Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205634.roa
File: AS205634.roa (raw, json)
Hash identifier: HNnfbhqki27F90cH7wbBm7VB7yuVG/sL4WhIHa0Sb1c=
Subject key identifier: DC:16:3D:41:89:A5:8A:C1:14:DA:40:EF:A9:C3:8F:D4:83:33:30:06
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 63B7096A26518228CFB7DFCD08C0273B431A71BE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205634.roa
Signing time: Thu 20 Aug 2026 08:49:30 +0000
ROA not before: Thu 20 Aug 2026 08:44:30 +0000
ROA not after: Thu 19 Aug 2027 08:49:30 +0000
asID: 205634
IP address blocks: 45.87.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 03:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b7:09:6a:26:51:82:28:cf:b7:df:cd:08:c0:27:3b:43:1a:71:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 20 08:44:30 2026 GMT
Not After : Aug 19 08:49:30 2027 GMT
Subject: CN=DC163D4189A58AC114DA40EFA9C38FD483333006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:10:5b:42:ea:14:64:33:30:dd:a8:87:7a:
d2:5f:07:12:2f:15:c1:bb:38:60:6f:ec:e3:b7:5d:
42:44:38:9d:dc:d1:2b:0e:3f:70:2d:68:3d:6e:4b:
4d:a5:57:e1:2b:e4:47:96:59:c3:dc:24:74:c0:c2:
af:44:b2:c2:17:92:ed:96:e6:62:56:28:d3:ca:48:
fa:53:3a:b0:dd:c3:d8:1e:78:72:9b:25:69:e3:25:
c0:bc:b5:78:5b:54:38:62:ba:70:7c:d7:3c:49:d9:
78:bd:f3:c5:11:b7:e3:d2:c7:f4:83:73:09:40:b9:
e9:57:e5:37:10:53:61:30:a1:d6:43:83:f1:ab:0c:
0a:34:1c:5f:32:1f:40:c5:02:44:96:c5:95:88:9b:
eb:44:6b:34:1c:c6:5a:2a:16:05:0f:57:a1:c6:9c:
e2:fe:e8:2f:26:c6:49:36:16:b7:6f:5d:ad:63:c0:
0f:9f:75:31:de:06:b7:e1:ff:5e:2e:3d:c9:f6:66:
fd:b8:45:a5:e7:f1:4a:9e:c3:0b:24:e6:c3:b1:f9:
f2:63:88:aa:d4:3b:a8:69:fe:ef:6a:a5:14:f4:48:
92:75:83:44:29:a9:5c:62:14:e4:ba:71:e9:2d:9d:
01:1e:51:ac:ff:6d:ba:73:63:34:39:7a:48:76:84:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:3D:41:89:A5:8A:C1:14:DA:40:EF:A9:C3:8F:D4:83:33:30:06
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.187.0/24
Signature Algorithm: sha256WithRSAEncryption
83:bb:de:e8:2d:16:9a:d6:97:24:c1:67:6d:1e:f6:aa:aa:bf:
8a:8f:fe:87:cc:4e:1c:3d:5d:26:45:87:60:df:7e:90:82:19:
7a:5a:31:31:a0:4e:a8:ff:de:a8:d0:da:15:95:6a:33:b3:52:
de:bf:90:4c:2d:64:ec:aa:b6:16:47:1c:40:69:62:9f:c6:04:
42:2b:82:09:09:51:ef:b3:d3:9a:d6:13:fb:a6:1e:7a:2b:b7:
ea:54:db:6b:1c:ca:c4:1b:2c:aa:3d:9a:d7:88:12:e5:a9:43:
92:f2:0f:0f:8c:b4:a4:17:60:64:ca:14:c1:20:e4:2f:9a:56:
bc:94:a0:b5:ec:c4:a0:6a:be:34:c5:c5:da:3c:86:ac:25:35:
44:6d:5f:75:c1:97:a5:a0:b3:9e:32:35:fc:27:f7:65:f8:10:
b4:db:8a:78:21:16:dd:19:07:50:7b:e0:5b:0a:1e:f3:c0:4f:
e9:43:b1:e4:16:34:82:e9:13:8f:45:7c:81:0e:c6:b5:99:da:
e1:4d:a6:ea:c2:09:47:bb:23:a7:5c:76:8d:35:4a:52:cc:c0:
16:c1:de:60:ce:7c:1b:78:d0:4f:b9:c8:11:67:96:74:fb:8d:
66:26:a8:4c:95:12:15:69:94:13:1f:bc:c3:a6:c5:75:a0:89:
35:ed:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:24:50 2026 by rpki-client