Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201724.roa
File: AS201724.roa (raw, json)
Hash identifier: mVczjeLURIGi7g3ZVaMkuZvZpGP0he68EQDgGmdGbao=
Subject key identifier: DC:BE:AD:6B:22:09:65:C4:EE:99:E0:93:E6:4B:44:19:29:6E:24:E1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6801A716E6C38F3CA32C8003E81C3642E55BA7E8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201724.roa
Signing time: Wed 04 Mar 2026 09:51:12 +0000
ROA not before: Wed 04 Mar 2026 09:46:12 +0000
ROA not after: Wed 03 Mar 2027 09:51:12 +0000
asID: 201724
IP address blocks: 178.83.132.0/24 maxlen: 24
178.83.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:01:a7:16:e6:c3:8f:3c:a3:2c:80:03:e8:1c:36:42:e5:5b:a7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 4 09:46:12 2026 GMT
Not After : Mar 3 09:51:12 2027 GMT
Subject: CN=DCBEAD6B220965C4EE99E093E64B4419296E24E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:69:0e:ad:c7:3e:0a:b6:de:b3:14:8b:8f:
95:e1:4a:13:24:72:ec:96:2c:f7:81:82:f3:2a:40:
17:9b:e9:62:11:42:38:1a:d5:d5:b3:12:0c:e9:7a:
6a:c8:76:fc:66:8e:e4:1d:00:f6:4a:ef:5a:11:31:
1e:0a:1b:1d:47:ad:58:e7:b9:8e:9b:2b:a4:4f:11:
31:e7:77:47:a8:37:f7:f8:3c:76:53:e9:50:59:04:
b8:c1:23:f9:19:4c:30:5d:0e:af:8a:4e:b1:c4:66:
47:eb:9e:4a:fb:ad:5c:e3:ba:72:c0:d4:e9:44:15:
fc:f4:27:8f:a2:33:2b:e4:82:8a:91:1f:aa:95:60:
26:38:79:3f:80:1e:81:8e:e2:95:1d:b4:25:89:8d:
05:32:ef:08:87:53:f6:f8:e8:59:da:48:73:f7:66:
60:fc:24:b6:31:63:24:f0:cf:51:4a:4e:ae:10:c8:
69:9e:4d:d4:a7:3d:a4:d6:3d:5f:8c:34:30:f4:52:
9b:da:c7:d8:f1:a4:3e:e6:d0:36:ce:fa:bb:2c:f8:
7b:e9:63:b2:c4:0c:36:79:e1:3b:1f:3a:12:00:94:
91:df:e1:f0:fb:53:7b:3e:5e:ae:7d:12:2d:33:ca:
c6:82:29:86:57:e5:d1:81:ae:9c:da:7d:b2:05:b5:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BE:AD:6B:22:09:65:C4:EE:99:E0:93:E6:4B:44:19:29:6E:24:E1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.132.0/24
178.83.135.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:50:d7:31:3a:24:c9:e9:0e:09:bc:da:b7:dc:1a:3f:68:58:
e6:8c:dd:11:92:79:24:1a:e5:55:98:2e:88:31:c2:78:e2:cb:
98:b2:27:63:48:2b:c6:a1:f1:94:99:68:dd:c6:70:38:96:5f:
7f:00:42:ff:5e:d4:c9:a3:cb:37:cc:a4:9d:f7:a4:63:ae:85:
df:b1:67:4b:1e:f0:e9:fd:f3:e1:3a:fa:8f:b9:95:30:6e:07:
65:03:96:4e:3c:47:38:38:a2:63:43:49:63:aa:83:5f:ad:99:
b8:5b:e3:a7:2a:70:58:b4:c6:28:7f:9d:67:af:95:e1:b9:91:
6b:22:a2:2f:35:b2:b2:5c:01:e9:df:ef:fa:58:3d:f5:c3:9d:
e7:24:9c:de:4c:a8:88:f4:cb:ac:e0:76:e7:66:8e:b7:3f:94:
a7:ac:a1:f3:f2:e0:7b:95:9c:6e:4f:eb:51:c9:f1:43:46:d7:
b8:27:91:ed:ed:42:d8:90:dc:97:bd:ac:31:93:19:90:10:0d:
df:8b:09:00:f4:80:df:88:48:3c:19:e9:19:74:a6:51:85:4e:
b1:58:2f:ac:7c:01:3e:f0:ac:2d:d3:74:00:e7:bf:0f:cb:0f:
fd:23:1c:aa:77:69:90:28:c0:b7:48:a7:38:31:f7:d0:2c:de:
72:5f:38:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:01:45 2026 by rpki-client