Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202791.roa
File: AS202791.roa (raw, json)
Hash identifier: 4Svtkf1SOOapSvcWKgwLhgg3Z1DKcwJtyuOxkUBqhUs=
Subject key identifier: F3:8A:22:95:F5:08:B7:43:97:2F:5B:6C:F8:5D:1C:E4:91:85:E7:ED
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1C0D9F8E9036390FBB54EEF5EE81BA310877A31C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202791.roa
Signing time: Fri 17 Apr 2026 09:48:56 +0000
ROA not before: Fri 17 Apr 2026 09:43:56 +0000
ROA not after: Fri 16 Apr 2027 09:48:56 +0000
asID: 202791
IP address blocks: 82.25.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0d:9f:8e:90:36:39:0f:bb:54:ee:f5:ee:81:ba:31:08:77:a3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 17 09:43:56 2026 GMT
Not After : Apr 16 09:48:56 2027 GMT
Subject: CN=F38A2295F508B743972F5B6CF85D1CE49185E7ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:70:1b:6a:28:f9:14:c3:e0:f3:3b:3d:86:
1b:b0:0c:18:e7:20:a7:af:80:e5:19:db:59:08:4b:
5d:f5:07:d8:09:c4:32:66:01:2b:b7:d2:7a:30:f6:
20:50:cf:cf:65:f3:3b:29:91:9a:04:2d:95:15:c8:
0f:cf:34:ad:8f:78:4b:e4:44:2a:54:e6:57:5b:f6:
ac:94:b0:04:b7:28:09:d7:47:c3:1c:4b:a3:3b:38:
d5:5d:fa:7d:4a:5c:76:7e:09:92:55:76:1c:be:05:
7f:0d:d1:1a:5b:84:0f:ea:ba:68:cd:ee:e7:a5:50:
4a:ba:28:05:9f:5e:57:ad:1e:0c:f1:41:06:73:54:
b2:90:a0:93:d1:9e:0c:8f:2a:aa:62:46:b6:9f:dd:
73:c3:36:ef:4d:33:6d:df:e3:91:24:22:cd:22:ec:
e1:4b:31:4b:f2:39:71:b3:91:b0:de:f0:31:10:cf:
c6:66:cf:03:5d:9a:e3:97:08:b2:fc:4b:2c:76:db:
04:0a:a8:3e:37:80:25:3f:ff:76:15:26:9e:89:cd:
f9:83:74:20:1d:39:eb:e6:df:8f:85:9a:51:07:9e:
12:1a:29:c9:f6:07:76:1f:77:d3:d9:e4:99:9b:4c:
88:0f:6d:aa:80:35:2b:61:e0:21:62:7c:e7:ff:3b:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8A:22:95:F5:08:B7:43:97:2F:5B:6C:F8:5D:1C:E4:91:85:E7:ED
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.44.0/24
Signature Algorithm: sha256WithRSAEncryption
51:81:0e:67:d2:55:2a:a3:a3:15:d7:4e:83:73:12:e3:07:3e:
cd:fe:e3:19:9f:22:c2:f7:5e:52:b5:ce:b6:b9:87:2c:ec:83:
c8:0e:b1:8e:3b:4a:24:83:0e:db:fd:7c:59:da:bd:df:d6:a7:
81:d2:c8:05:a4:5f:aa:62:e8:3d:ed:fe:1f:20:ac:79:c8:f5:
aa:11:50:34:7f:fd:4d:19:6d:2a:7d:9c:f6:e7:e2:93:ec:23:
e7:cd:1a:2f:fd:59:b5:51:4c:b2:c8:53:74:9e:3b:be:7a:32:
9b:27:6a:69:db:24:7a:ad:e7:9f:bc:51:d1:e9:29:4c:c9:5b:
fa:3e:6b:5a:23:24:69:43:db:6c:f2:7c:e1:1b:4e:dd:10:e3:
5a:88:06:23:b0:9c:5a:31:ac:e6:56:bd:a1:b7:b8:49:b4:58:
cf:b0:6b:7b:35:e4:2c:02:fa:4b:18:d4:b6:a0:72:b0:b4:3a:
5d:38:fd:4f:4d:64:5f:d0:3e:b3:4c:8c:e7:72:94:d9:4f:8f:
43:00:2f:52:92:85:c5:72:05:81:fe:b1:0b:22:21:85:24:6d:
9a:5e:d4:14:9e:df:42:e5:47:f5:43:df:35:24:96:ba:0e:c3:
69:09:21:6a:ae:bd:23:72:95:d0:d9:f3:8e:90:37:12:df:a9:
07:63:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:35:12 2026 by rpki-client