
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS204244.roa
File: AS204244.roa (raw, json)
Hash identifier: 9o11Dv3XZ6sMYHEXTk/r3OHQTDqVJyWwW5o3ssJ1a0g=
Subject key identifier: C3:C9:7E:98:BC:F1:63:FB:CF:5D:71:49:81:F3:5B:A6:6B:BF:79:26
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 4A1C7D13BE796CD2C266759CB6D3B10F1CC86D1F
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS204244.roa
Signing time: Tue 22 Sep 2026 08:47:04 +0000
ROA not before: Tue 22 Sep 2026 08:42:04 +0000
ROA not after: Tue 21 Sep 2027 08:47:04 +0000
asID: 204244
IP address blocks: 177.177.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:1c:7d:13:be:79:6c:d2:c2:66:75:9c:b6:d3:b1:0f:1c:c8:6d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 22 08:42:04 2026 GMT
Not After : Sep 21 08:47:04 2027 GMT
Subject: CN=C3C97E98BCF163FBCF5D714981F35BA66BBF7926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:f2:0b:fd:37:11:fe:cf:d5:0b:63:e8:7c:
92:ff:da:f6:9d:99:7c:e5:32:74:33:66:aa:81:32:
d4:d5:2e:bc:99:f9:e4:97:c0:56:45:bd:26:d3:5b:
02:b3:09:b2:14:d7:8e:b1:8c:7b:d5:a9:60:aa:d0:
9f:c2:9f:9c:bf:4b:39:db:6f:67:e7:85:95:50:27:
4e:07:f2:6a:4e:5c:d5:c9:55:4b:2e:ba:d7:79:03:
40:6e:d5:cc:0f:98:43:0b:77:b9:31:73:d7:81:31:
34:0d:10:94:eb:bf:72:7d:ee:d3:8a:b6:8a:72:53:
32:0e:0a:5e:09:06:2a:be:d5:d4:38:70:27:a8:6b:
a2:b1:90:8f:d9:80:ea:6a:f9:38:0b:05:18:26:30:
d0:70:10:0c:60:86:d1:b2:9c:cd:82:6f:6a:e2:1d:
79:46:60:e2:89:36:b1:a7:10:b7:42:22:65:4d:63:
98:eb:b2:53:da:3a:d9:0a:94:08:b4:b5:b7:5b:2f:
e5:40:9b:90:36:3a:8b:9d:0d:9f:7f:1c:11:c5:c0:
0c:7f:d9:6a:93:86:a0:ed:b3:ca:f9:1e:93:28:7b:
bf:02:22:d5:bb:f8:52:82:0d:73:2f:d8:96:f9:5f:
eb:13:c6:84:37:ba:6b:a1:db:a2:8b:f0:71:f5:c9:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C9:7E:98:BC:F1:63:FB:CF:5D:71:49:81:F3:5B:A6:6B:BF:79:26
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS204244.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.83.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b5:fd:61:3e:59:b1:44:69:71:35:fe:a4:22:d6:8d:67:0a:
f3:7c:bb:93:c0:7a:51:c9:60:74:7b:80:a3:13:90:01:ed:45:
42:18:cf:8c:16:e3:d1:86:de:45:0f:7f:76:72:a6:a7:28:44:
8f:0d:53:25:1d:3a:bb:66:8c:b7:b7:42:45:7e:7c:01:5a:95:
1b:22:e6:7f:99:33:c0:97:6c:ce:29:78:47:08:ac:b5:3f:3c:
5c:a7:fa:a9:92:1b:53:35:4a:b3:bb:fc:31:42:27:26:cd:ac:
a6:09:f6:1e:50:1a:05:f7:5d:46:fa:1a:58:bb:07:72:62:83:
9b:3d:41:e9:a1:8e:f2:ad:69:15:8f:c6:4e:58:33:2c:8e:7a:
a9:89:4b:66:aa:3f:2d:f7:81:55:5e:7a:49:09:65:2f:7d:f3:
18:1d:e2:e6:fd:92:b6:2e:5d:69:ab:6a:1f:87:02:14:b1:3d:
ac:ef:0d:f7:ce:29:24:de:95:99:b4:83:ae:4e:8d:08:54:e0:
b4:03:d3:ca:78:bb:fd:ea:c1:cb:bc:4d:92:f5:40:62:d5:2e:
8d:ae:66:f2:5e:f3:53:bf:ca:26:35:1e:5d:90:c4:8f:db:38:
1e:aa:09:af:9f:d8:77:17:05:b6:77:ac:ae:46:81:c6:b9:78:
85:0e:06:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:15:37 2026 by rpki-client