Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS202736.roa
File: AS202736.roa (raw, json)
Hash identifier: 7TAfkeSnlmZZjOEwdkgs/It5zMPmWXmgqhW5G50dNbw=
Subject key identifier: 6A:09:EA:D4:62:C9:70:4B:B5:B5:EF:54:09:FF:B0:99:23:E0:9C:56
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4508D7E3A2290C433BACA048B8950C1759B3AC7F
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS202736.roa
Signing time: Fri 09 Oct 2026 07:49:36 +0000
ROA not before: Fri 09 Oct 2026 07:44:36 +0000
ROA not after: Fri 08 Oct 2027 07:49:36 +0000
asID: 202736
IP address blocks: 82.139.205.0/24 maxlen: 24
82.139.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:08:d7:e3:a2:29:0c:43:3b:ac:a0:48:b8:95:0c:17:59:b3:ac:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 9 07:44:36 2026 GMT
Not After : Oct 8 07:49:36 2027 GMT
Subject: CN=6A09EAD462C9704BB5B5EF5409FFB09923E09C56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:64:15:3f:99:30:96:ea:b9:6f:4f:2d:da:
33:3b:ef:65:f1:97:41:de:cd:4a:09:04:54:33:58:
af:77:32:9e:9c:f7:ed:7b:61:67:f1:99:77:a0:7b:
7e:f6:f5:2c:f9:ab:96:c9:2d:09:f8:b3:47:6a:d1:
ed:ce:09:cd:c5:21:a2:81:fc:44:a3:d1:4c:dd:a3:
12:3d:18:c7:33:2a:db:3a:79:8d:30:0d:ba:0f:29:
b5:c4:af:47:ba:48:e7:fb:f1:02:51:12:9e:bc:29:
1e:e4:ff:94:3f:53:28:b4:57:29:ee:e8:73:db:09:
07:7c:79:d6:bf:1a:f9:60:27:8f:8d:28:a1:1e:00:
b9:0a:d9:1c:94:d2:8f:d6:bc:e3:a5:5a:ed:24:4b:
11:0d:fb:b0:b8:50:a8:43:44:71:68:fc:48:76:3b:
94:08:6e:94:d7:b2:e3:e9:4a:45:95:52:d2:f5:bd:
68:e8:ec:2b:c5:8e:88:fe:e9:1a:5c:bb:03:a0:95:
93:52:8e:74:fb:76:a2:2b:19:b0:20:f6:cf:07:6c:
dd:b4:f1:51:6e:81:ed:60:c2:02:2f:2b:a0:c6:58:
04:61:0e:eb:59:97:8d:21:3b:55:a8:6c:a4:dc:52:
1a:33:4b:24:43:00:9c:42:fc:9a:c5:58:82:59:59:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:09:EA:D4:62:C9:70:4B:B5:B5:EF:54:09:FF:B0:99:23:E0:9C:56
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS202736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.205.0/24
82.139.207.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a7:00:99:ef:c4:2b:ae:97:eb:a1:49:04:ad:2e:4a:70:26:
20:07:26:9f:46:5c:f6:7e:a3:ac:9f:fd:b3:46:c8:98:b8:77:
e6:28:c1:71:c0:38:55:fc:dc:c8:49:61:be:d1:25:52:7c:46:
0a:f8:d7:88:ea:68:ea:e1:b7:eb:38:20:cb:aa:b0:ec:27:b2:
52:5c:28:80:5c:e9:f5:71:0c:40:ab:e4:92:e0:fc:90:ac:38:
a5:99:c4:aa:33:83:29:6c:2c:13:1a:3a:65:90:5c:46:59:e6:
0a:0c:4f:b4:61:9b:f4:e6:09:d6:8f:b4:fd:06:f6:41:6e:a9:
33:6a:ec:59:85:77:df:d9:48:87:2d:5a:a7:f2:20:25:41:16:
6d:8c:c3:08:ad:77:e5:8c:07:8f:8f:3f:0e:a4:d8:a0:fd:da:
fe:dd:12:49:c8:e2:9c:32:84:9e:8e:74:ac:e9:e5:b5:8b:e9:
28:0d:74:5a:be:de:4e:a1:d1:81:66:ce:2b:8b:d7:98:1a:3b:
57:e9:ad:f8:d1:d9:4f:6a:cc:4b:b5:99:c4:aa:f1:13:ba:a5:
b0:78:73:53:5e:b4:15:16:fb:05:9c:1f:19:fb:46:7d:41:5f:
f0:10:c8:0b:90:3e:07:1d:ce:0a:81:b1:0b:65:cd:8c:c1:88:
da:ab:5f:1b
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIURQjX46IpDEM7rKBIuJUMF1mzrH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjEwMDkwNzQ0MzZaFw0yNzEwMDgwNzQ5MzZaMDMxMTAvBgNV
BAMTKDZBMDlFQUQ0NjJDOTcwNEJCNUI1RUY1NDA5RkZCMDk5MjNFMDlDNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEbWQVP5kwluq5b08t2jM772Xx
l0HezUoJBFQzWK93Mp6c9+17YWfxmXege3729Sz5q5bJLQn4s0dq0e3OCc3FIaKB
/ESj0UzdoxI9GMczKts6eY0wDboPKbXEr0e6SOf78QJREp68KR7k/5Q/Uyi0Vynu
6HPbCQd8eda/GvlgJ4+NKKEeALkK2RyU0o/WvOOlWu0kSxEN+7C4UKhDRHFo/Eh2
O5QIbpTXsuPpSkWVUtL1vWjo7CvFjoj+6RpcuwOglZNSjnT7dqIrGbAg9s8HbN20
8VFuge1gwgIvK6DGWARhDutZl40hO1WobKTcUhozSyRDAJxC/JrFWIJZWZg9AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUagnq1GLJcEu1te9UCf+wmSPgnFYwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjAyNzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUovN
AwQAUovPMA0GCSqGSIb3DQEBCwUAA4IBAQBSpwCZ78QrrpfroUkErS5KcCYgByaf
Rlz2fqOsn/2zRsiYuHfmKMFxwDhV/NzISWG+0SVSfEYK+NeI6mjq4bfrOCDLqrDs
J7JSXCiAXOn1cQxAq+SS4PyQrDilmcSqM4MpbCwTGjplkFxGWeYKDE+0YZv05gnW
j7T9BvZBbqkzauxZhXff2UiHLVqn8iAlQRZtjMMIrXfljAePjz8OpNig/dr+3RJJ
yOKcMoSejnSs6eW1i+koDXRavt5OodGBZs4ri9eYGjtX6a340dlPasxLtZnEqvET
uqWweHNTXrQVFvsFnB8Z+0Z9QV/wEMgLkD4HHc4KgbELZc2MwYjaq18b
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:15:08 2026 by rpki-client