Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202736.roa
File: AS202736.roa (raw, json)
Hash identifier: d5XWfvL9nPPO1+dWkOGw05JGBTagFxJhW3ExFuGLQd8=
Subject key identifier: 08:8C:63:30:BC:BC:93:C9:0C:33:C3:70:C0:13:B3:C6:F5:F6:41:97
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 458B8014171E2C9ED4F3D03CDC4A36F9F0EF4F85
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202736.roa
Signing time: Tue 05 Aug 2025 19:36:08 +0000
ROA not before: Tue 05 Aug 2025 19:31:08 +0000
ROA not after: Tue 04 Aug 2026 19:36:08 +0000
asID: 202736
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.85.0/24 maxlen: 24
148.135.234.0/23 maxlen: 24
148.135.240.0/23 maxlen: 24
150.241.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8b:80:14:17:1e:2c:9e:d4:f3:d0:3c:dc:4a:36:f9:f0:ef:4f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 5 19:31:08 2025 GMT
Not After : Aug 4 19:36:08 2026 GMT
Subject: CN=088C6330BCBC93C90C33C370C013B3C6F5F64197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:46:8f:cd:ce:42:53:c9:60:5b:36:28:97:
9a:9e:4e:01:16:98:ff:dd:b8:c3:9f:be:bb:a3:7c:
91:37:e6:37:a2:b5:37:41:70:26:c6:06:01:fe:2c:
15:90:dd:00:a5:14:25:e6:94:00:94:0b:b6:e6:44:
b8:1e:db:0e:c6:d0:0d:8c:3c:54:09:8d:02:d2:29:
50:76:c5:bb:21:fd:1f:59:92:75:06:fb:15:b7:6e:
47:29:4d:7d:54:18:72:43:47:26:58:93:4b:e5:75:
16:fb:08:1c:49:c3:e6:6e:45:e9:b7:94:4d:87:37:
87:03:21:50:92:6e:66:5b:ce:73:58:93:8e:c3:31:
b0:9f:f7:a2:c5:d2:38:81:33:a3:f8:e0:1a:95:77:
55:e2:44:6b:90:c6:b7:82:19:6e:26:d9:33:a2:ce:
8c:1d:f1:82:b1:0a:07:14:65:94:9c:f9:96:74:e8:
18:56:58:88:d9:45:89:00:ae:9f:94:67:ba:c9:c2:
33:17:97:17:90:67:fb:75:39:f2:35:65:5e:5d:01:
2e:61:76:66:3d:fa:c1:3b:5b:e9:34:e9:50:a5:12:
5f:17:9f:88:2c:1c:e6:dc:8d:1a:31:44:13:fc:b8:
38:61:9c:f7:97:65:ba:ed:4b:95:bc:f4:43:0a:39:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8C:63:30:BC:BC:93:C9:0C:33:C3:70:C0:13:B3:C6:F5:F6:41:97
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.85.0/24
148.135.234.0/23
148.135.240.0/23
150.241.162.0/23
Signature Algorithm: sha256WithRSAEncryption
27:05:c3:0e:0f:8f:e8:7a:61:aa:4b:b5:91:be:cd:ab:20:34:
7e:cc:62:b9:33:d1:96:f2:35:1f:d7:31:50:ce:a2:6f:88:cc:
47:e0:8f:d3:b0:8b:f4:da:5b:29:90:29:57:58:5b:c9:d5:a8:
6d:fe:19:3d:df:72:17:35:8f:33:22:2f:d3:fa:ee:b1:6f:52:
be:64:dd:0f:12:99:89:77:0b:4a:e1:a1:86:14:e3:24:02:b1:
6b:ca:b0:0d:0c:1c:67:c4:af:4d:a4:b9:10:79:9d:99:fe:68:
22:3a:78:87:52:af:fa:b8:a4:d1:90:28:26:f7:c1:8f:03:7e:
6f:aa:8a:b6:ab:4d:44:ea:c1:aa:b9:f4:30:e9:c9:65:d7:76:
09:b2:55:be:9d:34:42:ac:1c:65:46:09:8a:a5:b8:07:f8:5e:
2e:cd:7e:7b:43:35:65:26:b8:65:6c:32:ed:c1:97:5c:0b:9e:
fc:9b:4d:df:42:9a:b9:51:06:af:e6:71:d1:ee:8b:78:06:0b:
1c:00:82:41:bb:24:e1:37:28:fb:8d:29:cb:ae:40:6a:37:96:
37:a2:3d:ee:a9:15:99:78:0a:cd:00:4c:c4:20:29:72:96:ed:
7c:f5:f6:75:1a:30:02:ed:e8:1b:e6:41:35:81:27:66:22:21:
d3:a1:7a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:50:20 2025 by rpki-client