Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS204244.roa
File:                     AS204244.roa (raw, json)
Hash identifier:          9o11Dv3XZ6sMYHEXTk/r3OHQTDqVJyWwW5o3ssJ1a0g=
Subject key identifier:   C3:C9:7E:98:BC:F1:63:FB:CF:5D:71:49:81:F3:5B:A6:6B:BF:79:26
Certificate issuer:       /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial:       4A1C7D13BE796CD2C266759CB6D3B10F1CC86D1F
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS204244.roa
Signing time:             Tue 22 Sep 2026 08:47:04 +0000
ROA not before:           Tue 22 Sep 2026 08:42:04 +0000
ROA not after:            Tue 21 Sep 2027 08:47:04 +0000
asID:                     204244
IP address blocks:        177.177.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1c:7d:13:be:79:6c:d2:c2:66:75:9c:b6:d3:b1:0f:1c:c8:6d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
        Validity
            Not Before: Sep 22 08:42:04 2026 GMT
            Not After : Sep 21 08:47:04 2027 GMT
        Subject: CN=C3C97E98BCF163FBCF5D714981F35BA66BBF7926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c7:f2:0b:fd:37:11:fe:cf:d5:0b:63:e8:7c:
                    92:ff:da:f6:9d:99:7c:e5:32:74:33:66:aa:81:32:
                    d4:d5:2e:bc:99:f9:e4:97:c0:56:45:bd:26:d3:5b:
                    02:b3:09:b2:14:d7:8e:b1:8c:7b:d5:a9:60:aa:d0:
                    9f:c2:9f:9c:bf:4b:39:db:6f:67:e7:85:95:50:27:
                    4e:07:f2:6a:4e:5c:d5:c9:55:4b:2e:ba:d7:79:03:
                    40:6e:d5:cc:0f:98:43:0b:77:b9:31:73:d7:81:31:
                    34:0d:10:94:eb:bf:72:7d:ee:d3:8a:b6:8a:72:53:
                    32:0e:0a:5e:09:06:2a:be:d5:d4:38:70:27:a8:6b:
                    a2:b1:90:8f:d9:80:ea:6a:f9:38:0b:05:18:26:30:
                    d0:70:10:0c:60:86:d1:b2:9c:cd:82:6f:6a:e2:1d:
                    79:46:60:e2:89:36:b1:a7:10:b7:42:22:65:4d:63:
                    98:eb:b2:53:da:3a:d9:0a:94:08:b4:b5:b7:5b:2f:
                    e5:40:9b:90:36:3a:8b:9d:0d:9f:7f:1c:11:c5:c0:
                    0c:7f:d9:6a:93:86:a0:ed:b3:ca:f9:1e:93:28:7b:
                    bf:02:22:d5:bb:f8:52:82:0d:73:2f:d8:96:f9:5f:
                    eb:13:c6:84:37:ba:6b:a1:db:a2:8b:f0:71:f5:c9:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C9:7E:98:BC:F1:63:FB:CF:5D:71:49:81:F3:5B:A6:6B:BF:79:26
            X509v3 Authority Key Identifier:
                keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS204244.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.177.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:b5:fd:61:3e:59:b1:44:69:71:35:fe:a4:22:d6:8d:67:0a:
         f3:7c:bb:93:c0:7a:51:c9:60:74:7b:80:a3:13:90:01:ed:45:
         42:18:cf:8c:16:e3:d1:86:de:45:0f:7f:76:72:a6:a7:28:44:
         8f:0d:53:25:1d:3a:bb:66:8c:b7:b7:42:45:7e:7c:01:5a:95:
         1b:22:e6:7f:99:33:c0:97:6c:ce:29:78:47:08:ac:b5:3f:3c:
         5c:a7:fa:a9:92:1b:53:35:4a:b3:bb:fc:31:42:27:26:cd:ac:
         a6:09:f6:1e:50:1a:05:f7:5d:46:fa:1a:58:bb:07:72:62:83:
         9b:3d:41:e9:a1:8e:f2:ad:69:15:8f:c6:4e:58:33:2c:8e:7a:
         a9:89:4b:66:aa:3f:2d:f7:81:55:5e:7a:49:09:65:2f:7d:f3:
         18:1d:e2:e6:fd:92:b6:2e:5d:69:ab:6a:1f:87:02:14:b1:3d:
         ac:ef:0d:f7:ce:29:24:de:95:99:b4:83:ae:4e:8d:08:54:e0:
         b4:03:d3:ca:78:bb:fd:ea:c1:cb:bc:4d:92:f5:40:62:d5:2e:
         8d:ae:66:f2:5e:f3:53:bf:ca:26:35:1e:5d:90:c4:8f:db:38:
         1e:aa:09:af:9f:d8:77:17:05:b6:77:ac:ae:46:81:c6:b9:78:
         85:0e:06:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:15:37 2026 by rpki-client