Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS202940.roa
File: AS202940.roa (raw, json)
Hash identifier: 9JIXB3A0eiPVCclVGMdzokKMowFxo/aw+dwomc0iwN4=
Subject key identifier: 3F:23:42:D2:E7:1C:D8:03:59:62:13:64:63:7E:3D:65:01:EA:1F:0A
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 7BDE05AD4492E540D23FFC349F6EE848D9F05989
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS202940.roa
Signing time: Sun 04 Oct 2026 00:52:44 +0000
ROA not before: Sun 04 Oct 2026 00:47:44 +0000
ROA not after: Sun 03 Oct 2027 00:52:44 +0000
asID: 202940
IP address blocks: 84.108.142.0/23 maxlen: 24
84.108.142.0/24 maxlen: 24
84.108.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:de:05:ad:44:92:e5:40:d2:3f:fc:34:9f:6e:e8:48:d9:f0:59:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:44 2026 GMT
Not After : Oct 3 00:52:44 2027 GMT
Subject: CN=3F2342D2E71CD80359621364637E3D6501EA1F0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:7f:f0:93:19:0a:ad:fa:cb:61:87:5d:39:
64:ff:3e:d0:55:92:30:69:76:fc:41:eb:35:9a:3b:
7a:39:27:72:ea:73:fe:ed:fe:59:ae:e9:e3:ea:2e:
86:39:61:11:99:51:8f:a9:36:0f:20:c7:db:be:57:
44:8d:a8:5c:ed:1d:38:69:7e:e1:a0:75:ec:75:4b:
f8:05:6b:9a:57:39:3f:9d:98:30:0a:bb:33:b8:55:
0d:c0:37:23:24:cd:51:08:77:ac:85:d7:d4:2d:29:
08:f2:85:c5:c4:c3:62:51:53:8e:fc:09:04:4a:a7:
4b:91:0d:19:77:2e:05:db:58:e6:79:de:24:9f:c4:
0e:38:94:04:bc:a8:82:a3:5f:9c:df:fd:eb:29:4f:
80:0b:35:04:52:1e:ac:bb:11:97:66:a4:1a:9d:4d:
97:d8:6a:a9:1f:f3:35:2f:f8:7c:da:66:72:fe:1f:
ba:5b:a6:2f:f4:e0:52:9a:9b:90:01:da:16:86:a5:
3d:cf:72:b8:e6:99:ce:63:9d:20:2c:bd:a5:0e:75:
b7:76:44:60:0c:6e:8d:e6:5c:03:ce:aa:9c:66:cb:
76:fb:2b:35:3c:65:7d:80:78:60:ad:a8:cb:dd:45:
49:0c:8a:aa:de:c2:ce:43:64:88:88:f6:2a:a1:92:
f7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:23:42:D2:E7:1C:D8:03:59:62:13:64:63:7E:3D:65:01:EA:1F:0A
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS202940.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.108.142.0/23
Signature Algorithm: sha256WithRSAEncryption
63:f6:fe:7a:23:82:2a:a2:14:d7:2d:60:d1:19:b5:1b:b0:ad:
d6:32:99:be:a4:90:22:32:08:4c:bd:6a:e3:d9:35:e5:79:40:
3b:a4:bb:b0:e8:38:b1:b7:d1:6b:0f:78:38:c9:89:c1:67:15:
90:66:6b:89:63:f4:30:7e:cf:9c:f0:af:f8:cd:03:6c:bc:fe:
e4:e3:e4:ad:a0:b9:08:72:e3:73:32:85:c0:11:ca:19:b5:63:
ec:20:f2:54:01:8c:5b:d8:ca:b1:6d:24:5d:62:7d:12:93:c5:
72:8d:6a:84:05:86:12:fe:ed:cc:2b:ea:87:01:e2:2b:76:82:
59:cd:3f:35:b2:2c:57:93:f5:a5:36:5b:3f:de:5e:00:c9:a5:
2f:b3:24:da:cf:86:c1:6c:9a:83:a7:c9:c1:2c:9b:9c:ed:89:
b5:b9:a1:0a:5c:79:fa:5f:53:41:33:2b:4b:20:f7:26:4a:6a:
61:10:f8:b1:f1:0e:09:fe:94:7b:86:f2:d2:ab:90:18:df:7a:
7f:51:2c:58:68:70:47:1d:e4:35:e1:3c:3b:f4:1f:30:d7:c6:
f8:6d:56:17:ca:f3:db:f6:be:99:d0:55:5d:8c:38:25:f3:57:
9e:c6:e0:46:e5:ba:32:f5:d6:68:2e:01:d4:6c:9f:cb:3f:a6:
4d:6e:4e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:24 2026 by rpki-client