Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205634.roa
File: AS205634.roa (raw, json)
Hash identifier: OE4/vxHj/ksTCt43CUUnWjZqPYogFst49EHh5QMrtpo=
Subject key identifier: CD:1A:69:E7:80:FB:7A:C8:6A:30:46:29:C3:10:51:C0:25:6E:09:93
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 581A57CFCEE8A763E4C6C41E150F176231A0F0DB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205634.roa
Signing time: Sun 02 Aug 2026 11:49:16 +0000
ROA not before: Sun 02 Aug 2026 11:44:16 +0000
ROA not after: Sun 01 Aug 2027 11:49:16 +0000
asID: 205634
IP address blocks: 162.141.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1a:57:cf:ce:e8:a7:63:e4:c6:c4:1e:15:0f:17:62:31:a0:f0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 2 11:44:16 2026 GMT
Not After : Aug 1 11:49:16 2027 GMT
Subject: CN=CD1A69E780FB7AC86A304629C31051C0256E0993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:48:89:63:b4:49:69:8d:e9:cd:67:48:0f:
9f:df:8b:13:12:77:ed:ff:87:fa:e9:bf:eb:07:24:
cb:0a:9f:d8:cc:9b:d2:77:5f:41:60:5b:23:5d:7e:
fc:07:6e:c7:b8:25:49:bd:dc:a6:3e:ec:b1:68:67:
41:ad:75:96:ca:b5:52:ce:83:44:d0:00:39:5e:51:
28:ea:28:a5:2f:55:a2:82:ef:2f:35:69:5e:9e:5b:
52:2c:ee:4c:25:01:9e:ba:1b:ca:df:ee:6d:0b:f7:
ff:ef:2a:0a:26:16:e6:3d:c7:0e:55:5b:e1:05:0a:
53:f5:67:74:a0:89:68:04:bb:a3:35:b1:fa:1e:48:
f7:2a:c5:14:e1:ed:70:90:61:b8:a7:a1:a8:56:ae:
c8:71:5f:64:5c:24:7c:4d:65:68:98:68:cd:96:af:
5e:7d:de:a3:ef:b9:83:4e:6b:34:df:b5:2b:fe:be:
55:0f:f9:66:27:e8:84:48:8d:30:f8:39:55:a5:5b:
2e:9c:6b:c5:5e:4f:43:ca:de:2b:d5:64:03:e4:13:
30:a1:7c:fe:2d:36:d1:37:e3:06:96:c2:d1:35:f4:
9d:0b:6d:60:93:3c:e9:1a:7f:53:bf:b1:3c:4a:63:
95:b0:03:ee:e6:39:99:0f:fc:db:f4:85:96:c2:97:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1A:69:E7:80:FB:7A:C8:6A:30:46:29:C3:10:51:C0:25:6E:09:93
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.79.0/24
Signature Algorithm: sha256WithRSAEncryption
47:86:a3:4d:7b:23:ef:35:da:e6:38:61:9f:cc:de:06:6c:79:
e1:fc:2a:3e:03:f3:f2:bf:c4:1f:1b:c9:f9:32:e1:6b:af:c5:
df:41:e0:54:13:a9:e7:76:1d:e6:f6:34:de:95:83:1f:b4:ce:
7c:1d:88:d5:dd:87:fd:c5:89:c1:65:68:32:dc:89:12:dc:78:
87:58:d9:0f:b3:b1:e2:6c:79:eb:1a:b6:73:48:36:26:66:f8:
48:59:d4:41:31:8a:be:a4:f0:54:8a:e8:23:57:88:c3:40:3d:
59:5b:78:aa:a3:01:3f:a4:57:07:ff:6e:2a:19:ea:a9:d1:f2:
00:3f:3a:0f:bd:3f:03:30:45:74:a7:9d:8a:43:80:7a:48:ee:
69:c1:f7:f4:52:ea:c8:b4:92:4a:f7:a9:92:c1:b6:94:a2:e4:
d4:35:ec:3c:a9:a2:05:cc:8b:35:f0:d8:df:65:1c:ff:b6:9b:
81:d2:dc:b6:61:b6:84:2b:f2:a3:0f:86:ea:7a:ea:d8:6a:b3:
4c:ea:4d:0a:2f:0e:be:b1:b2:8a:18:49:6b:6a:68:f0:8f:b3:
58:22:59:47:0a:a1:bd:d6:e5:13:98:ef:97:62:c5:6e:c7:95:
7b:f4:37:04:8e:12:2c:aa:6c:b4:de:37:15:4d:a0:da:27:6b:
83:64:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:24:50 2026 by rpki-client