Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201002.roa
File: AS201002.roa (raw, json)
Hash identifier: 5gy+l5plbrs/WTYhzr4spvXiNupvzrObfsq7f+doMmY=
Subject key identifier: 88:4D:7C:A2:06:9C:25:4C:4B:B7:EB:70:67:23:F9:42:9C:1C:FE:EF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 17B638FDA9F9F6B05E8B0B3B9D695795252C13DB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201002.roa
Signing time: Wed 23 Sep 2026 05:33:21 +0000
ROA not before: Wed 23 Sep 2026 05:28:21 +0000
ROA not after: Wed 22 Sep 2027 05:33:21 +0000
asID: 201002
IP address blocks: 167.148.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b6:38:fd:a9:f9:f6:b0:5e:8b:0b:3b:9d:69:57:95:25:2c:13:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 23 05:28:21 2026 GMT
Not After : Sep 22 05:33:21 2027 GMT
Subject: CN=884D7CA2069C254C4BB7EB706723F9429C1CFEEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:15:bb:2d:e1:0d:34:ff:96:d1:b1:d7:48:
46:84:c3:3b:f2:90:56:e7:f8:b2:d6:1a:88:da:75:
19:97:22:13:7b:49:db:16:e8:7d:b7:c9:b2:ae:ec:
3e:64:75:52:96:c5:b5:64:d2:98:cc:85:a4:ed:9f:
99:c4:ce:69:82:ea:b9:f8:5c:db:3e:18:32:ff:ea:
b9:b3:bc:b4:20:fe:c5:f5:87:c9:d3:c0:18:8f:78:
01:c8:cd:07:57:d2:ef:14:ad:e0:5b:d4:af:81:f3:
a6:cc:b6:81:b4:dd:21:97:8a:89:5e:0b:7b:f7:7e:
70:29:79:a0:68:3c:f0:82:0c:4b:db:ee:55:74:f3:
f2:8a:93:45:db:17:5e:9c:9d:77:96:b8:a8:1f:0d:
2d:1d:90:37:51:89:6a:61:30:85:c6:fb:28:cb:7f:
7a:a2:79:61:af:3c:45:93:f5:73:f1:7c:48:3b:e2:
94:87:3a:5a:f1:11:d1:0a:24:d4:20:05:bb:20:45:
60:ca:60:24:0f:55:3c:c7:cb:14:0c:ad:62:f1:02:
89:d0:52:b0:88:c1:d7:60:fa:97:06:fe:e6:7a:4d:
e6:4a:b6:7d:9f:eb:20:80:3a:58:7c:3a:db:fc:a8:
af:2d:b8:b2:89:ea:60:53:4b:42:9e:dc:9b:cf:eb:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4D:7C:A2:06:9C:25:4C:4B:B7:EB:70:67:23:F9:42:9C:1C:FE:EF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201002.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.126.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f3:0d:3d:70:07:50:8f:a7:d4:52:8b:47:26:e1:6f:a4:d7:
35:69:e8:fb:e1:aa:23:e7:2b:e2:b6:0e:0b:78:01:ea:35:e5:
d1:f4:f3:ff:d7:bb:eb:34:71:c0:fb:bb:f1:c1:2c:3f:e6:a3:
ee:09:10:77:7f:e8:a8:a6:82:1a:e6:4c:8b:bd:2e:70:83:a9:
7e:39:fa:ab:82:53:76:59:cd:05:0c:ff:f0:6a:ca:7e:b8:26:
f7:fe:02:3a:79:29:88:23:2f:63:f8:c7:fd:3c:17:ee:04:1c:
1f:be:4c:db:f1:cb:1d:49:5e:8c:c0:30:59:ae:c7:71:4c:2c:
79:06:9c:8f:04:70:e9:58:14:39:ee:bb:fc:0e:33:0a:12:fb:
47:6d:f4:1a:8d:2a:42:24:6e:72:39:60:14:4c:9f:94:0e:c2:
ed:5f:59:5c:03:14:ae:8a:fa:22:67:8d:d6:84:dc:16:2d:53:
7a:77:cf:f9:67:5d:5e:cf:8b:38:c1:f1:d1:b0:b0:a5:58:b3:
9d:ac:0a:83:eb:f5:57:08:6c:aa:5e:03:49:3f:3a:13:5d:2e:
7a:7e:05:bc:f0:d0:49:20:f4:f0:3d:04:05:dd:d7:28:40:fa:
0b:7d:4b:2b:9f:87:7e:e8:c9:5b:c2:f5:98:f7:97:b8:ba:c5:
d5:d4:5d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:27:15 2026 by rpki-client