Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204535.roa
File: AS204535.roa (raw, json)
Hash identifier: 04aF0eaXsui5r8UvbDef48zZFzpjvVA4SACeRiCsm+0=
Subject key identifier: C0:3B:65:43:0C:D5:DE:EC:B4:0D:E7:D0:3B:75:FA:14:7C:12:36:4A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 78DF0CEAA3926986AD97FAF01CB2754B66E705B2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204535.roa
Signing time: Wed 14 Oct 2026 09:49:36 +0000
ROA not before: Wed 14 Oct 2026 09:44:36 +0000
ROA not after: Wed 13 Oct 2027 09:49:36 +0000
asID: 204535
IP address blocks: 2a13:9500:107::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:df:0c:ea:a3:92:69:86:ad:97:fa:f0:1c:b2:75:4b:66:e7:05:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 14 09:44:36 2026 GMT
Not After : Oct 13 09:49:36 2027 GMT
Subject: CN=C03B65430CD5DEECB40DE7D03B75FA147C12364A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:38:5d:f4:67:71:96:0a:61:b5:2a:4c:ec:
0d:6f:a9:07:b8:88:64:94:07:dc:8b:94:7c:2c:a2:
c3:9a:75:90:59:2f:2d:57:18:d6:1b:11:b3:55:99:
d7:9c:f0:c3:47:65:22:14:af:33:5d:72:f8:c3:72:
a6:c4:3c:32:14:04:ae:cd:f2:a7:da:4b:fc:a0:ca:
05:a0:b4:fd:19:1e:fb:bd:b8:f0:c8:8d:b0:0d:9b:
dc:9a:ff:45:3e:ad:1e:cc:6d:5b:ac:30:22:15:9c:
17:8a:1c:ab:e8:7e:da:b0:03:f5:75:68:07:7d:d7:
5c:78:75:82:3a:2a:8a:5b:49:5d:2d:d6:de:7e:ae:
9e:7e:29:ae:17:e6:fd:23:a3:01:75:87:7d:d3:6a:
d3:ca:df:3b:b6:9a:51:ee:ff:bc:16:eb:be:32:1b:
66:c6:21:3e:80:65:a6:f6:18:b9:f8:77:c4:c0:76:
1b:d0:43:a1:2a:54:aa:02:02:29:98:cc:3a:f3:56:
13:5c:cd:9e:db:bd:d6:21:e9:c9:83:5e:8d:42:1d:
0e:51:49:22:63:96:4e:12:00:62:02:a4:a2:54:55:
9b:81:66:e4:ff:52:8b:92:eb:3a:3d:7e:80:c1:d3:
ab:6d:ab:8e:b4:f3:c5:df:8d:e6:3e:da:d4:50:cc:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3B:65:43:0C:D5:DE:EC:B4:0D:E7:D0:3B:75:FA:14:7C:12:36:4A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:107::/48
Signature Algorithm: sha256WithRSAEncryption
96:c8:c5:87:21:c7:01:0c:06:88:ee:f4:c6:62:02:8a:0d:7e:
47:52:46:2a:dd:c3:ac:c0:8f:4c:8e:72:90:e9:5e:b8:84:7b:
3b:ed:03:97:64:bf:20:06:76:c1:f1:05:e5:8f:e3:ba:f2:25:
eb:4e:90:16:44:03:90:62:e8:60:c2:4f:8d:40:95:86:a0:46:
7a:0d:9a:3f:59:dd:66:99:4b:4c:fe:2f:53:16:75:3e:99:93:
c6:fc:ae:35:28:bf:51:0f:b4:a3:53:dc:9a:ec:46:61:05:b8:
04:32:9c:f8:03:ea:d4:61:b6:65:ae:99:ee:ad:af:fe:e3:ea:
f4:4a:cd:25:d9:86:0c:2c:d2:06:86:5b:6f:d2:8b:52:a3:00:
27:76:3e:23:62:90:3d:21:15:10:84:61:f3:ec:34:0e:99:4b:
27:40:09:40:8f:90:b5:50:99:a1:ce:f0:1f:ec:22:2b:d0:80:
bb:9b:f6:73:b6:c1:69:13:20:14:08:72:e4:15:01:60:d4:3a:
e5:b4:00:08:1a:f3:83:b9:87:fd:af:b7:e0:c9:17:e8:6d:55:
a0:a4:c3:c1:44:8d:52:3d:02:04:45:44:1c:e1:36:61:69:5c:
2d:b7:6f:5b:e9:19:82:5c:01:93:5b:cc:d5:e0:48:d2:54:d2:
cd:71:9d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:56:46 2026 by rpki-client