Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201182.roa
File: AS201182.roa (raw, json)
Hash identifier: 1f4LxSKr45/DxOJN19H/v/hQ766My9JEuzSbnNM6utw=
Subject key identifier: C9:DE:36:77:AD:12:97:F7:64:9E:82:39:98:20:A9:26:57:A8:41:08
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 21DC3CF12374616A4A340858364910B125460DF7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201182.roa
Signing time: Tue 17 Mar 2026 09:46:35 +0000
ROA not before: Tue 17 Mar 2026 09:41:35 +0000
ROA not after: Tue 16 Mar 2027 09:46:35 +0000
asID: 201182
IP address blocks: 140.150.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:dc:3c:f1:23:74:61:6a:4a:34:08:58:36:49:10:b1:25:46:0d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 17 09:41:35 2026 GMT
Not After : Mar 16 09:46:35 2027 GMT
Subject: CN=C9DE3677AD1297F7649E82399820A92657A84108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:77:e3:9a:6e:60:2e:36:74:f2:19:c1:2e:47:
6d:ff:0d:03:76:c7:ff:b2:05:04:d1:a5:d0:b0:2e:
1a:79:94:83:73:91:72:59:1f:a4:03:3d:d7:e7:8c:
90:2d:36:71:73:a0:fc:dd:7d:a0:f5:09:c9:1d:73:
d2:bd:70:b1:ea:f5:ed:44:c8:8b:85:83:22:d0:b5:
b9:e6:0a:d4:ff:f6:86:d8:d5:d2:9c:bc:98:16:33:
29:48:c2:e6:70:73:7b:d5:e9:5d:04:33:9e:0c:10:
5a:b1:d7:b6:93:ad:2c:18:4d:2e:64:41:fd:ee:ad:
7e:c2:68:27:6d:8b:d3:1f:0b:d7:a1:05:0e:0e:e6:
bf:aa:04:bb:2c:7e:28:2b:aa:04:21:46:89:c6:3e:
17:f7:1b:76:9e:0e:63:db:cd:6f:4c:91:96:d5:7e:
83:fb:c4:75:4f:ba:eb:04:36:11:7a:33:33:c9:5b:
39:b2:1a:8c:96:9d:d4:65:00:c9:65:ed:52:78:5c:
d2:22:8f:c4:50:a3:16:6e:44:79:1e:2e:c5:23:53:
26:59:34:8e:48:09:7a:36:26:b9:52:b5:4a:f4:fa:
49:d0:2e:66:1f:eb:59:be:72:59:92:32:bd:a0:c5:
3c:9b:a2:f0:b2:79:be:ec:68:69:06:03:a3:b8:6a:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DE:36:77:AD:12:97:F7:64:9E:82:39:98:20:A9:26:57:A8:41:08
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201182.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.154.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6a:86:9a:6f:48:8d:64:e6:8f:2e:e4:2b:93:9d:f3:79:87:
ae:8a:a0:40:d0:6c:bf:2e:87:b4:fa:7f:49:54:c4:21:26:5b:
49:3b:fc:3b:1b:5b:c0:f0:67:ff:b9:a0:8e:e0:b8:55:2d:67:
ce:58:22:43:3a:f3:e2:97:e1:3c:15:78:75:2a:c5:5f:69:dc:
f7:29:4f:4a:6a:60:a4:4b:51:ed:d0:41:2b:97:7a:0b:2d:c1:
82:48:64:55:24:0a:ac:5f:51:76:43:d4:2e:9b:97:e8:d2:1b:
aa:77:a6:99:2a:f3:fd:55:d7:5b:3b:35:bf:5d:a0:ca:4f:0f:
14:27:66:27:a7:6c:be:2d:6f:78:05:bd:bf:8a:d1:47:5e:cb:
c3:af:d8:46:bc:14:df:9b:19:b4:72:08:80:d6:ac:63:90:59:
56:07:ef:15:32:19:92:37:2d:37:6b:a5:6f:fb:c5:c6:34:aa:
c5:2a:33:bb:19:ba:d6:23:c2:2e:54:75:85:86:0d:5d:b5:f0:
bd:36:a0:27:b9:3a:35:c3:a9:69:11:91:74:83:c7:75:ad:d0:
de:2f:07:ac:d3:8e:df:89:0a:92:3e:a3:4d:98:f5:13:1d:42:
8b:18:7f:34:15:b5:fe:ea:94:d2:b0:c5:a3:42:0e:64:ab:cb:
42:7d:65:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:26 2026 by rpki-client