Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
File: AS204765.roa (raw, json)
Hash identifier: iUGW0GhNPXVRlZ+ERz25RzL4Zd2/8v6vB3tajP7HeyU=
Subject key identifier: 0B:42:63:A4:75:12:CF:EA:28:C5:F7:E7:1F:97:F2:2C:30:BC:66:B9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5EC5AD0F590E5E281EF75BD12D56420D8F8A6DC4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
Signing time: Tue 24 Mar 2026 19:00:39 +0000
ROA not before: Tue 24 Mar 2026 18:55:39 +0000
ROA not after: Tue 23 Mar 2027 19:00:39 +0000
asID: 204765
IP address blocks: 143.14.252.0/24 maxlen: 24
148.135.171.0/24 maxlen: 24
155.117.141.0/24 maxlen: 24
155.117.154.0/24 maxlen: 24
162.141.153.0/24 maxlen: 24
167.148.2.0/24 maxlen: 24
167.148.8.0/24 maxlen: 24
167.148.68.0/24 maxlen: 24
167.148.122.0/24 maxlen: 24
167.148.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c5:ad:0f:59:0e:5e:28:1e:f7:5b:d1:2d:56:42:0d:8f:8a:6d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 24 18:55:39 2026 GMT
Not After : Mar 23 19:00:39 2027 GMT
Subject: CN=0B4263A47512CFEA28C5F7E71F97F22C30BC66B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:4e:77:24:96:09:cf:13:b3:e6:7a:80:e2:
b1:eb:5d:a8:59:16:7f:23:71:3f:95:ad:d0:a5:e9:
41:13:89:b1:1a:a3:67:7a:90:53:85:60:f5:ca:2d:
5c:97:c2:0e:c4:12:b2:6e:21:8c:97:22:aa:f8:ba:
c0:1e:55:0d:35:09:38:2f:a0:52:57:cc:b8:28:59:
5a:d7:8e:10:62:a3:bb:1f:df:60:93:29:28:cd:3e:
97:bc:45:e2:e0:41:b8:f6:9b:7f:67:a6:92:69:ee:
3e:e2:1b:eb:89:c1:3d:e9:45:58:d6:07:99:83:98:
e6:8d:7f:8e:6b:4a:b6:6a:29:9d:97:a7:a0:5c:83:
10:a4:6e:dc:61:c1:41:0c:b0:97:9d:49:3e:86:75:
d7:a3:54:30:38:d8:f8:6c:10:bc:8c:b2:e1:23:cc:
9c:41:08:cc:4b:cc:0a:5c:96:3e:a2:98:c0:3d:94:
ce:08:02:c1:62:11:77:11:0d:f4:08:b0:65:95:11:
10:df:bf:a7:00:a5:82:80:83:83:02:3a:56:f4:42:
06:2c:ad:04:90:ea:45:55:04:27:a3:d9:46:07:d6:
ab:56:48:1e:78:8a:d0:f0:d2:91:cd:be:c8:54:1b:
33:46:ca:15:62:d0:2f:bb:37:a4:35:46:61:21:83:
c9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:42:63:A4:75:12:CF:EA:28:C5:F7:E7:1F:97:F2:2C:30:BC:66:B9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.252.0/24
148.135.171.0/24
155.117.141.0/24
155.117.154.0/24
162.141.153.0/24
167.148.2.0/24
167.148.8.0/24
167.148.68.0/24
167.148.122.0/24
167.148.197.0/24
Signature Algorithm: sha256WithRSAEncryption
21:08:eb:c6:3a:1e:d7:14:41:b0:05:5d:13:79:4d:e7:fa:a2:
78:66:da:ca:6f:db:b0:f4:57:1e:7e:a8:3a:6f:89:16:06:7e:
06:65:46:26:f4:20:89:41:ff:3e:99:b3:bb:bd:c8:92:f9:e9:
71:6c:0f:20:de:a5:8c:86:ab:eb:05:69:85:96:f8:de:b6:c8:
af:8a:51:fa:11:f4:5e:fd:c2:c2:d3:62:8f:fc:f5:55:8d:b9:
36:c6:23:1a:59:cc:aa:99:25:38:b2:8e:db:81:b3:86:bf:3b:
60:fc:91:f6:f5:14:28:2d:07:2a:fb:50:17:6c:57:6e:27:a1:
0b:01:41:76:64:fc:c8:8f:89:f4:61:bb:64:82:ff:b4:0c:e6:
44:07:b3:f8:a1:9e:a5:a8:2a:e5:9c:1f:11:5a:f5:e0:a8:1d:
d6:1f:c4:74:e8:07:35:8f:c9:36:ac:c9:f6:0d:4d:67:12:d9:
24:16:85:90:5a:1a:d7:ea:6e:68:69:06:0e:a1:0b:48:57:d5:
7c:c8:c1:5a:52:1a:96:00:44:98:18:51:ca:94:a8:86:40:e0:
76:f6:72:01:2d:ec:61:87:6b:06:1e:1a:e9:66:7f:a9:85:d6:
1d:17:72:4a:9f:2b:8f:01:9a:ac:61:9b:e8:84:d1:f7:52:47:
07:71:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:48:52 2026 by rpki-client