Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS204770.roa
File: AS204770.roa (raw, json)
Hash identifier: i6mv9e5BwMqpdMy2F6q//AFm4VD+MEHu2xn4VbSyPIk=
Subject key identifier: D4:4D:0F:8C:BA:A1:8A:02:30:78:C8:2C:BC:39:2D:B8:2F:63:4D:56
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 22D695E05B68BBCC0A2F6715B286471729E589F7
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS204770.roa
Signing time: Thu 01 Oct 2026 09:07:58 +0000
ROA not before: Thu 01 Oct 2026 09:02:58 +0000
ROA not after: Thu 30 Sep 2027 09:07:58 +0000
asID: 204770
IP address blocks: 181.214.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 09:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d6:95:e0:5b:68:bb:cc:0a:2f:67:15:b2:86:47:17:29:e5:89:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 1 09:02:58 2026 GMT
Not After : Sep 30 09:07:58 2027 GMT
Subject: CN=D44D0F8CBAA18A023078C82CBC392DB82F634D56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:e1:93:fd:5f:33:0e:21:b6:cc:75:4e:33:
b6:ed:0d:5b:5d:61:8e:62:23:fe:fe:6c:2b:61:b2:
7a:1a:90:0e:93:b3:32:a3:45:fc:77:77:8f:58:4f:
cd:42:4d:f0:d5:cb:59:1d:7d:84:43:b8:36:c6:6a:
1f:9a:79:1a:61:74:ef:de:57:17:5e:7e:59:36:17:
14:a4:03:60:58:17:4c:1b:37:6d:88:25:7f:1a:c6:
60:4d:b7:f2:53:e2:30:3a:9e:b6:a8:39:5c:b1:15:
f2:61:1f:7f:54:88:b7:f7:93:c0:35:4f:c5:e5:92:
58:00:11:6a:6f:13:db:d6:30:49:9a:31:35:b5:36:
69:73:7b:30:3c:b0:6d:2b:f8:bc:19:41:f3:42:e1:
5f:e6:cd:6e:48:7e:fc:11:9a:3e:c4:50:66:ea:0f:
8c:4d:b0:6c:e0:7f:2e:2a:01:52:c1:99:dc:1b:37:
9d:94:79:b3:c5:65:ab:df:3b:b7:bf:c9:af:4d:18:
ea:1f:51:ab:48:08:45:dc:12:40:bf:59:b0:46:9f:
1f:46:09:d9:79:00:80:99:92:24:2f:c9:70:18:95:
8b:86:8c:b1:67:1a:b5:31:0e:bd:7d:7f:6f:7b:5c:
a9:8b:35:32:d0:9d:8f:1b:f9:7c:b0:e5:a0:3c:e4:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4D:0F:8C:BA:A1:8A:02:30:78:C8:2C:BC:39:2D:B8:2F:63:4D:56
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS204770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a8:6f:6a:02:38:da:54:05:a4:98:91:f2:4a:29:54:97:13:
3f:83:ac:91:1c:f3:d2:da:2f:09:2b:fb:c1:85:09:54:19:ca:
7c:e9:1e:71:3b:c0:fb:dc:ff:04:60:dd:90:c9:79:fa:78:13:
26:8c:23:41:48:5c:48:b2:86:17:09:7c:9e:56:49:82:39:93:
a7:45:1d:8d:85:71:51:ee:62:62:0e:d9:a4:ea:a7:70:e3:5b:
7c:49:80:f9:e0:33:42:26:de:5a:9a:45:23:a8:e3:47:b6:a1:
b2:57:e3:5e:2c:66:fb:a3:cf:4c:60:3c:c8:8c:a7:96:66:52:
88:2a:c1:8b:8f:db:af:92:ae:40:33:7a:cd:6f:2d:be:13:37:
c2:4d:4e:7b:b5:6b:67:f5:c9:5c:ee:8f:62:be:3e:e0:ee:62:
23:89:fa:55:f8:99:4e:4f:74:38:4c:00:8c:60:7e:b6:63:8e:
84:d5:c8:64:93:18:47:fc:ea:59:cf:df:d6:bc:66:b7:04:d5:
cd:40:f4:5f:b9:0d:1e:97:10:72:5b:99:5b:54:40:3a:7e:0b:
30:2a:fc:08:bc:05:2f:c9:c1:ad:95:32:9c:18:a4:e7:ca:dc:
d6:49:fb:79:91:35:c4:f6:ee:0c:49:49:6e:43:e7:51:22:5f:
75:b8:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:04 2026 by rpki-client