Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201907.roa
File: AS201907.roa (raw, json)
Hash identifier: voi2a3sQ+4D9DWXhYVZ0brFNQkNwN1aApRHUWGh7Yt8=
Subject key identifier: 53:95:F2:17:BF:BF:10:9B:44:C5:EE:21:01:7C:44:CD:2C:B1:2F:EE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7D0DB0281943BEE1C7D8B7DDD2FAF8CF9243B7B8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201907.roa
Signing time: Wed 02 Sep 2026 08:06:57 +0000
ROA not before: Wed 02 Sep 2026 08:01:57 +0000
ROA not after: Wed 01 Sep 2027 08:06:57 +0000
asID: 201907
IP address blocks: 46.202.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 14:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:0d:b0:28:19:43:be:e1:c7:d8:b7:dd:d2:fa:f8:cf:92:43:b7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 2 08:01:57 2026 GMT
Not After : Sep 1 08:06:57 2027 GMT
Subject: CN=5395F217BFBF109B44C5EE21017C44CD2CB12FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:9b:8b:76:bd:b9:ef:2a:af:43:3c:a9:e1:
62:a9:d2:5b:15:a7:06:e7:5b:fc:28:46:e7:d3:1f:
cd:fa:ec:25:cd:07:f2:5c:2a:4e:f1:16:66:4a:a6:
67:67:b6:7c:13:71:27:46:91:f7:9f:86:52:4a:a9:
3b:f9:ad:24:8f:59:a2:50:da:60:04:a4:53:56:fd:
07:b6:c2:87:b7:9b:54:89:bf:ae:a2:56:7d:ed:68:
80:17:b4:63:1e:d2:d6:57:b9:be:d9:44:94:36:b3:
b6:ea:00:6f:66:85:58:ed:9f:fb:7f:7f:94:ad:7a:
40:9d:9a:29:7d:b9:99:6a:43:87:76:d2:64:42:5d:
65:52:e7:0f:b7:59:b2:85:e3:3d:2a:58:6e:82:a8:
ac:bc:f3:ed:29:dc:bd:4b:a8:51:21:a0:e9:93:56:
f6:99:8c:3c:f3:2a:b8:9c:84:f2:f6:d8:b6:96:74:
13:cb:f7:e1:59:f1:46:4a:78:a3:a2:99:ff:ac:f7:
60:91:54:26:30:f2:72:be:85:da:99:38:b2:cf:25:
f9:bb:1f:a5:78:f7:a4:bf:ed:f6:e3:30:80:39:87:
85:02:3e:2a:26:63:ce:e6:a7:d0:46:df:77:9c:24:
10:f1:f9:59:73:77:eb:df:eb:1f:24:72:e8:38:29:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:95:F2:17:BF:BF:10:9B:44:C5:EE:21:01:7C:44:CD:2C:B1:2F:EE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201907.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.61.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a8:4e:16:f0:ce:73:17:48:4e:1d:1c:92:6c:92:6a:12:44:
94:8c:78:bd:13:15:c2:87:93:f9:74:86:f7:60:a2:e4:52:6a:
e2:bb:27:9f:6e:e9:a0:67:df:23:42:82:76:07:c3:ec:96:5c:
38:2f:e1:b4:a2:22:69:03:e9:99:88:e9:d4:dd:c4:a3:4a:b4:
52:e8:00:84:43:c9:55:27:e7:21:00:4c:5a:35:06:eb:ef:f4:
35:a3:4c:de:82:3e:75:66:a3:78:33:f1:9b:47:a6:2f:b7:78:
ec:52:b8:84:7f:1c:af:75:96:5d:f2:d5:73:e3:09:68:d5:27:
91:21:67:01:30:f7:6b:14:21:df:da:70:13:b4:5f:1f:2e:d4:
49:f3:a1:6e:64:a0:8e:4f:cd:2c:18:ee:25:d8:2d:a5:e9:54:
6d:fb:18:f3:86:0c:ed:a1:13:8e:8e:75:0e:b0:53:04:fe:af:
3c:25:15:f8:24:6c:99:1c:68:52:4e:5b:04:77:3d:b1:ac:36:
11:f2:3c:91:ad:0c:99:bb:ad:74:31:0c:64:8f:f0:18:f3:9b:
33:f7:98:61:c9:da:49:eb:a9:bc:8a:88:09:8e:d3:b7:be:48:
a0:dd:50:6b:46:c1:56:1e:2e:c4:cd:13:4b:41:32:59:d2:8c:
b3:e3:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 20:32:53 2026 by rpki-client