Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202051.roa
File: AS202051.roa (raw, json)
Hash identifier: UJVm4AcpxhsYce37YcYi1t/yvWgq6P1n8WML+MwWxlk=
Subject key identifier: 76:EF:75:A6:8F:E6:A4:A2:7A:77:32:16:20:6F:A0:BE:A1:61:49:7F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1D8F55517391FC77FCDF3B1847BC7525FA5A7C9B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202051.roa
Signing time: Fri 24 Apr 2026 10:52:12 +0000
ROA not before: Fri 24 Apr 2026 10:47:12 +0000
ROA not after: Fri 23 Apr 2027 10:52:12 +0000
asID: 202051
IP address blocks: 82.47.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:8f:55:51:73:91:fc:77:fc:df:3b:18:47:bc:75:25:fa:5a:7c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 24 10:47:12 2026 GMT
Not After : Apr 23 10:52:12 2027 GMT
Subject: CN=76EF75A68FE6A4A27A773216206FA0BEA161497F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:40:13:b5:16:68:01:30:27:aa:f5:da:01:
04:bb:7b:5b:c2:5b:9f:c9:ef:37:eb:b5:7c:13:62:
64:e4:1f:9b:fb:aa:48:bd:fd:b3:5e:dd:95:05:2e:
d9:b1:ce:3b:aa:88:a9:08:0a:16:07:73:9f:fd:d6:
2f:18:d8:79:95:2a:87:63:34:db:f9:5f:4e:7e:05:
f8:65:72:48:e1:b4:5d:da:60:51:ed:b3:16:b3:14:
61:d4:c2:5c:10:37:0a:22:22:07:9e:6c:b4:59:3f:
92:15:c7:f7:20:8b:86:7d:89:a7:5e:c4:64:7d:9e:
1e:66:32:f3:77:a6:a7:71:41:fc:30:ea:c1:ef:da:
ef:0e:57:32:5f:88:5c:06:51:0b:a7:b3:b9:2e:99:
25:de:b2:38:69:00:14:87:0a:29:95:55:02:43:48:
c1:8a:69:d8:3b:5e:1c:c5:76:54:f6:8e:91:36:f6:
19:d0:d0:6e:84:01:71:25:a0:56:97:af:72:09:20:
1e:f4:e1:e5:8d:da:3d:59:7c:99:20:53:0c:4a:2f:
88:98:8b:e4:20:eb:f6:2f:26:f6:02:f0:a4:1d:83:
aa:ba:4a:e6:08:79:6b:28:8a:da:f2:be:ea:be:0d:
39:2c:e8:4d:88:8e:e9:1b:50:66:d5:c8:f0:20:cb:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EF:75:A6:8F:E6:A4:A2:7A:77:32:16:20:6F:A0:BE:A1:61:49:7F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202051.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.62.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ea:55:47:7e:68:fa:99:25:67:72:3a:db:9f:26:d2:7a:69:
f4:17:8b:5f:32:4d:66:18:63:c9:80:38:3b:92:0b:4a:1c:fc:
ff:ec:4b:99:d7:f5:e6:fc:af:d5:7d:cf:da:4b:5d:e4:83:a1:
06:32:6c:4f:5b:7c:d5:62:61:64:2c:26:bd:90:ee:8a:1c:38:
61:0c:73:01:1f:9f:5f:00:4c:82:a5:d0:3b:77:94:82:77:91:
93:81:27:3d:47:22:4d:7e:c7:32:07:34:99:bb:70:24:ea:72:
6a:77:23:79:a7:6a:61:e6:09:b4:b0:c8:1f:9e:4f:93:4f:27:
85:60:d2:23:5f:fa:d2:bb:d3:11:37:7f:a7:e6:5f:3b:01:91:
25:6c:d8:16:3c:fd:1c:c8:df:43:6f:d1:09:54:be:4b:35:e8:
ad:4e:9b:d4:aa:de:ed:fe:26:04:d4:4f:5f:9a:2d:e4:b8:ff:
b4:d8:6f:2d:bd:ac:f9:42:84:25:fe:7e:ba:55:37:55:ae:8d:
06:6e:f7:44:96:7a:66:73:fa:17:b7:a4:d8:a2:a6:be:f3:eb:
ad:14:29:93:88:ba:ac:68:3a:74:7c:cd:dc:e3:42:74:7f:55:
ba:4b:96:1b:45:80:0b:83:dd:b5:57:76:14:e9:94:e1:74:ce:
1d:17:c4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 19:06:11 2026 by rpki-client