Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205733.roa
File: AS205733.roa (raw, json)
Hash identifier: hp1l0Q+6W5n3uWaYB8CI33WAzk5LIm6woaB12BkOI+s=
Subject key identifier: 84:8D:77:EA:7A:77:04:28:65:7E:A0:8F:D3:04:41:0D:E5:85:C2:7E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1CE214A53204186F0C3A6E346C3D0E3ADFE60387
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205733.roa
Signing time: Tue 07 Jul 2026 20:04:05 +0000
ROA not before: Tue 07 Jul 2026 19:59:05 +0000
ROA not after: Tue 06 Jul 2027 20:04:05 +0000
asID: 205733
IP address blocks: 96.62.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e2:14:a5:32:04:18:6f:0c:3a:6e:34:6c:3d:0e:3a:df:e6:03:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 7 19:59:05 2026 GMT
Not After : Jul 6 20:04:05 2027 GMT
Subject: CN=848D77EA7A770428657EA08FD304410DE585C27E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:99:d4:13:de:d4:b7:3d:54:7f:b9:44:39:
5a:74:41:2b:5d:cc:be:ce:97:04:5a:e6:a2:31:ad:
7f:3d:2c:3a:10:e2:bc:e1:16:a6:be:58:61:56:65:
3a:ea:4c:ce:54:f4:22:c7:75:a9:7a:a8:d2:5c:4d:
d0:b5:c1:8c:27:97:70:36:fb:56:0c:c9:76:68:2b:
8c:b8:31:74:b8:86:d5:a8:a3:f1:8e:ed:73:4e:83:
5d:fd:5f:7e:2e:ae:a4:9c:bd:13:56:d2:33:5f:ce:
2d:41:e7:65:17:af:09:68:71:34:7a:36:a9:5c:af:
a0:cf:ed:8b:33:da:e8:ed:e6:82:82:21:58:55:f0:
4c:50:d4:c1:16:db:0b:8f:ae:b8:11:d8:d3:58:39:
42:1d:65:8b:29:92:62:fe:bd:6a:5b:ce:db:0d:6a:
16:47:94:ab:85:46:49:b9:98:17:f5:93:b9:6e:ea:
4f:db:86:a8:e8:23:ef:8a:a9:71:92:fa:fc:bd:9c:
8c:a2:3f:cd:4c:25:2e:77:a8:09:eb:3e:27:b1:7d:
3c:d2:6d:ee:4b:f7:e8:b3:71:f8:92:a1:74:71:b7:
12:99:fb:76:28:a9:8c:40:eb:be:23:07:8b:98:77:
4f:3a:51:55:92:34:9d:df:fb:74:67:0d:3e:ab:12:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8D:77:EA:7A:77:04:28:65:7E:A0:8F:D3:04:41:0D:E5:85:C2:7E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.114.0/24
Signature Algorithm: sha256WithRSAEncryption
34:75:bc:e0:fd:53:0d:6c:90:81:9f:fc:e8:15:a5:76:20:bf:
76:43:5d:c6:f7:83:e0:ed:59:a8:b4:2d:1f:79:43:59:d1:66:
51:d0:74:e8:90:88:f5:a5:59:5c:53:f7:b9:b7:45:52:61:19:
9e:46:55:12:31:0e:cc:ef:d1:a8:76:0c:20:e7:54:ae:54:9c:
7b:35:2a:80:3b:40:6d:4e:4c:56:8e:ba:ad:ec:10:c3:e0:20:
ed:f6:d2:29:95:bc:d2:a5:78:14:d6:86:f5:18:58:05:fa:c0:
db:3a:e5:5c:68:c1:a0:17:85:7f:b0:60:0c:1e:de:03:15:e1:
8b:c3:20:67:7d:95:37:4e:b5:36:5b:f3:c9:36:f5:e2:e0:d8:
68:78:66:81:8e:a2:0e:c9:fc:b9:30:96:b4:a3:6a:69:9a:90:
7b:62:a1:f9:00:f9:8d:60:34:3a:ed:1d:ce:55:10:62:6c:f9:
f6:53:b4:f5:43:74:b4:41:1a:7a:06:53:87:1c:10:07:e2:f3:
c0:ba:78:e8:14:30:f5:4b:83:c9:26:68:28:66:ce:8c:6f:0a:
f1:b2:21:21:dc:11:9d:e5:7d:c5:20:c5:5e:e5:c9:9e:0c:85:
58:d0:14:3b:2a:85:96:56:0c:8f:fe:8f:90:a4:dd:d0:29:03:
88:4f:df:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:26 2026 by rpki-client