Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201021.roa
File: AS201021.roa (raw, json)
Hash identifier: P3beZc8BmorNWGYkmtCR30inikhcD3aoSKBG8gldZ5k=
Subject key identifier: 23:CA:72:1F:2D:80:65:8F:E2:A6:32:0B:8B:03:46:E4:CA:52:AD:6D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3E493161F3E0DF722E59A189BD7C1E102C98C40C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201021.roa
Signing time: Fri 26 Jun 2026 16:13:12 +0000
ROA not before: Fri 26 Jun 2026 16:08:12 +0000
ROA not after: Fri 25 Jun 2027 16:13:12 +0000
asID: 201021
IP address blocks: 178.83.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:49:31:61:f3:e0:df:72:2e:59:a1:89:bd:7c:1e:10:2c:98:c4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 16:08:12 2026 GMT
Not After : Jun 25 16:13:12 2027 GMT
Subject: CN=23CA721F2D80658FE2A6320B8B0346E4CA52AD6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:07:f9:79:50:33:b9:bd:53:7c:18:30:c5:
18:fc:4a:f7:3e:84:15:e8:eb:72:9f:3a:57:aa:22:
ac:34:39:a1:25:02:38:a9:82:e3:ce:c7:1d:67:6a:
d4:01:69:3e:00:99:29:e2:76:e6:03:49:42:b9:72:
1b:fc:ef:b4:87:da:b7:2e:6c:4b:5f:ba:04:2c:dc:
9f:9a:ea:e1:b0:54:6d:5d:7a:4a:0b:ce:e0:ea:c7:
5d:43:6f:7d:fb:80:d2:85:67:16:4a:f3:15:6a:0c:
9d:28:fe:2c:7e:81:2b:cf:44:b9:f2:a4:c7:3e:38:
1b:95:bc:ec:c3:cd:09:72:5b:ed:36:d6:d4:d8:3e:
65:d7:70:95:7c:69:06:ab:c3:1f:2e:35:bb:70:46:
17:6d:70:34:ae:79:00:d5:a0:bb:ce:32:4e:14:61:
d2:98:32:b4:93:50:8d:2d:37:c2:8d:c4:dc:d7:c4:
85:d6:99:82:7b:90:0b:e4:8d:d9:72:04:5b:db:01:
ab:3b:d4:8c:4b:61:f5:11:df:b0:49:fc:3b:57:d0:
3c:3b:c7:a3:66:57:86:ea:79:7c:ef:1c:bc:d3:62:
a8:a6:2e:5c:76:de:69:45:fb:40:1b:de:5b:b5:d5:
e7:32:82:d9:45:aa:2d:eb:92:12:6f:fd:b7:c9:dd:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CA:72:1F:2D:80:65:8F:E2:A6:32:0B:8B:03:46:E4:CA:52:AD:6D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201021.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.111.0/24
Signature Algorithm: sha256WithRSAEncryption
57:92:87:2a:f3:8d:90:47:9b:e5:db:85:3f:cc:77:4a:9f:d3:
1f:b8:58:21:fa:65:b7:ff:f4:cf:ab:64:42:af:c7:8b:8a:e3:
1d:59:55:c1:5f:91:15:a0:3a:a8:4e:78:e8:fd:30:66:c2:f3:
c6:3f:60:b7:80:b6:54:ba:80:22:28:a3:05:4f:7b:21:87:fa:
18:ea:2c:fd:41:02:e9:73:ca:92:da:13:da:e9:01:8e:49:4e:
91:71:56:df:d8:6d:91:01:b3:09:b4:0c:4e:80:13:ae:a8:f1:
a0:f3:7d:f3:1a:c5:10:a7:61:67:68:8b:8f:10:c0:9d:74:21:
c5:8c:55:67:dc:2c:37:1a:30:35:1e:7d:5d:31:24:10:d6:69:
67:65:ee:c6:64:45:03:1e:29:38:78:ed:ac:52:4b:5e:18:1e:
c0:0c:be:14:79:a5:93:8c:55:0d:51:fe:2c:c0:06:27:49:af:
19:ba:4f:65:f3:75:68:bd:83:61:c5:9f:ee:96:e9:18:8f:91:
e6:0b:66:a4:c4:e0:d3:fd:0f:42:32:ce:c2:48:ae:15:0c:97:
73:b3:44:75:f6:82:c9:03:32:06:48:1b:ae:8e:ba:dc:bd:5d:
b3:1f:42:c0:e5:89:9c:f1:51:ee:35:fc:d0:bc:00:89:3c:28:
bc:d0:c1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:56 2026 by rpki-client