Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa
File: AS202673.roa (raw, json)
Hash identifier: 3KObX1017L4b8cCYFLme1J2+ujIgbadlMJ/uv060gb0=
Subject key identifier: 9C:94:E0:43:C7:56:9C:95:90:80:08:C3:C9:89:9C:60:38:62:1A:69
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4B6084018929BA661F0380F9F78B21A8DFD05EB1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa
Signing time: Tue 24 Mar 2026 13:02:14 +0000
ROA not before: Tue 24 Mar 2026 12:57:14 +0000
ROA not after: Tue 23 Mar 2027 13:02:14 +0000
asID: 202673
IP address blocks: 155.117.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:60:84:01:89:29:ba:66:1f:03:80:f9:f7:8b:21:a8:df:d0:5e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 24 12:57:14 2026 GMT
Not After : Mar 23 13:02:14 2027 GMT
Subject: CN=9C94E043C7569C95908008C3C9899C6038621A69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:fa:1e:42:73:77:a2:48:06:b5:c1:12:b4:
0e:66:c4:59:1a:a8:57:76:0d:90:e3:62:bf:e0:3e:
fc:4b:d3:7e:b8:0d:0c:21:5c:33:f6:79:c0:8f:dd:
fb:3f:ca:41:4b:03:9f:e8:ac:bb:de:e5:ee:38:f5:
51:e5:0f:6f:e5:d4:a3:ea:1f:9a:0e:84:80:1c:0b:
af:13:db:dd:a7:31:5d:6b:11:d5:19:4c:31:f8:25:
72:d2:d3:88:86:09:e0:1b:a0:d1:03:2d:d5:7b:5a:
cc:0a:81:89:8e:b5:f7:51:fc:06:40:fb:22:89:70:
79:1a:a3:15:1e:2f:6f:e1:8f:5c:61:95:d4:d9:a9:
16:97:f9:fc:72:6e:78:e1:d0:89:1e:d6:8e:56:ba:
a0:ac:f9:eb:cd:ee:0a:b8:bc:68:90:3d:3d:d8:d3:
ba:8e:08:b4:f5:bb:24:74:14:86:49:4c:66:9d:8f:
ff:7e:31:4c:78:bb:b8:61:07:2b:c9:e0:c5:d2:47:
3f:c4:72:e4:da:30:79:b1:3b:5e:5a:c3:c5:c9:da:
f6:40:70:92:69:af:5c:43:7c:b8:e6:d3:c1:03:07:
8e:c2:b8:72:e9:98:77:7a:4e:55:8c:51:fa:c5:ef:
57:cb:95:4d:0c:bc:a1:a3:e6:9e:fd:2a:2e:04:23:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:E0:43:C7:56:9C:95:90:80:08:C3:C9:89:9C:60:38:62:1A:69
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.197.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ea:a9:ca:f0:72:fb:2f:a4:ed:0c:97:94:3f:a5:9c:dd:d5:
1f:2c:67:9e:30:87:b7:bf:88:db:74:08:e4:3a:a3:7c:cc:32:
44:7c:42:48:de:e3:d2:e9:6d:fc:be:d4:e2:30:19:7c:9b:a2:
d5:83:3d:74:4f:97:ec:4a:d7:2e:d0:5f:36:e8:68:44:a5:10:
03:c2:21:f9:44:99:a9:07:fa:27:54:30:7e:af:cb:77:c9:ee:
c6:83:fd:bd:26:58:45:43:91:51:78:8d:2e:17:0b:75:5d:32:
3c:e2:9e:f3:97:13:b3:6e:3f:e9:f5:3e:8a:f5:2f:ef:80:cb:
97:e4:f4:5a:53:f3:32:7a:b5:2a:e3:2b:29:e0:ee:18:70:a4:
18:00:4c:fe:9b:bf:39:9b:af:3b:e3:4c:c8:2e:31:08:12:13:
7e:30:f2:20:2f:1e:f2:ed:65:26:13:06:99:d7:43:7d:2c:90:
e6:8e:88:2d:42:b3:59:21:7d:45:90:0e:28:3e:3c:1e:17:f8:
0e:95:5f:71:6d:9a:53:9f:f4:24:4e:90:66:7a:1d:6d:b5:69:
8d:a5:19:e2:3f:d7:6b:c7:b7:6d:2b:12:ef:43:03:7e:19:d1:
1f:69:9b:3f:f9:4b:81:2f:2c:d1:8d:b2:9b:8b:99:96:2a:08:
22:69:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:48:07 2026 by rpki-client