Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202051.roa
File: AS202051.roa (raw, json)
Hash identifier: HDiR6/lsELJm2bG/eqeejz7MpKyfETeFrYCdoeROr2s=
Subject key identifier: 23:4A:69:BD:3E:54:B6:02:CB:39:79:0E:56:66:8C:47:86:BE:23:3D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2A0BFF0978C6E84AECD19FB451F401A65F09D1E7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202051.roa
Signing time: Fri 26 Jun 2026 09:24:39 +0000
ROA not before: Fri 26 Jun 2026 09:19:39 +0000
ROA not after: Fri 25 Jun 2027 09:24:39 +0000
asID: 202051
IP address blocks: 82.41.3.0/24 maxlen: 24
82.47.62.0/24 maxlen: 24
82.47.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:0b:ff:09:78:c6:e8:4a:ec:d1:9f:b4:51:f4:01:a6:5f:09:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 09:19:39 2026 GMT
Not After : Jun 25 09:24:39 2027 GMT
Subject: CN=234A69BD3E54B602CB39790E56668C4786BE233D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:54:a8:2e:03:c9:0a:71:5d:12:b6:8d:92:
05:0b:39:c6:27:b4:54:a7:9e:e1:3c:78:d4:da:ab:
cf:da:62:46:79:d0:69:31:c0:32:a5:26:d8:b3:cb:
aa:bc:42:62:03:3d:40:20:7f:e2:82:57:b4:d7:94:
af:b1:e7:7d:16:d2:66:39:46:60:72:aa:4d:b7:8b:
79:9f:d3:24:7e:df:ec:4c:51:0a:f0:f7:be:8a:97:
2e:65:71:72:c4:54:be:fb:52:0f:d5:c6:4b:6b:3c:
cd:19:c5:39:0d:64:a6:e1:f3:af:c0:60:16:e2:92:
58:9a:74:ae:70:d2:1b:61:86:25:cc:f7:42:60:7e:
2d:ce:b7:db:b1:e4:af:bb:19:4c:c1:4c:24:c1:80:
df:0b:40:9d:74:f9:3a:66:ee:01:db:a3:1b:7a:52:
25:5b:db:4a:a2:50:6c:76:50:6e:a9:6f:10:31:2e:
02:71:11:45:6d:9f:eb:da:9c:2d:16:26:19:69:7d:
c6:a1:3a:a8:57:59:3a:22:c9:84:a7:90:31:23:09:
c2:1c:fa:7b:93:8f:ed:ea:4c:1e:de:6e:38:50:ee:
32:bb:38:32:78:8c:e5:09:d5:53:e8:ea:26:4e:cd:
5d:2b:96:51:75:a4:b6:d0:a7:0f:d2:87:fc:3e:17:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4A:69:BD:3E:54:B6:02:CB:39:79:0E:56:66:8C:47:86:BE:23:3D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202051.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.3.0/24
82.47.62.0/24
82.47.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c4:47:b0:9c:ac:20:3c:9c:62:ae:71:39:ba:f3:01:ff:3e:
66:92:fc:06:a5:90:9b:7b:5c:1a:59:41:b1:b3:9b:b4:07:d9:
ac:b9:94:6e:a1:5f:07:0a:9d:90:d8:a7:e5:b5:d9:51:08:bc:
78:74:5b:9c:5e:4a:63:7b:56:9c:21:f1:da:1b:db:b6:cb:5e:
40:22:98:cd:58:e1:01:43:51:5c:7e:2b:02:50:16:aa:e6:28:
b4:43:69:33:82:56:02:f9:d3:72:36:a3:e5:56:e4:25:29:e9:
4f:87:57:1d:44:95:65:3f:14:51:2f:90:bc:f8:87:90:8c:6d:
31:c3:d5:9d:8c:1b:4c:89:67:2a:e8:83:c2:52:e4:9e:cd:c7:
32:ee:97:9b:48:3a:e3:38:8e:57:b1:2e:91:f4:59:90:bb:2f:
24:bd:ef:7b:b9:22:d1:20:9f:ea:c9:f1:bd:cc:8e:76:3b:5c:
60:c4:f1:c0:fa:37:5b:ba:bd:99:bb:33:cf:12:7b:b4:8e:63:
0b:61:55:1a:73:b8:f6:16:7d:59:f3:bc:70:e9:eb:75:ae:eb:
2c:7b:39:d9:04:7f:70:85:a8:69:9d:4c:27:1c:f1:d1:e5:d5:
95:4f:fd:93:23:a5:ce:e1:7f:7f:82:16:a0:9f:a9:18:27:21:
9b:96:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:21:35 2026 by rpki-client