Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202759.roa
File: AS202759.roa (raw, json)
Hash identifier: Qc8MXu18eKWwnu7W/3G0kJXXebNW2c2II2twxgGzmgA=
Subject key identifier: 8B:E8:34:F1:4F:EC:88:51:A2:D7:64:81:43:E0:21:69:9A:69:FF:59
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 23BE2C973F7BCA89A9285B69B58F032BCC4D3D2B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202759.roa
Signing time: Wed 03 Jun 2026 13:01:12 +0000
ROA not before: Wed 03 Jun 2026 12:56:12 +0000
ROA not after: Wed 02 Jun 2027 13:01:12 +0000
asID: 202759
IP address blocks: 185.155.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:be:2c:97:3f:7b:ca:89:a9:28:5b:69:b5:8f:03:2b:cc:4d:3d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 3 12:56:12 2026 GMT
Not After : Jun 2 13:01:12 2027 GMT
Subject: CN=8BE834F14FEC8851A2D7648143E021699A69FF59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:ba:85:b2:5b:67:ff:79:bc:88:0b:49:e9:
cd:4c:fb:6d:7c:d8:79:f5:32:89:5e:9a:a0:21:6d:
8d:fe:1a:7b:0b:c7:82:96:ab:61:ac:bd:87:27:2d:
3a:2d:5a:4f:e0:e0:9d:f5:a0:72:59:3e:88:15:9c:
15:65:88:85:e6:81:ee:3d:e5:09:40:c1:bc:5c:60:
da:1d:fe:25:e5:d7:fb:33:26:6f:3f:01:b4:d0:ac:
f0:31:2d:75:c5:d4:61:3b:a3:6b:07:7a:12:7e:df:
06:aa:b6:a7:24:19:8d:a1:e7:06:ef:8c:de:4a:72:
16:53:50:8f:36:73:39:02:4a:63:8f:cb:4b:19:86:
4e:37:1d:9d:14:a0:63:d1:df:5c:5d:fd:60:07:4d:
17:c8:96:93:61:8d:7a:56:4b:a2:09:69:68:13:e4:
16:a7:c8:dc:8d:c5:22:3b:f0:51:3d:5e:86:c1:4c:
01:0f:5d:20:6b:50:7b:98:ef:bc:6a:2e:e8:e2:eb:
d1:7e:fa:db:ec:de:74:62:23:95:1e:15:8f:45:75:
b1:19:d6:fe:50:98:d8:e7:a6:9b:b2:df:77:d5:86:
f7:c7:24:75:e0:18:1c:29:38:f3:49:33:f2:40:21:
b1:df:f7:b4:ce:08:54:c1:10:ce:39:be:b5:dd:f7:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E8:34:F1:4F:EC:88:51:A2:D7:64:81:43:E0:21:69:9A:69:FF:59
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202759.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.222.0/24
Signature Algorithm: sha256WithRSAEncryption
04:63:df:09:f0:75:27:81:40:b9:3d:e9:81:89:5a:4c:23:18:
ff:7b:2d:4c:95:cb:d4:68:c5:84:a1:36:25:32:17:ea:c1:db:
02:d2:24:65:1b:99:37:7f:b0:fd:ea:c8:fd:01:52:63:b4:9a:
c1:b7:e6:ba:dd:93:3c:68:db:b0:e5:b7:b6:9d:f1:80:17:dc:
bc:9b:6b:ee:8b:81:b6:fd:6a:71:ec:52:8e:17:83:4e:a1:bf:
6e:63:95:58:52:fa:ef:e6:2f:2f:15:d3:84:e2:f8:95:fd:7e:
0e:ae:f6:6c:67:f1:06:af:5d:c1:11:30:da:79:11:6f:1c:cd:
c8:0e:2f:b8:fb:32:5d:a5:88:77:37:c9:74:e0:4b:b9:82:6a:
89:35:36:f7:5e:a9:aa:36:20:f2:92:31:c7:69:c4:63:b2:e5:
c6:d9:01:24:be:bb:d1:80:a5:53:5a:63:3e:e8:94:f1:f1:47:
1e:b0:d1:f7:b1:f7:72:6a:86:7c:a8:c0:32:13:18:7b:c4:dc:
ad:c4:57:bb:50:39:b9:e8:9a:94:f2:bb:25:fc:ac:2f:54:8f:
b7:99:f9:72:80:72:e4:a1:db:51:73:30:7e:4e:c2:37:30:59:
c8:26:70:c6:62:ba:ca:83:c3:2e:7c:9a:f5:ca:84:ed:33:b3:
f2:84:6e:d7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUI74slz97yompKFtptY8DK8xNPSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA2MDMxMjU2MTJaFw0yNzA2MDIxMzAxMTJaMDMxMTAvBgNV
BAMTKDhCRTgzNEYxNEZFQzg4NTFBMkQ3NjQ4MTQzRTAyMTY5OUE2OUZGNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtULqFsltn/3m8iAtJ6c1M+218
2Hn1MolemqAhbY3+GnsLx4KWq2GsvYcnLTotWk/g4J31oHJZPogVnBVliIXmge49
5QlAwbxcYNod/iXl1/szJm8/AbTQrPAxLXXF1GE7o2sHehJ+3waqtqckGY2h5wbv
jN5KchZTUI82czkCSmOPy0sZhk43HZ0UoGPR31xd/WAHTRfIlpNhjXpWS6IJaWgT
5BanyNyNxSI78FE9XobBTAEPXSBrUHuY77xqLuji69F++tvs3nRiI5UeFY9FdbEZ
1v5QmNjnppuy33fVhvfHJHXgGBwpOPNJM/JAIbHf97TOCFTBEM45vrXd98fvAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUi+g08U/siFGi12SBQ+AhaZpp/1kwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjAyNzU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZve
MA0GCSqGSIb3DQEBCwUAA4IBAQAEY98J8HUngUC5PemBiVpMIxj/ey1MlcvUaMWE
oTYlMhfqwdsC0iRlG5k3f7D96sj9AVJjtJrBt+a63ZM8aNuw5be2nfGAF9y8m2vu
i4G2/Wpx7FKOF4NOob9uY5VYUvrv5i8vFdOE4viV/X4OrvZsZ/EGr13BETDaeRFv
HM3IDi+4+zJdpYh3N8l04Eu5gmqJNTb3XqmqNiDykjHHacRjsuXG2QEkvrvRgKVT
WmM+6JTx8UcesNH3sfdyaoZ8qMAyExh7xNytxFe7UDm56JqU8rsl/KwvVI+3mfly
gHLkodtRczB+TsI3MFnIJnDGYrrKg8MufJr1yoTtM7PyhG7X
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:31 2026 by rpki-client