Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201030.roa
File: AS201030.roa (raw, json)
Hash identifier: Af7tuakvKPVeX06f1HMW/6V+n/b9A1pSjHdhbqMOi+g=
Subject key identifier: 88:46:8E:0F:44:60:70:21:F0:48:DC:17:72:B8:9A:CA:B7:6F:81:A2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0AFD44C4B9DD12101C0FC24D800FF788FA7501EC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201030.roa
Signing time: Mon 02 Mar 2026 22:13:26 +0000
ROA not before: Mon 02 Mar 2026 22:08:26 +0000
ROA not after: Mon 01 Mar 2027 22:13:26 +0000
asID: 201030
IP address blocks: 82.22.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:fd:44:c4:b9:dd:12:10:1c:0f:c2:4d:80:0f:f7:88:fa:75:01:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 2 22:08:26 2026 GMT
Not After : Mar 1 22:13:26 2027 GMT
Subject: CN=88468E0F44607021F048DC1772B89ACAB76F81A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:dc:8e:e1:74:67:06:79:72:c9:74:2c:97:
d5:46:44:45:98:81:5f:78:7b:f1:28:0c:08:15:c5:
29:56:c0:e6:fa:59:55:4c:c1:e8:22:cf:d7:9e:fe:
3b:bd:1f:21:41:cc:cb:27:60:57:e7:8f:1c:da:75:
cf:11:56:c5:1f:9f:67:2c:67:8d:81:17:01:0c:99:
de:23:ad:f2:86:9b:df:58:fb:41:72:86:8c:ec:eb:
d8:a4:e5:01:1e:e7:28:b0:61:f5:c6:7c:fd:4b:20:
ca:10:7f:b7:b3:f0:0b:29:a7:0c:d2:b9:ab:d0:9b:
6b:42:b6:f9:ea:cd:21:a2:fa:f5:56:4f:8f:ee:44:
dd:92:c3:1f:8d:fa:90:8c:e5:28:66:c0:b9:9b:03:
b6:f0:d9:86:bd:c5:ab:d6:47:f5:f1:16:da:f0:ce:
eb:87:a0:33:7b:d4:f9:b6:80:f8:e5:37:4d:03:35:
77:64:dd:4e:68:44:f7:d0:bd:50:a4:65:bd:75:62:
58:85:8c:8a:f0:cf:92:0b:fb:77:c1:3f:42:39:46:
4f:ca:2d:eb:7f:cf:cd:33:13:6c:c3:88:79:41:3b:
4f:30:13:09:96:72:53:da:ed:f6:8a:ee:2f:e8:d2:
9e:ba:00:dd:cb:86:8b:0f:87:27:b2:18:11:1d:9d:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:46:8E:0F:44:60:70:21:F0:48:DC:17:72:B8:9A:CA:B7:6F:81:A2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.4.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2b:ef:4d:ff:ea:c9:2c:fb:49:f2:2c:46:01:e9:8b:56:70:
22:24:c7:40:78:e0:5f:3b:d0:ab:09:90:2e:a1:2d:e1:c4:55:
8f:6a:25:83:9b:8b:fb:93:90:a5:7e:50:dd:51:c0:38:8f:26:
2e:8f:27:21:21:e5:fa:3a:07:6a:7e:43:31:fd:68:14:b6:b6:
5a:65:16:e8:bd:07:33:3d:16:22:8c:22:6f:ff:a8:38:78:e3:
05:4f:7b:99:29:31:c1:b4:b6:c1:ef:88:49:14:94:1a:81:e4:
ab:f6:d9:2c:58:59:45:0c:e7:93:36:8e:a5:e5:f0:d0:2b:b6:
d4:d1:07:b5:8d:6c:d4:15:d0:b4:06:c9:e0:b4:e1:15:4f:03:
9e:e3:00:c8:b6:28:05:74:8c:30:39:b9:92:67:a8:ae:fe:1d:
82:dd:6f:cd:7a:85:aa:3c:f5:bc:2f:70:cd:39:00:8d:d1:15:
d3:a3:36:f8:2e:08:0d:98:be:44:60:eb:d6:82:d0:f2:7e:f1:
15:59:ad:d7:06:c6:2d:9e:02:ce:de:86:49:26:5a:23:b5:06:
40:46:c8:6a:04:4e:d3:f2:42:05:0d:16:bc:c4:58:5f:e9:0c:
e7:46:c0:71:4c:af:38:c8:bb:f3:83:7d:66:72:28:e2:ab:ef:
06:7e:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:01:45 2026 by rpki-client