Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202520.roa
File: AS202520.roa (raw, json)
Hash identifier: KEHg+MnBCluwdKzKHVoTIl/W34GvgU4pgjdwJVPWulE=
Subject key identifier: 7A:B5:0F:72:8D:0A:D8:87:4F:D4:BD:44:7C:FB:61:31:79:8D:0E:5E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1567C7C8DD4904D2701AB8FE48B74097C5D56B4E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202520.roa
Signing time: Thu 14 Aug 2025 12:50:45 +0000
ROA not before: Thu 14 Aug 2025 12:45:45 +0000
ROA not after: Thu 13 Aug 2026 12:50:45 +0000
asID: 202520
IP address blocks: 96.62.191.0/24 maxlen: 24
146.103.49.0/24 maxlen: 24
147.79.24.0/24 maxlen: 24
147.79.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:67:c7:c8:dd:49:04:d2:70:1a:b8:fe:48:b7:40:97:c5:d5:6b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 14 12:45:45 2025 GMT
Not After : Aug 13 12:50:45 2026 GMT
Subject: CN=7AB50F728D0AD8874FD4BD447CFB6131798D0E5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:a3:9a:50:f9:48:d1:68:25:61:f0:bc:1d:
8d:6d:ae:45:ed:bd:e8:98:7b:71:4c:2d:80:b7:a6:
44:97:6d:f8:c6:0f:b2:31:ea:d2:3a:6f:69:e9:5f:
e6:42:e3:24:4b:67:66:1e:0e:5f:ab:87:ab:1e:f5:
5f:d4:e1:ad:21:a2:f1:83:e8:9a:21:4c:75:ed:11:
39:97:a1:33:75:5f:10:90:bf:44:0c:7f:11:cf:d3:
53:aa:a4:1d:a8:a8:f9:26:a7:d6:94:76:30:77:29:
5b:ec:cf:09:39:e7:fd:ed:82:c8:c2:ea:89:49:a9:
d7:74:f7:ef:b7:b3:85:98:1c:c8:e9:ca:57:f6:13:
22:f7:f6:91:11:b9:45:57:5b:90:61:50:f5:5d:5f:
48:c6:1a:c4:1a:09:62:c1:05:1e:3d:06:0f:5c:a7:
cd:77:5b:e9:aa:a9:20:af:a6:94:ad:42:1d:33:ba:
4b:0c:de:ad:0f:80:bb:1a:64:ba:14:a6:3e:21:6a:
91:ac:56:80:78:80:8d:de:4d:4b:1f:b8:f1:f8:43:
b9:dc:f9:d6:f1:a1:f9:2a:55:4c:6b:09:93:b6:82:
c1:64:f7:ee:57:c8:7e:ad:08:76:59:78:e0:26:3f:
78:9b:a1:ea:5d:fa:dd:11:45:03:f4:8b:13:fc:7b:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:0F:72:8D:0A:D8:87:4F:D4:BD:44:7C:FB:61:31:79:8D:0E:5E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202520.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.191.0/24
146.103.49.0/24
147.79.24.0/24
147.79.62.0/24
Signature Algorithm: sha256WithRSAEncryption
02:dc:4e:6a:27:c3:77:57:a9:f4:41:0f:35:20:0b:d2:19:93:
43:fc:db:c9:4b:fb:fc:ca:65:1a:e8:d2:f2:31:b1:50:2b:a5:
46:96:e5:49:72:00:15:2a:f1:4c:d4:23:ec:81:b7:4e:30:e0:
75:88:87:8c:5d:f2:78:fd:87:ba:4a:bf:a0:8e:98:38:f0:71:
1b:2f:8c:7b:c1:5a:cf:43:5f:01:0e:dc:5f:94:3c:2f:b9:af:
14:c4:55:0e:24:b8:cd:8d:d7:38:14:3d:da:9c:53:12:66:89:
b1:70:82:8d:6c:8c:39:93:25:94:42:6a:1b:27:36:46:78:41:
ad:9d:0e:f0:de:79:4d:b5:47:ea:51:fa:02:ea:08:1b:48:16:
2e:05:0e:25:23:37:08:d9:a7:f3:ae:44:93:42:08:d4:cd:08:
f2:07:33:2d:1c:a2:c7:86:db:4c:0d:10:ba:56:56:14:ff:f5:
98:f1:0c:49:2b:13:72:25:20:33:4f:32:0f:22:17:59:eb:60:
5f:7e:84:cf:79:11:64:74:d4:ba:8b:cd:64:9d:d2:36:5f:20:
69:ea:3c:65:99:bb:2c:ad:1c:ab:d6:d9:04:cd:6e:bc:e0:b8:
d0:de:75:19:96:f5:4e:0d:9d:a8:9d:c9:a6:8a:5c:5a:87:07:
5b:fb:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:17 2025 by rpki-client