Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS202678.roa
File: AS202678.roa (raw, json)
Hash identifier: cD2PExGf4LKSKayHkQ+J75L36b1LwYP74/EEe1VyoR4=
Subject key identifier: B8:AC:6D:88:42:ED:D3:1E:C2:D7:A7:2C:8A:42:10:21:37:3A:C0:37
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 127FFE41DE9DC3736B9740EC32731F24BE8B5613
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS202678.roa
Signing time: Tue 10 Jun 2025 09:13:13 +0000
ROA not before: Tue 10 Jun 2025 09:08:13 +0000
ROA not after: Tue 09 Jun 2026 09:13:13 +0000
asID: 202678
IP address blocks: 37.221.76.0/24 maxlen: 24
62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
139.28.48.0/24 maxlen: 24
139.28.49.0/24 maxlen: 24
139.28.50.0/24 maxlen: 24
139.28.51.0/24 maxlen: 24
185.231.224.0/24 maxlen: 24
212.115.100.0/24 maxlen: 24
212.115.101.0/24 maxlen: 24
212.115.102.0/24 maxlen: 24
212.115.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:7f:fe:41:de:9d:c3:73:6b:97:40:ec:32:73:1f:24:be:8b:56:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jun 10 09:08:13 2025 GMT
Not After : Jun 9 09:13:13 2026 GMT
Subject: CN=B8AC6D8842EDD31EC2D7A72C8A421021373AC037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:27:a8:f2:26:5f:21:04:d8:53:39:b3:f3:
6b:3c:c1:5f:6e:6a:a6:b2:0f:c2:f0:47:6f:49:85:
11:92:46:b6:ca:b1:69:c7:42:f6:da:af:86:cd:4a:
88:03:33:c2:f0:e5:02:a4:bd:1d:59:8f:5f:8b:89:
ab:f6:52:2e:cb:78:d7:2d:e5:c5:a0:54:92:b7:40:
9a:df:a7:ab:0c:ff:ce:5c:cb:ad:a9:63:72:6a:87:
4c:a3:b1:71:49:2d:7c:eb:31:29:59:0f:8d:26:03:
d6:89:52:91:93:37:92:72:f3:76:09:34:79:77:a0:
64:7c:90:95:a2:1e:27:2f:31:73:71:bd:03:35:83:
b5:01:5e:5f:66:44:af:5c:e4:b3:13:86:aa:33:af:
89:f9:79:9b:4c:5c:74:c9:73:c6:12:e0:5b:3a:bf:
46:a5:21:61:58:74:fc:08:b1:b4:e5:aa:2a:6c:93:
8f:fd:1f:b1:df:e0:38:4b:df:d5:a3:26:0a:38:54:
5e:da:06:5e:64:7c:81:3c:a9:ba:e6:e3:0d:e8:1e:
ae:7e:97:6c:2c:18:99:82:08:ce:70:f9:5a:68:26:
19:55:25:5a:57:25:33:3a:4e:7b:97:de:2c:6f:e9:
0b:13:45:49:0c:3e:22:7d:a9:46:56:96:c5:c7:dd:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AC:6D:88:42:ED:D3:1E:C2:D7:A7:2C:8A:42:10:21:37:3A:C0:37
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS202678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.76.0/24
62.182.32.0/22
139.28.48.0/22
185.231.224.0/24
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:a7:2b:e3:95:45:64:f5:c9:27:41:28:88:e9:76:9f:0e:7c:
14:13:48:a4:0b:43:6d:a4:18:bf:01:d4:a6:2c:f8:b1:a4:2f:
be:c1:95:4b:d1:1d:09:e0:8d:40:0c:4c:ee:5d:3f:e8:5d:49:
be:9b:d6:e4:ec:03:1c:e0:36:a7:87:60:bc:fa:6d:42:3a:ed:
3e:75:f0:a3:96:0f:76:a5:ba:8a:a5:7f:a0:22:cb:f6:2d:62:
79:64:71:bc:e8:71:30:ec:ca:f9:e1:a3:33:8d:d4:51:c5:b9:
7c:9c:32:59:8f:8d:67:d3:11:3b:2e:e9:4c:8e:5c:95:d6:48:
aa:2b:5c:ad:f9:d8:99:fe:c1:40:49:e3:f7:38:3d:19:2b:40:
ca:58:9e:a8:5c:93:0e:5f:52:2e:cc:da:a9:74:e4:71:61:bd:
69:77:30:cb:a5:a5:13:69:4f:4b:20:7b:b7:5d:9e:4b:38:36:
73:32:31:cf:b1:26:f5:32:9d:88:68:f2:e9:a1:9b:57:d4:f9:
b8:a3:62:0a:cc:21:f5:53:ea:d6:f7:82:5b:24:3f:8c:7d:a1:
1a:13:46:40:d4:9e:c8:32:86:98:99:a5:38:35:95:e8:0b:fe:
7d:b5:18:75:36:d9:1b:ba:89:b0:f8:e0:13:e9:cd:a7:bf:6f:
aa:eb:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:17 2025 by rpki-client