b3:9c:b2:fc:7c:16:f1:
3e:a2:60:60:2e:f2:fb:98:b8:5a:61:b2:28:b0:30:38:d4:06:
18:2a:b6:60:75:5c:f3:1e:20:ad:28:59:21:e4:0b:e5:39:8f:
f3:39:68:c8:b5:32:b7:44:48:c5:ff:93:33:a6:cb:bc:ad:af:
c4:8f:3c:cc:ff:5a:b8:c5:0b:e7:8e:65:2e:b2:a9:66:65:67:
07:2b:af:5c:0a:a4:22:c2:91:84:29:5e:fb:ef:e8:c7:ec:59:
3e:c2:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:47 2026 by rpki-client