Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206378.roa
File: AS206378.roa (raw, json)
Hash identifier: Z88cWtlpu4NtK4B7WGE2poXo2jcDKsIWlAAJhC6a4Pw=
Subject key identifier: C0:81:28:C3:A8:EC:0D:78:78:9D:63:7A:E0:82:74:1B:B3:D6:0D:28
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 445DE956B61D550810C03005933FA4ADCDEEEA31
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206378.roa
Signing time: Wed 23 Jul 2025 07:17:49 +0000
ROA not before: Wed 23 Jul 2025 07:12:49 +0000
ROA not after: Wed 22 Jul 2026 07:17:49 +0000
asID: 206378
IP address blocks: 143.14.59.0/24 maxlen: 24
143.14.67.0/24 maxlen: 24
143.14.75.0/24 maxlen: 24
167.148.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5d:e9:56:b6:1d:55:08:10:c0:30:05:93:3f:a4:ad:cd:ee:ea:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 23 07:12:49 2025 GMT
Not After : Jul 22 07:17:49 2026 GMT
Subject: CN=C08128C3A8EC0D78789D637AE082741BB3D60D28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:55:37:d3:78:11:e8:94:2c:31:43:08:7f:
a0:61:5c:d9:97:eb:aa:13:43:ff:56:29:c5:39:eb:
8b:21:c9:50:31:09:74:fe:4e:b1:05:6b:62:f4:5d:
aa:12:db:a8:94:e7:09:b8:9c:28:64:08:44:19:5a:
1d:ca:3b:ed:f9:95:f0:cf:fd:0e:9c:f9:0a:2b:b5:
ab:37:82:5b:5e:3f:ae:c0:38:38:71:ed:41:99:e0:
dc:6c:fe:cd:f5:48:8c:22:aa:61:9c:78:0d:dd:42:
d2:49:7f:a2:9e:bd:40:69:1b:71:ef:18:3d:af:2b:
3c:93:01:27:95:bd:9d:80:18:0c:e2:3d:05:1d:ca:
88:c6:ec:47:4b:e0:67:0a:66:55:94:b7:a2:31:83:
39:df:0e:df:01:ae:49:84:7c:c1:8e:18:66:80:4c:
8f:c6:32:91:5f:45:42:13:73:95:f8:f0:de:90:8c:
e3:e1:bd:10:74:85:a2:b8:64:c1:0b:9a:df:2b:0a:
19:8e:2f:6d:01:c6:88:4e:a3:8e:28:2d:56:e0:0c:
d7:85:a2:f8:0e:d5:a6:22:bd:47:13:67:7c:71:30:
dc:5d:17:7c:00:66:94:60:82:c5:a2:ba:47:bd:a2:
e3:71:80:2e:ab:f3:f5:34:3f:b1:5f:80:8f:7a:23:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:81:28:C3:A8:EC:0D:78:78:9D:63:7A:E0:82:74:1B:B3:D6:0D:28
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206378.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.59.0/24
143.14.67.0/24
143.14.75.0/24
167.148.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:18:f3:06:ad:9b:1f:75:fe:2b:64:54:93:ec:bb:2a:28:02:
af:ac:66:fe:41:7b:48:e6:f2:0f:f1:64:2c:ea:36:9e:df:60:
eb:d7:1b:13:b2:5d:64:b4:a5:02:c9:d5:9e:f6:c9:08:27:88:
ff:e6:56:f1:82:f1:cb:b3:5c:c6:3e:99:12:da:42:de:76:a5:
63:30:86:af:e7:6a:89:c8:30:69:20:a5:f0:08:8c:c5:e0:31:
56:eb:f8:6b:0d:c6:29:16:11:ef:b6:f3:94:67:f7:57:bb:7c:
21:c1:68:d4:8d:a3:c9:f3:9c:3c:98:a9:73:fa:e9:c3:23:11:
a3:2d:88:fe:7c:75:48:c0:71:cb:14:37:fb:81:a0:a3:02:4a:
87:57:7c:2e:0c:60:a3:e8:3e:0d:fd:4d:9d:82:65:e5:1f:84:
c4:70:6b:63:57:7a:1d:61:e2:62:de:51:e0:e1:0f:08:f8:0f:
4e:09:ee:e3:db:9a:91:04:60:20:0f:c3:8d:f3:be:0e:0f:f4:
b3:58:19:7f:e8:50:39:f7:ce:15:5f:1b:e8:a7:36:19:e6:38:
ff:98:39:64:ea:19:c7:b8:68:4f:98:fb:10:31:d0:76:bb:ff:
7a:2e:0b:2d:2c:1c:29:40:ea:86:43:b3:af:15:0c:09:b8:1a:
ae:56:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:40:26 2025 by rpki-client