Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201811.roa
File: AS201811.roa (raw, json)
Hash identifier: tN7N60To3uAXk4rEwUS0Z8FtyYtg124PPTZDHwHlufo=
Subject key identifier: EA:9D:D4:5C:EC:6F:B9:A0:57:31:A1:1F:D9:FD:72:B5:C7:8B:18:F2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 41C529E166B9381B02A3B1EFF977A669B17B4981
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201811.roa
Signing time: Fri 20 Mar 2026 14:17:06 +0000
ROA not before: Fri 20 Mar 2026 14:12:06 +0000
ROA not after: Fri 19 Mar 2027 14:17:06 +0000
asID: 201811
IP address blocks: 96.62.152.0/24 maxlen: 24
140.233.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c5:29:e1:66:b9:38:1b:02:a3:b1:ef:f9:77:a6:69:b1:7b:49:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 20 14:12:06 2026 GMT
Not After : Mar 19 14:17:06 2027 GMT
Subject: CN=EA9DD45CEC6FB9A05731A11FD9FD72B5C78B18F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:ed:af:8e:0e:0b:74:66:43:40:8a:0e:a0:
e2:93:27:2a:55:d2:4d:16:ba:f6:ae:db:c4:b9:67:
a1:c2:fc:05:5f:84:a9:5f:1c:27:3e:7d:1d:42:d8:
66:d7:69:74:51:87:2b:24:79:49:d2:53:37:c0:35:
9b:2d:5f:0b:84:17:71:6b:8f:73:2d:84:0c:3e:75:
cc:ca:a4:00:f8:30:ae:51:ae:74:cc:a0:82:71:34:
c8:25:44:9e:57:1f:6e:14:75:7d:58:ba:8d:69:fb:
8a:c2:c6:4b:3e:84:df:68:86:65:0e:1e:7e:79:98:
17:9c:20:cd:4f:af:09:f9:1f:57:32:07:49:c1:db:
04:c5:32:1e:95:e1:a1:6c:70:45:45:f9:af:69:ae:
bf:4c:80:f4:7a:c2:ed:e5:47:95:51:72:31:70:12:
e3:3c:b4:68:cf:9b:ef:86:04:52:6a:5a:98:ee:36:
78:a8:b5:29:72:2b:d0:95:6e:66:ad:e5:4f:82:db:
89:c5:4c:f4:c1:38:42:7a:5b:5c:dd:82:ed:be:c6:
e8:4c:37:9c:d8:e9:08:27:9b:22:ec:3a:45:c5:f3:
f6:fd:fd:23:46:55:cc:08:72:1b:15:e1:90:c8:c0:
82:84:ae:58:cd:52:9c:51:5f:d7:38:a8:a9:12:8c:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9D:D4:5C:EC:6F:B9:A0:57:31:A1:1F:D9:FD:72:B5:C7:8B:18:F2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201811.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.152.0/24
140.233.167.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e1:27:ee:e8:4a:1b:46:82:63:89:cb:79:26:68:eb:c2:dd:
20:0d:f5:ef:26:90:b0:98:d1:3d:f6:55:65:41:86:43:86:de:
44:29:cd:7f:e2:05:89:31:9f:7d:d2:14:39:60:2c:a7:4b:0e:
c9:25:70:b4:d8:d5:55:6f:4c:de:bb:17:ae:cc:9b:ba:1a:4d:
9e:5d:04:cd:d5:5f:25:fd:96:fb:9c:da:76:17:c3:7f:f1:91:
55:12:b1:4c:63:29:74:2c:e7:af:fe:ec:f0:f1:35:23:08:75:
7c:86:69:0b:83:5f:73:ba:43:a4:9f:fb:52:69:57:ed:92:34:
c2:e5:21:f4:db:7e:77:b9:f5:9a:73:20:77:0d:94:39:41:3d:
f8:a8:ce:36:c2:c0:73:12:bf:53:63:65:d3:6b:27:2d:f6:45:
89:6f:b8:a6:a7:e0:26:b2:f7:75:2e:dd:44:c6:2e:60:46:c6:
ef:99:f0:0b:2e:fd:f6:d5:a7:ca:37:07:bd:35:ef:2c:2a:35:
fe:e4:1c:19:c0:c4:34:51:de:9f:0e:b2:9c:8b:07:81:63:d3:
bc:aa:d7:1f:da:fa:61:88:b0:d7:4e:89:97:d5:6d:cf:90:c7:
4b:bd:be:0d:72:cd:a6:e3:2e:62:0f:7a:c1:6c:36:1b:97:0d:
5d:f4:a0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:41:53 2026 by rpki-client