Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205634.roa
File: AS205634.roa (raw, json)
Hash identifier: G+vEcEQ9lM4qk85lf5f2Yb3MeCAmzMJTD7SGBmsMEis=
Subject key identifier: 35:FF:A2:7D:1C:CB:86:99:EF:9D:98:63:56:4E:CD:9D:6B:0C:46:9A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5E256E867800A8E85F4B2FF8955841A56EF761D7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205634.roa
Signing time: Sun 31 Aug 2025 11:47:49 +0000
ROA not before: Sun 31 Aug 2025 11:42:49 +0000
ROA not after: Sun 30 Aug 2026 11:47:49 +0000
asID: 205634
IP address blocks: 162.141.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:25:6e:86:78:00:a8:e8:5f:4b:2f:f8:95:58:41:a5:6e:f7:61:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 31 11:42:49 2025 GMT
Not After : Aug 30 11:47:49 2026 GMT
Subject: CN=35FFA27D1CCB8699EF9D9863564ECD9D6B0C469A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:b2:b7:b7:a1:52:41:22:66:52:a0:96:22:
3d:a6:a5:d4:25:fa:eb:4e:31:bb:ca:f5:21:b6:4b:
86:04:cd:36:ef:c9:9b:48:23:d3:64:2e:a3:66:9f:
b4:ad:c7:73:42:34:be:cc:c2:fa:51:ba:75:ce:67:
66:d3:f8:8b:e3:e3:d0:c9:9b:4f:cf:46:f3:25:e8:
08:86:3f:b7:81:9e:f2:24:7c:48:2f:57:f0:fc:d0:
a8:77:44:2d:aa:8c:23:14:06:4c:39:ce:4e:83:de:
00:7b:b1:57:90:26:ab:55:fa:cf:7e:73:8e:30:59:
76:72:b3:ea:61:62:c7:1a:92:ac:bb:c9:82:67:75:
02:83:4a:3b:88:08:e5:9e:1c:52:25:32:97:3d:12:
f2:f2:02:fb:4b:2e:52:42:d5:4a:1e:5c:81:db:28:
d2:b8:18:fd:5e:cf:b8:4c:aa:79:24:e2:c0:74:ce:
4a:64:de:7f:7f:cb:4f:f9:45:a3:05:56:1d:08:c7:
29:ac:8e:a7:ea:f5:51:ff:c1:f8:81:b6:27:39:dc:
43:11:5d:c2:e0:08:36:19:0f:45:f9:19:a1:f3:17:
06:30:e5:50:1e:c9:75:fe:2d:61:de:06:15:b5:44:
bd:a9:3a:3e:04:3f:d9:89:2e:4b:ac:1e:1b:dd:d8:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:A2:7D:1C:CB:86:99:EF:9D:98:63:56:4E:CD:9D:6B:0C:46:9A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.79.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5b:86:38:06:c1:1b:9b:73:cb:b9:e1:8f:d2:e7:63:a3:24:
97:16:71:1b:a3:cc:51:d8:7f:3f:f5:c3:89:6c:f0:aa:63:42:
9c:37:31:66:14:c1:df:ac:bf:e3:36:b0:27:69:08:ce:0b:28:
50:8f:8d:8f:1c:4e:6e:1d:6f:c6:f3:7d:48:c6:43:7f:09:d2:
4f:5e:6b:04:00:8b:7b:9b:09:63:c8:f1:39:96:f7:55:1f:43:
fd:a2:ad:11:ee:0c:0d:5f:4d:fb:3b:21:90:f6:8a:43:a1:5b:
8f:49:b9:5e:66:81:c2:b0:ea:62:b6:69:b2:ca:5e:cf:00:f7:
51:23:2f:a2:51:a4:cc:c1:86:67:71:ff:8f:0e:37:a1:9b:b4:
70:05:4d:4a:ec:fe:a4:1f:89:05:ff:9b:64:04:65:fe:5e:97:
0e:9f:15:16:2b:97:86:48:bf:13:61:dc:92:94:67:e8:a9:01:
b5:65:c6:88:11:f1:3b:08:9d:72:2e:e6:92:ea:3e:55:21:60:
1e:8c:d3:69:28:14:f0:42:b5:cc:0e:ea:39:54:07:60:9c:75:
d2:df:e9:55:0d:43:be:15:6e:fa:08:ba:3f:0a:e9:98:4b:ba:
a2:7a:e9:94:7b:6d:97:c7:b9:d1:e1:ad:a8:11:71:2c:4c:ad:
7b:e1:10:1c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUXiVuhngAqOhfSy/4lVhBpW73YdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA4MzExMTQyNDlaFw0yNjA4MzAxMTQ3NDlaMDMxMTAvBgNV
BAMTKDM1RkZBMjdEMUNDQjg2OTlFRjlEOTg2MzU2NEVDRDlENkIwQzQ2OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60rK3t6FSQSJmUqCWIj2mpdQl
+utOMbvK9SG2S4YEzTbvyZtII9NkLqNmn7Stx3NCNL7MwvpRunXOZ2bT+Ivj49DJ
m0/PRvMl6AiGP7eBnvIkfEgvV/D80Kh3RC2qjCMUBkw5zk6D3gB7sVeQJqtV+s9+
c44wWXZys+phYscakqy7yYJndQKDSjuICOWeHFIlMpc9EvLyAvtLLlJC1UoeXIHb
KNK4GP1ez7hMqnkk4sB0zkpk3n9/y0/5RaMFVh0Ixymsjqfq9VH/wfiBtic53EMR
XcLgCDYZD0X5GaHzFwYw5VAeyXX+LWHeBhW1RL2pOj4EP9mJLkusHhvd2E8/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUNf+ifRzLhpnvnZhjVk7NnWsMRpowHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA1NjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoo1P
MA0GCSqGSIb3DQEBCwUAA4IBAQBKW4Y4BsEbm3PLueGP0udjoySXFnEbo8xR2H8/
9cOJbPCqY0KcNzFmFMHfrL/jNrAnaQjOCyhQj42PHE5uHW/G831IxkN/CdJPXmsE
AIt7mwljyPE5lvdVH0P9oq0R7gwNX037OyGQ9opDoVuPSbleZoHCsOpitmmyyl7P
APdRIy+iUaTMwYZncf+PDjehm7RwBU1K7P6kH4kF/5tkBGX+XpcOnxUWK5eGSL8T
YdySlGfoqQG1ZcaIEfE7CJ1yLuaS6j5VIWAejNNpKBTwQrXMDuo5VAdgnHXS3+lV
DUO+FW76CLo/CumYS7qieumUe22Xx7nR4a2oEXEsTK174RAc
-----END CERTIFICATE-----
Generated at Fri Sep 5 19:49:17 2025 by rpki-client