Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
File: AS204765.roa (raw, json)
Hash identifier: lEuS2Yrl2YZnOwWSgSJnWunAXUZFv5wxsVWjVM5s1X8=
Subject key identifier: 33:E3:B9:99:11:C3:63:38:44:AA:2E:0B:6F:1C:A6:3E:37:EF:77:CA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6B0AB9C3A5C389DF96F03B35816F437419D5F312
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
Signing time: Wed 05 Aug 2026 00:05:51 +0000
ROA not before: Wed 05 Aug 2026 00:00:51 +0000
ROA not after: Wed 04 Aug 2027 00:05:51 +0000
asID: 204765
IP address blocks: 143.14.252.0/24 maxlen: 24
162.141.91.0/24 maxlen: 24
162.141.139.0/24 maxlen: 24
167.148.68.0/24 maxlen: 24
167.148.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:0a:b9:c3:a5:c3:89:df:96:f0:3b:35:81:6f:43:74:19:d5:f3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 5 00:00:51 2026 GMT
Not After : Aug 4 00:05:51 2027 GMT
Subject: CN=33E3B99911C3633844AA2E0B6F1CA63E37EF77CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:e4:99:bf:56:48:a4:44:bf:2f:02:9f:12:
3a:66:3c:b0:cc:88:a5:f8:c8:ba:23:1a:aa:9c:6f:
52:80:6d:79:86:95:bc:7c:6e:13:71:41:34:bd:90:
90:73:7e:2c:9d:df:31:4f:d6:cb:d7:f9:04:f3:bb:
f8:aa:d3:66:84:4c:f6:f8:98:41:5c:36:c9:0e:27:
7c:bc:d6:d9:8f:dc:14:82:33:d9:0e:1e:12:ba:67:
6a:c3:95:b9:d3:6d:45:c2:c3:b2:92:e2:9a:cb:b7:
92:bc:7d:85:f4:a2:fc:ce:ba:cf:ef:23:bf:d6:cd:
76:42:dd:99:18:54:f1:4f:84:e9:40:ca:e2:0c:10:
7a:4b:49:55:af:a9:1b:6d:e4:c1:93:4b:68:22:6a:
9d:be:2f:c8:da:83:1a:ef:76:03:72:3a:0a:3a:15:
a0:0c:f8:ed:e4:da:77:f5:ca:c0:37:c4:ed:71:21:
b4:8f:75:80:34:49:3d:f9:fe:8e:8f:c3:8f:8b:99:
8a:fa:ad:af:4f:05:9b:99:06:78:d0:7e:05:5f:3b:
3c:c4:13:ea:82:0f:cd:b3:0e:c2:38:d0:9a:7a:96:
6f:7a:4a:c6:2d:20:2b:ff:90:99:68:2d:08:d7:d1:
7b:71:5d:f1:93:ef:53:b0:9c:26:99:32:ad:f1:eb:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:B9:99:11:C3:63:38:44:AA:2E:0B:6F:1C:A6:3E:37:EF:77:CA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.252.0/24
162.141.91.0/24
162.141.139.0/24
167.148.68.0/24
167.148.222.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8c:e2:ec:17:f3:61:9f:c2:78:6a:f7:90:d6:37:43:f2:54:
c2:d8:a1:ab:8d:12:16:61:e2:1f:5a:73:5c:82:09:7d:76:5f:
10:24:c3:42:a0:65:5f:d9:3e:e2:8f:c6:a5:44:17:51:71:b4:
af:1e:56:ea:7a:30:6d:b6:21:2f:76:fd:5e:f1:95:5d:13:c8:
bd:cd:9c:4a:be:b3:ee:4f:2c:39:5a:e6:f4:41:7e:6b:66:b6:
28:82:48:a3:bb:74:2e:93:55:aa:f4:76:95:6f:db:76:ec:19:
da:aa:3d:dc:16:e8:a9:62:37:60:42:52:5a:c7:09:c7:a1:46:
8e:a7:1d:21:72:98:01:69:3c:59:e9:25:cf:3e:71:12:03:28:
cb:b6:5d:86:80:36:49:e4:39:65:8d:b4:ab:a5:b9:fa:73:bd:
0c:2e:9d:44:fe:00:c5:a5:66:7e:d3:2a:b8:7d:d3:7b:fa:e6:
87:be:81:88:cc:0a:49:67:83:0c:36:10:58:e2:4f:f2:0b:b3:
cd:cc:7a:9b:17:83:d1:af:1b:1e:0a:a9:b9:66:00:82:19:8b:
39:7c:3f:3f:f7:fc:cb:8b:38:85:f8:4b:ce:3e:92:43:13:a2:
28:9b:6b:7c:42:35:ad:37:99:37:5d:5a:cd:e1:a7:23:a9:b1:
df:ab:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:20:38 2026 by rpki-client