Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202520.roa
File: AS202520.roa (raw, json)
Hash identifier: umMjtR4pBfeJTDUSAgWvydmxHGMDI5myq/qYDf88zyg=
Subject key identifier: 0D:B0:2D:E4:F0:81:9D:95:6F:E9:64:DD:39:97:90:79:1F:C1:A6:92
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 33FA1048213EF492D932421575F0C78CA67373CE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202520.roa
Signing time: Thu 16 Jul 2026 13:49:12 +0000
ROA not before: Thu 16 Jul 2026 13:44:12 +0000
ROA not after: Thu 15 Jul 2027 13:49:12 +0000
asID: 202520
IP address blocks: 96.62.191.0/24 maxlen: 24
146.103.49.0/24 maxlen: 24
147.79.24.0/24 maxlen: 24
147.79.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:fa:10:48:21:3e:f4:92:d9:32:42:15:75:f0:c7:8c:a6:73:73:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 16 13:44:12 2026 GMT
Not After : Jul 15 13:49:12 2027 GMT
Subject: CN=0DB02DE4F0819D956FE964DD399790791FC1A692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:86:84:e6:77:e2:ef:48:a4:24:a2:8b:98:
32:ff:a8:e1:13:8f:f2:a0:39:b3:cc:ab:f4:b8:6d:
a1:15:e2:74:ba:cb:cc:13:bb:b8:fc:7b:7a:e1:96:
1b:5b:5a:fc:18:bb:f8:c0:68:0e:50:a1:21:c8:59:
21:34:1a:f2:30:f8:0d:fb:5c:e1:9d:ff:3c:12:ac:
8c:44:f1:fc:c2:50:cd:8c:fb:cc:df:9f:a5:c1:e5:
47:23:d2:d4:10:79:a3:56:33:22:60:5e:5c:b4:e2:
c3:88:14:ff:95:a7:a5:25:36:d6:ba:b6:b8:89:d8:
1c:3e:99:d6:73:ce:60:db:3c:7f:a8:d4:e9:63:d2:
3a:d7:d6:5b:82:a3:53:e8:3f:b0:5b:9a:f9:ec:46:
b6:ff:b2:e7:7f:37:51:79:6d:7d:45:38:ea:8a:4c:
bd:96:25:99:66:ed:b4:5e:13:24:76:e6:a0:58:9d:
8e:7d:20:0c:1f:e7:5e:39:13:c2:ae:ab:b7:94:50:
8a:b5:b4:e0:f8:b6:a4:85:58:6d:e0:c1:4c:b8:7e:
3d:38:59:f9:fd:4e:80:06:8b:d1:d6:f2:ac:7d:4c:
ea:a0:16:ad:c8:db:d1:5c:3b:a1:df:69:06:34:b2:
b3:58:5e:0b:b0:03:cd:b9:9a:80:a4:a5:b0:b8:91:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B0:2D:E4:F0:81:9D:95:6F:E9:64:DD:39:97:90:79:1F:C1:A6:92
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202520.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.191.0/24
146.103.49.0/24
147.79.24.0/24
147.79.62.0/24
Signature Algorithm: sha256WithRSAEncryption
56:fd:d8:64:3d:e1:0c:db:08:58:cb:ae:f8:ed:47:66:fe:2f:
df:64:2c:fb:46:10:27:bc:45:3f:93:e6:b2:b7:27:6e:a9:ca:
57:42:72:e5:61:db:6b:b2:12:65:81:99:a7:69:55:51:2b:62:
80:5c:cd:24:7c:f6:a0:6d:9c:16:dd:81:a7:1d:2d:4e:44:53:
b8:ab:c9:4e:ff:28:33:9d:d8:92:1e:2a:59:85:cf:97:19:a0:
5c:f4:9e:59:64:31:bd:8c:37:29:0d:e0:c2:e5:71:2c:84:8f:
05:fb:c6:10:03:0a:6e:79:44:5a:ee:e4:6f:df:7e:a3:5c:41:
92:60:8d:cf:f5:7b:93:e2:16:de:36:5a:7f:57:fc:85:27:5b:
d2:2b:a0:74:54:4f:f1:86:22:5f:8a:e3:b2:11:53:99:00:2c:
84:82:e8:32:46:1b:8c:d1:a4:84:b1:e9:ac:6e:a3:b9:a2:2a:
9b:ab:b4:6d:d3:91:0b:bc:7e:1b:cf:28:42:57:4e:59:20:a1:
1f:7f:9d:72:5d:f8:60:c5:cc:e5:50:68:d1:37:f3:00:aa:b1:
fb:c8:f8:4d:64:58:29:30:8e:cb:9c:cf:8d:15:ba:48:6f:9c:
15:6c:97:bb:3a:ff:e0:d6:bd:b4:7a:33:73:ec:c4:44:16:d2:
c4:83:af:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:35:55 2026 by rpki-client