Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202791.roa
File: AS202791.roa (raw, json)
Hash identifier: IFK2/XfcANqA6u/q475RbV06CGMHEcbmLQvi3CmwITY=
Subject key identifier: 78:AF:BE:F5:37:5F:AD:03:05:F4:56:79:FE:04:AA:16:A4:D6:56:11
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0A46E7BFC3E1478D700987A0E497FB037F3F64E3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202791.roa
Signing time: Wed 24 Sep 2025 06:40:17 +0000
ROA not before: Wed 24 Sep 2025 06:35:17 +0000
ROA not after: Wed 23 Sep 2026 06:40:17 +0000
asID: 202791
IP address blocks: 162.141.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:46:e7:bf:c3:e1:47:8d:70:09:87:a0:e4:97:fb:03:7f:3f:64:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 24 06:35:17 2025 GMT
Not After : Sep 23 06:40:17 2026 GMT
Subject: CN=78AFBEF5375FAD0305F45679FE04AA16A4D65611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:cd:18:ce:7b:95:3a:5c:4d:f6:d7:2c:dd:
0a:87:10:90:f3:22:a3:e4:56:c3:dd:07:ef:1f:f8:
b3:57:11:dc:4e:c3:57:a0:ad:90:85:81:eb:d2:08:
a7:34:7d:5a:83:1f:9a:ac:09:eb:f0:51:d2:9e:54:
6b:7c:dd:6f:db:db:3a:8f:ce:12:6c:10:5b:f0:2f:
62:5a:d0:d5:ec:2e:71:a5:8c:39:79:63:4c:86:84:
b0:75:83:8d:f6:db:f4:08:96:b4:7d:85:f8:61:57:
64:87:30:2b:f1:37:44:76:80:f0:5e:57:7a:7a:92:
50:87:74:0e:15:4b:cc:ff:e8:a3:85:da:8a:c7:41:
1a:f5:fd:9b:31:35:96:5b:fd:3e:63:ad:1b:30:dd:
28:b1:27:08:6c:4e:8b:f6:1d:ab:89:6c:e6:08:3c:
f7:dc:4d:f5:f7:c5:08:73:ca:d4:0e:93:cd:85:7c:
20:1f:1c:4a:ac:2a:a9:48:af:90:fa:0c:7e:c6:ac:
ad:63:c5:72:54:51:11:0d:4e:39:05:bf:7d:3e:79:
1c:99:81:bc:b1:9a:0d:9d:9d:02:81:4a:12:c7:a3:
0a:aa:e6:1d:c0:38:17:e5:08:86:26:53:57:ba:aa:
47:ba:4a:72:64:91:ef:a3:9b:58:69:3f:51:09:14:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AF:BE:F5:37:5F:AD:03:05:F4:56:79:FE:04:AA:16:A4:D6:56:11
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ed:65:fe:38:99:0f:61:bf:42:ab:47:93:30:55:b4:1a:13:
e3:45:97:d8:2d:ba:e2:cb:b1:a6:4e:f8:5d:ad:37:e9:e3:15:
a8:88:a1:29:5b:d1:01:65:00:2b:51:2c:53:9a:96:eb:97:f3:
ad:5b:34:9a:ef:9a:b0:33:bc:f1:c4:62:35:19:ab:1d:66:1f:
74:18:3a:4d:db:a8:fa:cd:dd:7b:b0:b4:41:a1:da:1e:73:b3:
9d:6f:57:5d:ad:8e:d7:67:7f:65:b2:a2:6b:72:3a:c8:ff:f4:
13:f2:6c:5e:ad:1b:ef:e3:7d:c7:86:7e:30:d5:d6:e6:6e:29:
d6:55:2d:e4:f8:54:9c:9e:03:9f:a3:32:fa:13:77:69:70:b8:
fc:65:5a:1e:d3:61:3a:30:10:97:67:b2:99:52:0d:e0:d0:7f:
ec:65:0c:07:86:a0:e2:5c:74:dc:fa:60:06:41:24:c7:83:8f:
d2:39:36:1f:e1:5b:be:04:27:5a:14:ae:79:a1:d4:df:41:af:
d3:8f:27:42:c5:18:2a:c5:33:14:12:f8:f1:30:83:65:a9:4c:
0b:3c:c4:b5:c7:32:e8:f0:84:d6:6f:66:31:c0:4e:a8:f9:49:
ad:55:96:34:a4:7f:d5:95:3e:eb:64:bd:8e:ef:7d:24:3e:96:
6f:d8:50:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:55:47 2025 by rpki-client