Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS202294.roa
File: AS202294.roa (raw, json)
Hash identifier: Oou3tel6Di3d3Xg0JbE61XJ0r2TtLftEs9PjFKdW45Y=
Subject key identifier: 67:20:2B:5E:6C:FB:F6:AB:2C:07:5F:09:88:B0:8F:EB:5E:5A:8C:67
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 484A2769E03DDA58920A6D9A431741ABCC591C90
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS202294.roa
Signing time: Thu 14 May 2026 00:06:06 +0000
ROA not before: Thu 14 May 2026 00:01:06 +0000
ROA not after: Thu 13 May 2027 00:06:06 +0000
asID: 202294
IP address blocks: 2a0f:85c1:da0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:4a:27:69:e0:3d:da:58:92:0a:6d:9a:43:17:41:ab:cc:59:1c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 14 00:01:06 2026 GMT
Not After : May 13 00:06:06 2027 GMT
Subject: CN=67202B5E6CFBF6AB2C075F0988B08FEB5E5A8C67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:23:8a:b6:20:86:ff:44:64:d9:d2:4c:b2:
aa:23:53:13:6c:b6:f0:72:76:4b:fd:fd:96:35:a8:
40:bb:5a:00:2d:38:c6:de:3e:60:9c:fa:8e:c4:31:
47:03:2a:37:e2:15:8f:b9:22:74:82:22:67:8c:a9:
dc:c4:59:57:b6:31:09:c0:ba:53:f3:a5:14:6d:e7:
92:c2:ff:da:08:a0:1c:1b:87:61:f8:c5:d0:3d:d3:
c1:57:6f:83:cc:94:3c:99:ba:68:ae:99:1a:73:c5:
c7:7c:f2:89:ad:7a:f1:7d:4b:17:20:df:a3:80:11:
e6:69:4e:b6:d9:35:39:32:13:ac:f3:9e:e5:c2:4d:
5d:ab:e0:23:72:e0:a1:7c:9b:65:55:e5:d2:32:66:
52:29:5d:6a:ec:cf:5e:e2:14:63:fb:ea:b3:a7:16:
8a:b5:0e:84:32:34:ed:03:78:ca:d6:e3:e5:af:03:
ec:d1:f4:23:bb:9b:8c:91:9a:4e:18:01:c6:c8:9c:
5f:21:8a:c5:43:01:e1:e5:2e:2a:eb:5b:7e:ae:2a:
4c:17:5b:f7:c9:14:a0:9b:73:b4:f0:ba:76:a9:85:
8f:fb:6c:ef:8c:8b:72:df:c5:b7:7a:64:38:bf:cd:
67:4e:c1:93:8c:e5:eb:6f:eb:b0:8c:0d:d5:d9:7b:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:20:2B:5E:6C:FB:F6:AB:2C:07:5F:09:88:B0:8F:EB:5E:5A:8C:67
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS202294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:da0::/44
Signature Algorithm: sha256WithRSAEncryption
24:a4:db:f7:03:59:60:e8:99:aa:fe:91:5c:b4:2e:df:56:99:
f8:7f:39:1e:22:c7:79:4e:de:83:32:c3:08:cd:eb:85:77:66:
cd:f3:1b:1b:26:1c:d2:e9:91:e2:66:e0:8c:91:69:50:9d:95:
0c:e4:d9:37:4c:04:69:a2:46:1d:f2:6e:68:65:d4:cc:39:bb:
9d:f2:00:61:3d:67:70:0c:18:81:ca:ef:69:90:96:42:2e:f4:
17:fc:30:e5:d0:60:73:95:72:a7:12:c9:5e:a1:55:fb:6d:c6:
14:03:6c:9f:9c:5e:06:0a:28:b1:e4:df:da:8d:6d:c8:30:3a:
9c:0c:fe:f9:60:65:73:30:f0:93:c1:65:cb:00:af:55:6e:32:
d8:86:16:d3:37:9c:33:df:99:be:82:67:09:27:95:32:c0:03:
63:ac:db:6a:c1:a7:ad:ce:db:0c:ab:07:0f:9c:b7:38:35:c4:
2b:99:bd:40:83:0e:2a:07:27:b4:a5:e8:cd:84:18:21:53:25:
86:e3:fe:34:44:b9:77:97:2a:e6:1e:9b:bb:64:dd:33:2b:4d:
92:04:07:18:36:b0:f7:ec:04:b7:82:7e:b2:3c:aa:a7:8f:89:
66:45:9d:4f:70:63:00:95:5d:7d:3a:46:f1:29:7f:fa:78:67:
70:d8:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 16:38:06 2026 by rpki-client