Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS202818.roa
File: AS202818.roa (raw, json)
Hash identifier: TuRGVf2ssT6NDeCFyxwERkEpnfnN2B7ejBK5TBSnBbo=
Subject key identifier: BB:A4:3D:50:2C:58:EE:8E:71:20:0F:EB:E7:ED:50:49:66:7E:E1:4E
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 0DBB2013A39F7975AAA51B522E4E3B145131CF50
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS202818.roa
Signing time: Sun 04 Oct 2026 00:51:02 +0000
ROA not before: Sun 04 Oct 2026 00:46:02 +0000
ROA not after: Sun 03 Oct 2027 00:51:02 +0000
asID: 202818
IP address blocks: 2001:4cd0:dc00::/48 maxlen: 48
2001:4cd0:dc00:1200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bb:20:13:a3:9f:79:75:aa:a5:1b:52:2e:4e:3b:14:51:31:cf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:02 2026 GMT
Not After : Oct 3 00:51:02 2027 GMT
Subject: CN=BBA43D502C58EE8E71200FEBE7ED5049667EE14E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:45:a8:e2:43:57:53:68:07:5f:f6:ff:ef:
5a:11:14:87:52:86:63:0c:39:af:74:96:66:c8:58:
ef:46:02:50:82:87:2e:22:ea:86:c0:22:3d:48:16:
f8:f0:5f:41:d8:d8:90:55:1e:53:0d:29:a6:92:d0:
82:8c:bb:78:35:e1:69:52:9f:5c:3e:47:55:98:21:
6c:54:68:7f:7a:b9:02:7b:e0:37:46:3e:7b:99:47:
9b:a6:fb:13:0a:84:f4:3e:a1:4b:bb:e1:45:62:1d:
cb:e2:c2:81:a1:31:9a:e7:f9:f1:dd:00:de:10:ca:
f0:47:71:df:2f:69:88:3d:78:fd:7d:8f:8a:d5:cc:
dc:ba:15:77:e9:18:06:d2:8b:bd:b5:f0:f2:b3:d0:
fa:35:69:6e:bd:a4:a9:52:c8:d2:a8:3b:86:e7:8c:
d5:9e:fd:4f:88:7d:ca:af:2a:fd:78:59:5d:c1:96:
73:81:6f:e0:c4:5e:d3:d8:86:44:44:b4:ec:15:ce:
3c:4b:c2:f1:66:ac:1e:56:0d:3a:55:c8:8a:42:02:
24:5c:57:02:d9:d4:cd:94:26:2e:50:f4:b2:f2:02:
8f:c0:fa:fb:d6:0e:89:f9:a5:18:df:7f:5d:04:b5:
9c:47:14:e2:26:ca:1f:56:d8:da:c4:c0:be:bb:de:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:3D:50:2C:58:EE:8E:71:20:0F:EB:E7:ED:50:49:66:7E:E1:4E
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS202818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4cd0:dc00::/48
Signature Algorithm: sha256WithRSAEncryption
05:f9:a1:f5:f1:47:fc:de:0a:f5:44:20:0e:4e:e1:75:b5:c0:
3e:c5:50:a6:6b:16:74:ae:ba:40:30:b2:42:78:7b:bb:ed:3e:
ff:6b:37:7c:ed:63:72:b8:ad:cc:ef:41:2a:03:e8:68:fd:b2:
c7:ef:10:b0:f6:20:38:2d:f1:64:c8:1e:b8:76:1b:7b:8d:7b:
3c:b4:4a:fb:81:17:2e:70:88:25:6f:4a:d7:0f:15:68:94:79:
1c:b1:d5:25:fc:0a:31:12:57:86:36:5f:e6:22:c8:05:ad:84:
65:e8:93:d1:4d:c2:bb:d4:5f:db:f6:b5:57:70:33:08:f7:a4:
16:6f:0a:ef:1d:e6:2c:ca:9c:bf:f5:8b:e2:08:da:07:c9:84:
b1:22:9c:16:93:8a:e2:1e:43:4e:5d:07:e2:4f:cb:38:6e:05:
51:29:82:e6:bf:0d:7e:0a:42:27:a8:a3:d6:e9:53:56:ed:78:
63:e3:68:df:66:88:ff:96:c8:f5:ec:65:ba:df:48:3c:17:f3:
3c:3d:53:c1:d9:ef:08:78:6c:0b:77:5f:f5:cb:3b:e9:d0:7c:
ab:2b:1d:ee:34:24:0c:c6:2c:9f:78:53:74:d8:b1:8b:be:a0:
47:f8:2b:b7:f6:fa:f8:77:21:82:7f:ba:ea:1e:c7:d8:86:bf:
59:bb:0f:94
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUDbsgE6OfeXWqpRtSLk47FFExz1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDQwMDQ2MDJaFw0yNzEwMDMwMDUxMDJaMDMxMTAvBgNV
BAMTKEJCQTQzRDUwMkM1OEVFOEU3MTIwMEZFQkU3RUQ1MDQ5NjY3RUUxNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwoEWo4kNXU2gHX/b/71oRFIdS
hmMMOa90lmbIWO9GAlCChy4i6obAIj1IFvjwX0HY2JBVHlMNKaaS0IKMu3g14WlS
n1w+R1WYIWxUaH96uQJ74DdGPnuZR5um+xMKhPQ+oUu74UViHcviwoGhMZrn+fHd
AN4QyvBHcd8vaYg9eP19j4rVzNy6FXfpGAbSi7218PKz0Po1aW69pKlSyNKoO4bn
jNWe/U+IfcqvKv14WV3BlnOBb+DEXtPYhkREtOwVzjxLwvFmrB5WDTpVyIpCAiRc
VwLZ1M2UJi5Q9LLyAo/A+vvWDon5pRjff10EtZxHFOImyh9W2NrEwL673s0jAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUu6Q9UCxY7o5xIA/r5+1QSWZ+4U4wHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTMjAyODE4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFM
0NwAMA0GCSqGSIb3DQEBCwUAA4IBAQAF+aH18Uf83gr1RCAOTuF1tcA+xVCmaxZ0
rrpAMLJCeHu77T7/azd87WNyuK3M70EqA+ho/bLH7xCw9iA4LfFkyB64dht7jXs8
tEr7gRcucIglb0rXDxVolHkcsdUl/AoxEleGNl/mIsgFrYRl6JPRTcK71F/b9rVX
cDMI96QWbwrvHeYsypy/9YviCNoHyYSxIpwWk4riHkNOXQfiT8s4bgVRKYLmvw1+
CkInqKPW6VNW7Xhj42jfZoj/lsj17GW630g8F/M8PVPB2e8IeGwLd1/1yzvp0Hyr
Kx3uNCQMxiyfeFN02LGLvqBH+Cu39vr4dyGCf7rqHsfYhr9Zuw+U
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:36 2026 by rpki-client