Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201021.roa
File: AS201021.roa (raw, json)
Hash identifier: mV0YmXVbXWgOIDtP7TUTBepzjVk47AC1eOgpiviaf6Y=
Subject key identifier: EE:12:3B:A9:56:C5:AC:2C:29:82:22:B1:E9:ED:C0:65:C3:62:46:D1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 73F1592F7489DD9C51CC4141209CBB99E5360859
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201021.roa
Signing time: Tue 07 Jul 2026 14:33:53 +0000
ROA not before: Tue 07 Jul 2026 14:28:53 +0000
ROA not after: Tue 06 Jul 2027 14:33:53 +0000
asID: 201021
IP address blocks: 96.62.115.0/24 maxlen: 24
146.103.22.0/24 maxlen: 24
167.148.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:f1:59:2f:74:89:dd:9c:51:cc:41:41:20:9c:bb:99:e5:36:08:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 7 14:28:53 2026 GMT
Not After : Jul 6 14:33:53 2027 GMT
Subject: CN=EE123BA956C5AC2C298222B1E9EDC065C36246D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:54:92:90:9a:09:37:8b:37:97:1d:78:4d:
95:44:74:3b:b6:16:d3:fb:9e:f8:d9:09:08:85:c3:
c9:af:55:62:f9:3b:92:7b:da:25:db:c3:e6:5f:ad:
69:31:40:d3:7d:ed:22:e7:ac:cf:fb:32:59:07:22:
3a:d5:a5:31:87:4f:c0:01:7d:4e:13:53:3a:00:93:
83:47:89:9e:ee:90:bf:21:f8:39:c9:87:fc:fb:bf:
5e:94:c3:93:b4:94:bf:6f:29:65:3b:de:a8:75:76:
d4:86:c0:d1:ec:38:7b:88:fa:c0:0a:4a:e1:b2:09:
5f:d2:e0:21:29:f5:de:be:c5:60:fe:62:40:c0:b0:
7e:49:25:1f:54:87:c3:57:d8:53:b9:c3:4b:c8:e2:
84:cb:83:df:78:b1:49:a8:2a:ab:a5:6b:7d:61:d0:
2d:d9:c6:25:b9:b6:2f:45:24:f6:74:6c:ec:91:21:
ad:c9:9b:cd:a1:80:c8:07:03:8b:e1:5d:a5:92:12:
3f:c2:4d:dd:79:1a:27:7d:f4:41:99:ef:63:b7:0e:
da:d6:83:5c:df:29:73:b2:d0:0c:11:a1:3d:07:5e:
00:7a:e5:8c:3c:b0:09:26:af:20:70:f8:60:66:d5:
77:7f:16:0d:f1:f5:05:7e:73:0c:c2:22:7a:98:0c:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:12:3B:A9:56:C5:AC:2C:29:82:22:B1:E9:ED:C0:65:C3:62:46:D1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201021.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.115.0/24
146.103.22.0/24
167.148.215.0/24
Signature Algorithm: sha256WithRSAEncryption
93:fe:4b:69:b4:be:f2:93:cd:cc:db:f8:30:cc:2a:e5:45:e7:
6b:cc:07:51:71:fb:42:c6:f3:8c:21:bd:d5:dd:79:f8:86:40:
af:1a:72:ce:b7:70:46:18:27:b7:d1:d2:9c:e2:59:a5:a2:f0:
b2:49:e8:d8:87:1d:a5:c4:43:06:ef:e4:45:cb:1f:6b:a7:b0:
6e:c6:56:2e:13:57:14:c9:eb:f9:dc:21:3e:d8:23:34:7f:cf:
fd:b2:d6:7e:fa:28:b5:5b:5e:68:e2:d1:ce:e0:93:5e:5c:d7:
77:d3:f7:b1:0e:05:74:37:13:78:32:3a:de:a3:9c:5c:e5:7c:
6d:49:ee:3d:c6:7b:a7:32:0a:1c:1d:ce:32:bc:c6:96:c4:f4:
8b:56:a7:6f:30:ad:4c:88:76:0c:a3:e6:99:82:62:21:31:73:
cf:51:0b:dd:6f:1d:a7:79:82:95:05:65:25:3f:5a:21:c6:53:
fe:6b:6f:6a:d3:5c:ee:6b:4b:a6:3a:59:3b:38:79:51:cb:93:
56:de:3a:ed:b2:a3:82:6c:c6:36:4c:e8:09:a9:26:a4:72:1c:
46:87:76:54:3f:fa:5c:31:5a:ab:0c:d5:e5:24:30:94:91:67:
b7:93:95:c7:dc:3c:bb:b9:a2:1a:cd:af:e4:58:0c:e5:ed:8b:
3e:6d:75:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:31 2026 by rpki-client