Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202656.roa
File: AS202656.roa (raw, json)
Hash identifier: U2/QPVXjiK/cc9m0ydnHG/Lx0L/LSiTP8ffaGwrlTTA=
Subject key identifier: 59:3C:19:F6:89:7B:4D:36:81:59:17:36:15:E9:D9:7D:D9:DE:97:A0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7FB0C8F237BC46CF347525E05DF63F7295C85CC4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202656.roa
Signing time: Sun 08 Mar 2026 00:05:20 +0000
ROA not before: Sun 08 Mar 2026 00:00:20 +0000
ROA not after: Sun 07 Mar 2027 00:05:20 +0000
asID: 202656
IP address blocks: 194.110.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b0:c8:f2:37:bc:46:cf:34:75:25:e0:5d:f6:3f:72:95:c8:5c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 8 00:00:20 2026 GMT
Not After : Mar 7 00:05:20 2027 GMT
Subject: CN=593C19F6897B4D368159173615E9D97DD9DE97A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:ca:18:92:d3:e9:06:48:c0:e7:13:ef:81:
b6:4b:0f:e7:c9:4e:13:d5:c5:b1:01:5e:8f:0a:8e:
c9:cd:02:e4:8f:58:ae:55:36:a6:1a:70:53:81:66:
09:aa:85:d8:c8:d9:82:e2:eb:88:4e:9e:93:87:a1:
75:33:bf:6c:2f:a7:72:6b:a0:89:ec:16:14:1d:fe:
f2:23:4b:13:c7:d1:e2:fa:c3:56:cc:7d:44:95:f6:
0e:0d:ba:7e:40:0a:d4:d8:8b:70:76:6c:c8:d9:a8:
77:61:34:09:8d:4e:64:9a:08:cb:f0:bc:7a:1d:8b:
c8:30:e1:5b:6d:9d:4d:84:a1:dd:3c:52:1e:34:10:
bf:2e:47:ab:17:78:54:e5:bb:97:72:5b:16:f0:39:
01:96:6c:d5:78:d6:0c:85:7b:b8:74:a4:c4:04:fa:
33:c5:c7:3b:43:4f:6d:f8:01:40:7d:0e:eb:e5:29:
65:fa:d2:60:32:4b:f3:22:7d:0d:6a:f6:01:35:34:
73:75:47:36:31:23:b9:bf:d0:56:8f:ae:1b:7d:d3:
ba:c5:ab:26:4c:00:c9:ed:1f:8c:56:cc:34:63:86:
ca:61:e8:eb:45:ae:c1:ff:7a:1a:bf:22:57:ed:8d:
cc:18:c7:f9:3b:ad:67:70:e6:de:6b:a8:4e:42:b4:
7c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3C:19:F6:89:7B:4D:36:81:59:17:36:15:E9:D9:7D:D9:DE:97:A0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202656.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.14.0/24
Signature Algorithm: sha256WithRSAEncryption
03:9a:b1:24:fe:15:fb:56:79:99:d1:f3:18:ff:f2:ce:b6:91:
d8:ed:2d:2f:46:0e:4c:bc:5e:48:c8:88:f6:d5:94:c9:91:dc:
dd:4d:92:d0:bd:ba:54:35:17:30:bd:00:34:f2:e5:8c:15:ca:
2c:5c:d1:84:fa:ab:e4:ff:76:fb:a7:39:35:b0:93:7d:ce:c4:
8f:e5:65:ad:e8:f3:5d:b4:3d:50:d9:53:52:ad:ef:d0:00:93:
17:fb:c8:cb:b8:35:7e:71:30:b8:9a:b9:51:ee:f8:cb:dd:07:
d1:6e:0a:66:b2:93:60:f3:b3:26:95:9d:2c:b1:da:85:cc:22:
7d:06:5f:e3:28:3e:dd:c0:9f:4f:78:66:5c:e3:f2:e1:5d:51:
3d:99:31:0c:b3:49:51:03:02:b5:3a:7e:3a:d2:bf:57:60:2f:
8f:97:96:70:32:bc:d1:e4:4e:12:7f:9e:53:67:de:a0:84:51:
25:66:5c:40:72:b0:cc:7a:d6:23:1c:7b:c6:32:65:37:54:7b:
f6:d3:81:ba:e3:1e:50:9c:aa:de:18:ff:2f:1e:c4:d2:37:0e:
9f:f8:a3:e8:06:20:09:45:4b:3b:84:9b:f4:60:71:2f:ce:5b:
65:e5:7e:3f:a5:c3:d2:f1:70:8d:41:77:07:3a:2a:f8:68:54:
86:e2:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:34:02 2026 by rpki-client