Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204071.roa
File: AS204071.roa (raw, json)
Hash identifier: up2t0ktOx2UBkGZKMQUtD4aRGTP5txobjEYuc9wNk6s=
Subject key identifier: A1:1E:96:D2:3B:7F:4F:11:9C:3C:E2:CD:DF:4E:C6:5F:69:E7:EE:96
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7F94E6FF8FA53FF648F2D4D14D5655C2A6BFF0CE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204071.roa
Signing time: Thu 08 Oct 2026 14:49:36 +0000
ROA not before: Thu 08 Oct 2026 14:44:36 +0000
ROA not after: Thu 07 Oct 2027 14:49:36 +0000
asID: 204071
IP address blocks: 82.27.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:94:e6:ff:8f:a5:3f:f6:48:f2:d4:d1:4d:56:55:c2:a6:bf:f0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 8 14:44:36 2026 GMT
Not After : Oct 7 14:49:36 2027 GMT
Subject: CN=A11E96D23B7F4F119C3CE2CDDF4EC65F69E7EE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:f6:87:94:38:22:30:10:a4:b4:b4:5f:be:
4b:12:81:ae:66:9e:1c:8b:93:b5:0c:ed:48:9a:35:
b4:97:f7:47:1e:38:f4:5e:5e:04:d3:76:bf:96:b1:
11:ab:f2:2a:23:5d:9e:05:54:a9:7e:3b:66:91:e6:
45:be:eb:c7:3d:86:a8:d5:b2:eb:78:2d:4d:68:fa:
df:4c:fb:1d:fb:e7:5a:19:83:dc:90:3f:7c:1e:63:
45:8c:cc:36:2e:56:f0:ad:a4:d4:7e:73:25:c0:ec:
ea:08:3e:a5:bf:bf:b2:18:65:7f:c8:74:02:dc:3f:
5b:aa:71:7d:35:75:2b:87:83:bf:32:f2:e8:5c:27:
3c:5b:8c:f2:17:bc:3f:78:5a:eb:96:f1:b3:66:e9:
43:b3:ff:aa:12:a9:d0:43:ca:67:84:7b:52:47:92:
db:01:b9:45:0a:7e:df:0c:e2:25:c1:1d:f6:67:0c:
d2:0f:45:59:f0:7e:d8:73:f1:df:5e:b1:da:a1:7e:
0c:23:a9:7c:76:4f:59:a9:ac:48:50:2e:3c:48:26:
31:0c:4a:c1:5b:6e:84:6c:f6:7b:ef:9c:20:42:a4:
94:0b:e2:f6:fc:12:90:50:a8:ae:6d:21:14:02:a8:
ee:9c:9d:b6:60:44:8a:35:7f:d5:8b:73:1a:4c:f5:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1E:96:D2:3B:7F:4F:11:9C:3C:E2:CD:DF:4E:C6:5F:69:E7:EE:96
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.116.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e1:9c:e5:2a:61:f3:8d:76:90:0d:09:82:51:90:18:3f:bd:
20:1c:ef:c3:c0:9e:65:9f:f2:53:17:ed:1d:a9:2e:20:12:e0:
87:e2:af:db:96:06:e8:20:33:8c:09:9b:36:cf:dd:79:fd:40:
21:11:3b:48:92:b5:42:09:f9:44:68:34:8b:3d:b1:7b:ce:cf:
56:14:94:69:7f:cf:85:98:73:8d:81:88:32:32:76:8d:c9:eb:
92:43:b6:b2:fa:93:9a:68:65:70:b8:84:20:0d:de:a2:c0:b1:
2f:a6:43:64:cd:f3:9a:c6:15:db:50:c3:3e:c8:93:48:be:21:
26:dd:91:3a:8e:40:10:50:1b:84:23:66:2c:71:65:6b:5b:ee:
f6:7c:87:69:73:b6:0a:51:95:6c:a1:97:1d:4a:57:95:b3:d2:
5a:38:cc:ed:8f:06:1a:15:34:ac:74:8e:4a:32:e9:78:3f:2e:
b5:0a:42:16:ac:3a:4d:54:34:8a:1c:4d:d7:60:2a:6f:8e:c7:
dc:49:3f:ab:e0:79:a8:9b:6a:86:7d:34:53:cf:c1:87:5c:bd:
e1:1b:8e:17:66:5e:55:1c:bd:73:90:cb:bf:de:af:09:9a:ce:
38:72:a1:b6:83:5c:68:7f:29:4c:7f:59:d6:c9:70:22:51:ae:
60:5d:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:59:14 2026 by rpki-client