Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS204765.roa
File: AS204765.roa (raw, json)
Hash identifier: bCE9zTV0cI88kNjls2xIbkkajNhpoNS92n7x6CZeZN8=
Subject key identifier: E4:E7:20:DB:A0:6F:3D:B3:90:4C:BE:56:F4:3E:4F:5D:5F:C3:CD:67
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 2B6F0659C8FA5F8CFF9E6D1BCA946A6A8F08918F
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS204765.roa
Signing time: Tue 12 May 2026 15:40:50 +0000
ROA not before: Tue 12 May 2026 15:35:50 +0000
ROA not after: Tue 11 May 2027 15:40:50 +0000
asID: 204765
IP address blocks: 83.171.244.0/24 maxlen: 24
85.8.160.0/22 maxlen: 22
176.53.159.0/24 maxlen: 24
193.32.204.0/24 maxlen: 24
193.32.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6f:06:59:c8:fa:5f:8c:ff:9e:6d:1b:ca:94:6a:6a:8f:08:91:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: May 12 15:35:50 2026 GMT
Not After : May 11 15:40:50 2027 GMT
Subject: CN=E4E720DBA06F3DB3904CBE56F43E4F5D5FC3CD67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:34:13:9e:e1:6f:c7:99:d3:05:d0:79:a7:
61:0f:d7:f7:bf:1b:39:d5:68:4d:4f:e9:f7:12:12:
f1:2b:e7:37:6a:d4:c3:d1:31:77:8d:b0:c0:df:fe:
08:dc:9a:ea:07:20:a2:df:36:68:8f:39:12:2d:7b:
90:35:93:3f:37:4f:81:b5:58:91:e8:81:ca:cd:8a:
8f:c7:44:2f:a7:ab:04:63:70:20:ba:ed:06:3c:ca:
85:fc:d9:cd:86:ff:61:10:3b:39:94:5c:04:96:79:
4f:49:e0:c8:50:b0:ee:06:59:88:d6:d0:33:84:40:
67:05:ef:68:79:9e:57:ca:c2:7c:f1:83:d1:ff:3a:
13:cc:07:02:13:38:bd:8d:19:f7:d1:41:9d:bf:3f:
3d:b5:f5:e5:84:eb:3c:9f:df:ac:db:23:19:6b:67:
b6:21:d6:3a:e0:f3:b4:42:3d:50:9a:91:2a:b5:22:
c6:8d:3e:1d:bd:89:b5:a9:7b:02:f6:56:73:37:7f:
6d:7b:5b:65:b9:15:a8:f0:e6:36:d0:4f:cc:1a:ed:
e3:1d:12:a9:a8:92:22:22:18:0e:0a:75:53:e7:3e:
01:ad:71:4c:5e:ca:0a:8d:fe:e6:a9:4f:e8:41:9f:
a0:8e:6b:57:e0:e7:cc:11:2c:84:8c:a8:a4:35:20:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E7:20:DB:A0:6F:3D:B3:90:4C:BE:56:F4:3E:4F:5D:5F:C3:CD:67
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS204765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.244.0/24
85.8.160.0/22
176.53.159.0/24
193.32.204.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:4c:87:57:f5:6a:72:7d:23:cf:d1:34:e9:27:5a:2b:e3:29:
73:b2:33:78:51:09:1d:e5:22:e5:63:7d:bc:33:97:5b:7a:50:
05:7e:54:c4:cd:44:be:c7:ca:d1:ce:72:0f:a2:fc:eb:dc:ee:
96:0e:29:0e:43:14:79:4e:d3:df:d3:45:35:60:7c:33:10:7b:
5d:6c:51:1d:4a:eb:a9:d8:6f:15:e2:c9:d3:b2:91:1a:10:ee:
83:26:e9:f7:86:e8:6e:f0:09:7f:b9:10:14:43:19:48:30:0d:
18:d6:ed:e9:c1:ea:2c:a2:4a:27:0e:ed:f1:f5:66:3f:e8:11:
4f:3b:57:4b:ed:d0:10:cf:bd:74:dc:5d:8a:74:aa:83:75:85:
09:e1:33:b5:9a:1e:56:e7:73:95:9e:5a:ff:eb:59:dd:5d:ba:
80:ec:32:67:1b:f9:af:66:ca:65:a7:2c:91:47:c9:fe:b8:8a:
72:49:06:59:d6:ea:7d:02:a6:e4:48:e7:f7:7e:ef:5b:d7:5f:
7f:a3:32:ab:e4:9a:b2:96:ea:02:29:f8:89:e5:b4:cd:39:a5:
fc:cb:d0:d6:d7:b1:84:98:23:a4:47:75:2f:78:9e:b5:5f:9b:
a9:56:ba:70:cb:93:a4:f9:1b:81:24:e1:ea:c1:10:74:85:fd:
f9:04:0f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:08 2026 by rpki-client