Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202665.roa
File: AS202665.roa (raw, json)
Hash identifier: 5NvWKWZnrdg+YHfWf5mR7aARumNjy1zFPUekIkoQBBI=
Subject key identifier: 2B:D7:39:4B:C7:37:0E:03:27:D9:A9:5C:A7:05:AF:C1:03:8A:D7:9A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 68F1EEEFA35B5A93CFE68292D7958E02B5708F9A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202665.roa
Signing time: Thu 12 Mar 2026 16:47:53 +0000
ROA not before: Thu 12 Mar 2026 16:42:53 +0000
ROA not after: Thu 11 Mar 2027 16:47:53 +0000
asID: 202665
IP address blocks: 181.214.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f1:ee:ef:a3:5b:5a:93:cf:e6:82:92:d7:95:8e:02:b5:70:8f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 12 16:42:53 2026 GMT
Not After : Mar 11 16:47:53 2027 GMT
Subject: CN=2BD7394BC7370E0327D9A95CA705AFC1038AD79A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:21:20:fa:32:0c:47:7c:6a:26:72:cb:25:
40:42:33:80:29:7c:5d:83:eb:d2:c4:d4:27:d2:de:
8d:14:3d:56:8f:f3:f9:44:7d:3f:ee:92:37:4f:94:
71:6c:81:5b:a3:29:f2:c5:56:49:2d:6e:dc:c7:d2:
45:fa:ba:80:66:e9:42:c0:13:2c:dd:bc:1a:ca:7f:
65:93:6c:f2:0d:26:63:35:94:dd:32:d6:51:7f:6a:
76:27:ea:1b:3c:ae:d7:96:44:31:a1:5e:b2:ba:4a:
f6:a1:6e:c1:a6:44:01:d7:d6:59:e5:db:10:0e:b8:
4b:c1:71:d9:f0:8e:5b:3b:ad:ae:bf:fb:66:d7:ab:
59:ce:c2:bb:5b:73:20:62:a5:71:8d:0c:29:7a:39:
42:8a:6f:77:c3:c2:09:01:cc:a4:07:bc:9b:b9:bf:
05:aa:e7:f4:7f:fb:da:ec:9b:22:02:1f:5d:7a:60:
99:0f:33:79:89:ef:35:67:a7:62:f6:f1:63:fb:26:
48:a0:5a:8d:df:e5:5c:b1:c8:b1:30:2e:0f:93:43:
21:9b:b1:6e:f0:f6:e6:d7:db:9c:b3:af:a6:5d:21:
3d:0b:7a:17:65:92:13:0e:6b:76:8f:fe:4a:d7:da:
79:b2:ff:54:a8:37:f1:46:ee:e5:8d:d6:09:b9:d4:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D7:39:4B:C7:37:0E:03:27:D9:A9:5C:A7:05:AF:C1:03:8A:D7:9A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202665.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e0:66:05:fa:99:95:4f:3e:5f:19:5f:c6:29:59:40:a2:10:
12:f6:93:e0:7d:cf:22:6f:d8:66:9a:53:10:df:c4:83:63:eb:
3f:29:58:4d:4d:91:c0:05:2f:e2:81:e3:f9:97:01:a5:e8:53:
fd:54:5e:06:c4:7a:99:55:e6:87:8d:5e:99:6f:b5:4f:99:05:
84:e4:57:65:dd:09:a5:a0:c7:59:3e:a4:41:80:51:31:78:08:
23:33:11:09:81:05:44:69:06:4b:36:49:23:65:22:0a:83:2e:
d6:bf:99:75:e3:28:f4:36:5f:7c:42:d0:0d:4a:87:39:18:24:
bc:63:62:08:09:12:04:8a:7d:88:f7:b8:e4:fa:18:19:a6:72:
2d:20:65:28:ad:02:88:bf:21:2b:ad:9b:48:d7:29:87:01:be:
77:8b:aa:88:6c:be:03:e1:85:dc:c8:db:b4:49:70:b0:65:dd:
ae:60:61:46:bc:93:af:6c:79:d9:26:93:61:ce:6e:80:6e:b2:
35:e8:bd:0e:5c:cd:dc:f9:48:59:20:cc:00:a8:d4:56:a8:15:
f2:7e:5a:54:25:80:18:c0:c4:7e:54:e5:9e:44:43:5d:86:57:
d5:f3:eb:72:45:d8:96:e6:ae:41:20:7e:09:1a:f8:ee:1b:87:
22:c8:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:23 2026 by rpki-client