Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202736.roa
File: AS202736.roa (raw, json)
Hash identifier: Q82kyuaXlAJncc6CWq4IbJy+w5MfsxesUsBKkh7BeMg=
Subject key identifier: C8:AE:A3:0F:79:34:EE:A3:66:23:33:CC:69:B2:5C:63:76:C4:B8:EB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3335B46FA0B3D1E32DA2B966DA7DEB84A8DCAC99
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202736.roa
Signing time: Thu 07 May 2026 16:22:45 +0000
ROA not before: Thu 07 May 2026 16:17:45 +0000
ROA not after: Thu 06 May 2027 16:22:45 +0000
asID: 202736
IP address blocks: 82.26.194.0/24 maxlen: 24
82.39.196.0/22 maxlen: 24
82.39.248.0/23 maxlen: 24
82.47.189.0/24 maxlen: 24
82.47.190.0/24 maxlen: 24
82.47.208.0/24 maxlen: 24
82.47.212.0/24 maxlen: 24
82.47.214.0/24 maxlen: 24
82.47.218.0/24 maxlen: 24
82.47.219.0/24 maxlen: 24
82.47.221.0/24 maxlen: 24
82.47.224.0/24 maxlen: 24
82.47.225.0/24 maxlen: 24
82.47.228.0/24 maxlen: 24
82.47.229.0/24 maxlen: 24
82.47.231.0/24 maxlen: 24
82.47.242.0/24 maxlen: 24
82.47.243.0/24 maxlen: 24
82.47.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:35:b4:6f:a0:b3:d1:e3:2d:a2:b9:66:da:7d:eb:84:a8:dc:ac:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 7 16:17:45 2026 GMT
Not After : May 6 16:22:45 2027 GMT
Subject: CN=C8AEA30F7934EEA3662333CC69B25C6376C4B8EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:ec:34:cc:f1:82:95:d6:d8:a4:79:12:43:
55:94:67:f4:9b:88:4f:8b:80:df:6c:cd:bc:ba:ca:
6e:97:c1:df:7c:59:66:ff:38:db:c7:3f:16:44:57:
7e:29:ce:87:50:ec:1a:37:ff:a8:c3:e0:2f:ba:92:
a8:eb:8d:a2:be:7d:2e:da:87:99:e3:dd:ed:4c:39:
16:1f:ad:b2:d1:9f:ea:4b:3a:57:09:e0:f2:d6:47:
e1:8f:69:2d:26:b7:2f:be:ca:61:76:51:cf:60:0a:
ee:6f:2b:ab:bd:ce:3d:16:7d:84:cd:cc:21:d7:52:
27:34:41:d5:68:a8:10:fc:b3:45:80:c1:9a:fa:43:
4b:87:cf:db:54:cc:90:76:bf:8e:66:1a:70:3e:dc:
ee:3f:8a:1e:5a:bb:8c:a9:bb:7b:8b:4e:19:8f:eb:
b1:12:7b:6b:4d:c8:29:d3:21:a8:8e:17:1a:01:b7:
d6:3c:a0:e7:81:e3:2a:dd:da:d5:ed:5a:9f:87:84:
58:f8:5f:8f:9c:3b:b9:38:a5:e3:f7:34:4e:59:84:
38:42:ba:54:48:7f:63:3e:4c:61:97:a0:ad:c0:d8:
65:d4:67:12:c1:24:e8:1b:16:3a:3a:4f:21:6a:4f:
5b:61:a6:ca:ca:b2:78:63:72:75:dd:05:8e:b8:23:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:A3:0F:79:34:EE:A3:66:23:33:CC:69:B2:5C:63:76:C4:B8:EB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.194.0/24
82.39.196.0/22
82.39.248.0/23
82.47.189.0-82.47.190.255
82.47.208.0/24
82.47.212.0/24
82.47.214.0/24
82.47.218.0/23
82.47.221.0/24
82.47.224.0/23
82.47.228.0/23
82.47.231.0/24
82.47.242.0/23
82.47.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c5:c3:0f:c5:7a:11:ac:f3:f2:d2:71:06:bb:06:50:ed:e8:
56:33:56:c8:09:c0:7e:14:59:cb:cd:5d:16:7a:ff:cb:8e:02:
d8:c1:99:f5:0c:64:98:0f:eb:27:65:91:0d:ff:60:58:95:ad:
20:e5:55:2b:04:24:ba:dd:d5:0c:f8:48:fe:7e:bc:6d:84:a7:
e6:7b:9b:86:a2:aa:2e:1c:0b:63:f6:4c:a2:11:89:57:6e:20:
df:dd:71:7b:80:98:81:c5:b3:a1:f1:77:fa:54:c7:e7:66:25:
20:b3:33:d1:60:3e:8a:1e:82:22:76:b7:5e:5e:e2:db:65:ec:
9e:16:19:8d:44:19:0c:13:5f:33:6f:6e:2c:e1:f7:96:51:7b:
51:40:2d:67:ee:a1:1f:ce:aa:95:ce:13:db:d6:c7:2c:9c:57:
6b:c8:9f:ad:30:2a:ac:6c:56:87:52:76:a0:5b:51:b0:17:c2:
4c:43:db:e0:6a:6c:82:fc:9d:2e:3f:d4:45:18:59:85:c8:b9:
f1:ab:68:db:d5:55:70:ba:14:de:ff:72:ab:32:65:37:ef:d6:
f7:99:90:97:71:aa:10:e3:89:fb:27:6c:32:df:7b:78:b4:ea:
46:15:d6:d9:65:5e:d9:c7:a4:b8:63:07:be:90:8c:be:bb:8f:
2a:fa:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:18:09 2026 by rpki-client