Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202736.roa
File: AS202736.roa (raw, json)
Hash identifier: IqAl+m+uwAUB5SRQM59dgsJuRB/6q2iywSB39d/b+wk=
Subject key identifier: BB:C3:96:BF:25:C2:7B:1B:C2:99:56:A1:5E:9B:79:03:B3:50:DD:E1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4E3353F0F59AEC2BB9D4ADD1492DD48ABAAD8439
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202736.roa
Signing time: Tue 24 Jun 2025 17:42:01 +0000
ROA not before: Tue 24 Jun 2025 17:37:01 +0000
ROA not after: Tue 23 Jun 2026 17:42:01 +0000
asID: 202736
IP address blocks: 96.62.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:33:53:f0:f5:9a:ec:2b:b9:d4:ad:d1:49:2d:d4:8a:ba:ad:84:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 24 17:37:01 2025 GMT
Not After : Jun 23 17:42:01 2026 GMT
Subject: CN=BBC396BF25C27B1BC29956A15E9B7903B350DDE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:ce:78:47:74:12:47:f5:5a:a6:cf:fe:23:
4a:0b:4c:fb:79:1d:c5:43:55:94:81:c8:9f:d5:9a:
85:b7:93:ca:fd:7c:40:0b:ea:16:6d:b4:90:e0:f3:
3a:c0:ce:29:a5:8f:a6:2e:96:8a:80:9b:31:10:1b:
d0:66:77:10:ae:77:36:88:ce:0e:04:fc:e5:36:b1:
6d:ad:39:ce:83:27:21:c1:83:c3:2b:3b:38:3f:53:
58:49:6a:58:68:e8:f3:e6:65:c1:1e:74:1e:5b:8c:
37:4d:c9:0c:49:94:6b:0b:57:70:50:2c:b6:7a:e3:
dd:c6:8c:13:71:78:fa:70:b0:2d:1a:5c:a3:fd:e8:
30:16:7d:ce:49:26:ea:3b:8c:63:bb:ff:12:0f:50:
8c:a8:8f:46:78:36:f5:a4:b1:96:23:9e:21:17:9e:
63:40:c3:e7:be:55:98:74:51:8a:44:f7:74:8d:63:
f3:94:b1:28:5c:2b:85:94:b2:f8:24:c4:be:26:9b:
1b:d6:69:c0:8b:6f:12:a5:14:55:87:c0:2a:26:ea:
71:9c:85:e5:f3:12:a4:bb:23:c9:3c:63:b9:48:34:
bf:5f:30:1a:15:56:13:ba:de:17:64:49:06:ee:d3:
d4:63:2c:68:01:54:a4:e3:36:11:90:32:0f:23:b4:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:96:BF:25:C2:7B:1B:C2:99:56:A1:5E:9B:79:03:B3:50:DD:E1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b4:be:d5:7b:90:d2:16:b1:a6:6e:7d:83:ce:fb:3a:1c:70:22:
e5:58:73:e5:20:20:e3:f6:09:3e:ab:3f:cc:09:eb:51:a5:3a:
f2:4b:b1:45:60:95:16:86:bc:d4:17:4e:f7:a9:d7:0b:b3:59:
00:90:33:e5:60:ad:9e:2b:29:58:9a:cd:e5:95:43:7e:93:dc:
c0:c8:0d:37:dc:6c:d6:26:a2:24:98:30:6e:ba:43:11:e1:a8:
85:77:40:d2:63:f1:68:17:74:87:0a:31:74:8d:14:74:fc:34:
96:91:8e:72:0e:e8:d1:fb:a5:3d:a5:bf:49:90:fb:0b:fc:3c:
d9:55:7d:c3:3b:b5:8e:47:73:5e:35:2d:12:d5:5f:8c:32:d3:
8c:be:88:9f:06:98:36:e8:ed:f9:bc:96:30:33:be:24:ed:48:
74:6d:3f:5b:03:14:aa:37:93:2b:f6:cd:3d:28:15:aa:89:b6:
2f:5d:b5:de:fc:b5:64:7e:3f:d7:3e:cc:78:4b:5d:6f:f7:96:
84:dd:b8:eb:59:75:3a:80:61:10:5e:7e:e1:98:e2:02:41:04:
10:ec:38:0c:fe:2d:cc:1f:a4:87:65:fd:40:f8:1b:10:68:db:
d5:e3:c0:b2:ac:32:d9:00:a2:44:bc:cb:06:de:44:2e:4a:00:
7a:0d:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:55:40 2025 by rpki-client