Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201814.roa
File: AS201814.roa (raw, json)
Hash identifier: 0v9oOgfjBYoky1QB0UU2sE699n6WY9KWavStwvAtGVk=
Subject key identifier: 40:0E:A2:E4:8B:29:D9:F3:47:E9:80:13:04:B3:B9:94:B8:35:9F:D3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6204F15B47D26325F60AC8CE54BB48471E96B65D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201814.roa
Signing time: Wed 22 Apr 2026 10:59:15 +0000
ROA not before: Wed 22 Apr 2026 10:54:15 +0000
ROA not after: Wed 21 Apr 2027 10:59:15 +0000
asID: 201814
IP address blocks: 168.222.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Apr 2026 01:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:04:f1:5b:47:d2:63:25:f6:0a:c8:ce:54:bb:48:47:1e:96:b6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 22 10:54:15 2026 GMT
Not After : Apr 21 10:59:15 2027 GMT
Subject: CN=400EA2E48B29D9F347E9801304B3B994B8359FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:08:5c:e7:b3:61:8e:6e:05:0e:ea:34:32:
ac:81:f8:75:46:78:54:a6:8b:2c:f2:be:f4:0d:d2:
f6:4f:f6:c7:ff:d8:a2:96:59:39:95:49:7c:4e:f4:
12:a7:8f:98:09:19:3c:46:45:06:54:4e:7e:68:9f:
e8:c0:41:c9:89:cf:10:40:66:6d:82:38:4f:30:62:
4a:03:9e:1f:83:ba:78:09:d2:e6:2f:15:72:98:b9:
6f:59:5a:58:31:f3:fd:fe:77:26:d8:20:7f:a4:92:
4f:d8:83:78:dc:9a:b7:c9:c4:95:b3:23:8e:f0:ae:
7e:6d:3e:91:fa:67:b4:89:9b:96:64:92:db:4d:55:
61:44:0f:b9:24:5c:5e:c8:b8:37:56:90:5a:b4:00:
43:62:96:b1:b3:41:a7:6c:a7:22:31:9a:5c:b0:5e:
44:21:36:68:d2:b9:1c:b9:90:e7:47:c2:ca:e5:be:
9c:ba:4d:51:ce:06:2d:3a:02:b6:ff:19:2e:b1:0e:
2a:00:8b:f8:3e:3c:fc:34:0a:44:02:85:27:f8:d9:
8f:24:24:a4:b0:1c:e9:c2:68:b4:47:51:05:35:93:
82:0a:e4:ce:58:32:43:84:d6:4c:60:aa:60:53:02:
36:f6:43:f6:97:7d:00:85:75:da:97:90:0d:db:17:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0E:A2:E4:8B:29:D9:F3:47:E9:80:13:04:B3:B9:94:B8:35:9F:D3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201814.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.10.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9b:6b:33:fb:57:07:c5:90:30:a8:3b:3c:61:a7:73:4c:11:
77:47:c9:ce:ae:51:da:d7:bd:58:f5:55:38:75:30:a5:06:8c:
25:8f:1b:e0:6d:bc:6d:1a:46:01:8e:27:21:b2:73:c8:2d:50:
d1:d6:d9:2c:0e:63:75:6f:eb:a4:c3:ee:db:be:1d:1b:94:46:
fc:c2:8b:1a:34:ff:51:7b:ed:d7:8f:e1:e5:db:b5:be:19:c2:
58:fe:45:1b:59:44:e8:12:75:ee:75:dd:cf:b2:0e:70:68:c6:
6d:27:a2:e8:7b:b5:6a:6b:57:cd:0f:4b:94:7e:e7:fe:31:de:
15:74:e7:ed:a8:bd:00:bd:8d:47:8d:03:dc:b5:91:08:d3:f9:
10:d7:d2:f1:77:78:79:6b:ba:e6:b9:28:be:64:07:31:0c:b6:
7e:50:55:46:15:da:13:46:84:47:e4:e7:f6:5c:e5:dd:75:17:
66:85:19:de:ea:ad:c8:b4:22:60:23:cc:cc:79:e5:ce:68:f5:
6a:9c:81:98:59:cb:2b:33:7b:15:84:6a:ea:94:46:e5:1a:72:
b8:5f:17:ac:5b:0b:dc:77:f5:6b:bf:32:00:28:f1:60:39:1e:
8a:74:90:24:fd:b3:d7:54:ac:8f:aa:bd:dd:98:e6:c2:d3:ab:
13:a0:06:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 04:18:52 2026 by rpki-client