Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
File: AS204765.roa (raw, json)
Hash identifier: 6VQAKJRs1Af9Sr33wK1xptJTA4WLfgUN+LHAbhjgE0g=
Subject key identifier: 08:AE:98:DE:54:9A:13:CD:11:2E:38:FA:C3:69:94:D3:9C:E7:73:0B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 15E0E74609096BB172093FA98697ACC3C7CF645F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
Signing time: Tue 06 Oct 2026 00:05:14 +0000
ROA not before: Tue 06 Oct 2026 00:00:14 +0000
ROA not after: Tue 05 Oct 2027 00:05:14 +0000
asID: 204765
IP address blocks: 143.14.252.0/24 maxlen: 24
162.141.139.0/24 maxlen: 24
167.148.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e0:e7:46:09:09:6b:b1:72:09:3f:a9:86:97:ac:c3:c7:cf:64:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 6 00:00:14 2026 GMT
Not After : Oct 5 00:05:14 2027 GMT
Subject: CN=08AE98DE549A13CD112E38FAC36994D39CE7730B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:d5:7f:8e:be:5f:b5:61:87:1e:6b:da:5a:
66:73:45:57:1f:9c:0c:b0:7e:62:72:29:4e:52:65:
9e:42:aa:98:01:ae:88:1a:b4:8e:bc:13:c4:c1:c5:
cf:af:98:9b:67:e2:71:3b:6d:58:cc:07:d7:6d:f6:
21:b3:db:ec:82:69:ba:de:96:38:7f:6d:d1:c1:7a:
58:e2:64:14:f7:43:ce:57:7e:46:f9:74:2f:3b:16:
b3:10:ac:10:86:9b:63:fd:a3:5f:78:a1:dd:8c:fa:
4d:67:9e:42:a2:b7:0c:50:44:c9:bf:e7:8c:14:da:
ba:95:68:29:fa:55:06:c4:eb:82:58:83:fa:fc:ac:
8f:18:72:29:84:d0:4c:c1:2a:4b:a9:70:f1:36:f0:
c6:a8:2f:8f:79:7b:90:31:14:71:1c:fa:32:3c:56:
04:46:9c:b7:4f:ac:c5:82:c6:a1:5b:69:20:42:c4:
f5:f3:55:af:71:49:49:ab:cd:3f:63:b6:9a:0a:f9:
94:7e:29:14:8f:4c:2f:e1:bd:48:23:e8:03:df:6d:
5d:9e:a5:59:7a:e8:8d:ff:11:13:f8:1b:7a:4e:d9:
91:9d:18:11:d6:fd:ac:d1:48:1f:ae:bc:4c:b4:a9:
b9:e5:89:67:6b:0b:ac:5d:22:73:6c:f1:16:e0:e8:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:98:DE:54:9A:13:CD:11:2E:38:FA:C3:69:94:D3:9C:E7:73:0B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.252.0/24
162.141.139.0/24
167.148.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:56:e0:da:c5:dc:3d:d1:26:b4:6a:16:5f:6c:df:04:8d:48:
9c:93:11:ee:17:ad:14:89:df:d1:9e:0f:c1:ab:5f:46:56:b3:
2b:25:cb:82:4d:61:4b:7c:6a:d5:fe:c0:e3:ee:dc:24:a9:cc:
0a:5c:99:b4:0a:3f:b2:13:20:95:44:91:5f:8c:45:8d:82:c5:
46:a8:f0:d5:2b:3e:c4:fc:02:1c:77:bc:27:cb:07:96:5a:69:
31:38:1a:4e:ce:7d:8d:73:70:f8:c1:7e:1d:a9:a9:b1:78:c1:
e3:89:cb:4f:bd:dc:e0:9b:6c:b0:d1:2e:17:48:99:02:86:36:
8d:8b:44:4e:dd:fb:5a:2d:4b:d4:15:6c:cd:ec:0b:d7:9e:34:
d8:93:af:c3:77:ee:01:5b:17:0f:31:26:1d:f3:a7:1e:ab:c3:
a3:3d:89:d9:c0:74:55:87:5b:0c:46:50:37:2d:05:dc:8c:bf:
b6:09:7a:6e:1a:23:09:12:81:c6:8a:8e:f6:5a:28:1d:72:62:
c0:b4:ed:86:de:f7:48:84:34:13:5f:2e:ad:52:f2:9e:59:48:
ad:bd:e3:8b:6e:64:0d:ab:f0:25:e6:8a:74:b6:76:fa:c2:1c:
66:15:01:9b:69:36:17:50:29:b1:e3:59:24:dd:de:43:1f:2f:
0d:ae:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 13:24:37 2026 by rpki-client