Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204770.roa
File: AS204770.roa (raw, json)
Hash identifier: K0X1UnELKpduGZPdwRWtIoRM6FTK4EWagGVKYYovenA=
Subject key identifier: 27:B3:56:58:53:69:27:5C:04:AF:73:BA:1E:F4:AF:22:E7:36:E1:92
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6106B6E30059B20B697099DF67369ED8E5D24BF5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204770.roa
Signing time: Tue 25 Aug 2026 07:00:21 +0000
ROA not before: Tue 25 Aug 2026 06:55:21 +0000
ROA not after: Tue 24 Aug 2027 07:00:21 +0000
asID: 204770
IP address blocks: 167.148.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:06:b6:e3:00:59:b2:0b:69:70:99:df:67:36:9e:d8:e5:d2:4b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 25 06:55:21 2026 GMT
Not After : Aug 24 07:00:21 2027 GMT
Subject: CN=27B356585369275C04AF73BA1EF4AF22E736E192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:f5:5d:6f:e3:34:ca:19:39:14:4e:0f:b5:
e9:99:06:0e:aa:cc:83:70:df:e3:65:d2:e2:58:4e:
1b:4d:73:23:0a:70:e2:7f:89:52:0d:d8:65:c7:68:
61:fc:e9:a8:74:86:cc:60:03:bc:8d:25:3b:28:2b:
2b:c9:28:75:54:39:02:97:3f:21:90:e0:b8:25:0e:
53:4e:4c:99:27:2d:b2:b0:f5:fd:03:a8:45:79:66:
33:5c:7b:3c:fd:d4:0b:3c:1f:c5:13:d3:75:38:df:
b7:2d:0b:91:10:a2:00:86:92:2b:ce:a2:ba:0b:2d:
fa:65:ba:46:97:0b:d9:bb:ec:3c:40:e1:b7:6e:1c:
50:f1:5b:8e:91:3f:a9:f3:ad:5b:63:11:c2:5d:5b:
89:93:c2:a5:a8:36:e3:9f:08:cb:8e:38:c6:eb:70:
40:09:38:14:5a:98:1c:27:9f:30:c5:c5:81:9d:c3:
bc:4b:be:12:0f:8b:ee:d5:c7:aa:e5:70:0e:fa:98:
bd:42:e9:81:7c:48:f1:15:4d:8c:6f:75:2e:2d:8a:
23:09:88:dc:4a:96:df:18:b0:28:ea:4f:4b:7e:c2:
b8:62:8d:93:83:9c:d2:da:44:8f:0e:4f:ad:cb:be:
d0:31:ad:1e:56:2d:24:47:21:cc:7f:4e:48:7a:da:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B3:56:58:53:69:27:5C:04:AF:73:BA:1E:F4:AF:22:E7:36:E1:92
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS204770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.119.0/24
Signature Algorithm: sha256WithRSAEncryption
28:40:ba:fe:1e:6f:5c:b8:10:c2:c5:52:e9:f8:51:96:21:f0:
3e:62:1c:bd:22:34:5f:14:c1:95:9e:d6:c2:7e:99:ec:b8:ba:
88:e2:ba:63:78:7c:02:cf:69:24:1e:12:cc:bb:32:83:fb:26:
04:ce:b1:0b:43:bb:e2:68:eb:0a:8d:a4:b9:73:1e:72:64:cd:
40:b6:6e:e9:3b:a3:7d:8c:7e:39:a6:b6:10:ce:11:f6:c1:6a:
1a:bb:f0:a1:df:46:7b:b1:df:16:de:73:ac:9a:f0:56:e2:23:
10:4b:38:b5:fb:d4:1f:5d:fc:e4:ed:58:0d:fe:13:21:a3:5a:
30:05:c1:0f:a8:ea:ca:07:d8:a9:a9:31:a7:2d:9b:2d:a7:37:
bb:82:74:d9:f2:4b:3c:37:f9:77:6f:28:61:95:de:f7:22:2b:
c6:14:99:a1:20:a2:6f:b2:c2:11:17:b7:57:78:c2:f5:79:f1:
b4:2a:2a:7c:8b:c9:df:4a:25:e3:32:12:f6:98:71:14:d4:52:
16:df:c2:02:16:78:12:47:74:34:87:9b:c6:64:53:a0:ee:63:
18:ed:16:06:6f:80:ac:aa:66:f2:43:05:db:36:76:e2:d7:58:
71:6a:0e:66:f2:d8:ca:e7:8a:b8:dc:b2:3f:4b:09:ed:bd:74:
34:2f:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:43 2026 by rpki-client