Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204464.roa
File: AS204464.roa (raw, json)
Hash identifier: DLgg6zDMbAiaPRyCnNdN/9uhR1NFbJVEgvwdDSB7ISg=
Subject key identifier: 8B:68:B8:14:78:08:98:03:E4:47:4A:04:E8:EC:42:69:97:FC:8F:EB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1BA9C3C1BA3A17D88279B5AEB8FCB557CEC938F6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204464.roa
Signing time: Fri 03 Jul 2026 18:10:25 +0000
ROA not before: Fri 03 Jul 2026 18:05:25 +0000
ROA not after: Fri 02 Jul 2027 18:10:25 +0000
asID: 204464
IP address blocks: 2a13:9500:19f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a9:c3:c1:ba:3a:17:d8:82:79:b5:ae:b8:fc:b5:57:ce:c9:38:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 3 18:05:25 2026 GMT
Not After : Jul 2 18:10:25 2027 GMT
Subject: CN=8B68B81478089803E4474A04E8EC426997FC8FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:86:3c:98:a7:eb:50:2b:f8:87:ea:33:b2:
49:71:8c:9e:f6:76:8a:68:71:38:8e:b1:c3:7b:bb:
78:27:b8:c7:ed:b2:94:e8:f7:51:57:64:fe:68:d3:
da:73:a9:94:88:57:38:bd:ac:3c:94:6e:31:07:ec:
6d:f7:33:f2:3a:fb:80:7f:67:df:2b:78:51:e7:f5:
be:bc:e5:20:b9:07:c2:1d:51:b3:ca:12:1a:75:c5:
d0:cb:29:ab:3a:0e:91:dd:21:12:11:e2:60:72:6d:
a2:ea:b0:59:48:a0:51:ac:e5:89:2c:1c:b1:a0:0a:
78:61:11:e5:43:e8:b5:70:53:42:64:36:45:12:92:
74:90:07:e4:87:9a:dd:95:81:da:74:93:bb:d0:55:
35:1f:db:ed:c6:18:4a:9e:7a:ed:13:46:0a:77:fd:
3c:c0:a7:4b:ac:35:3a:97:45:5c:3e:c9:de:70:ad:
b7:8e:a7:d1:61:29:42:c9:78:14:bb:db:1f:b4:ec:
9c:aa:3c:e2:19:fa:5b:2c:98:0a:6b:d7:fa:57:db:
46:4b:1e:be:71:fa:3d:19:8d:98:63:53:ac:37:d1:
b7:cb:dd:c5:52:ac:1c:19:f6:fc:b7:d4:0e:74:8b:
7b:89:e5:f6:7e:18:04:21:d8:60:31:8d:a3:03:c5:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:68:B8:14:78:08:98:03:E4:47:4A:04:E8:EC:42:69:97:FC:8F:EB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:19f::/48
Signature Algorithm: sha256WithRSAEncryption
84:ce:23:bf:9f:f1:b6:33:c9:16:75:b1:bc:bf:64:97:86:25:
2b:ac:40:61:58:3c:fe:bb:8e:d8:d4:c1:3d:8c:23:61:38:69:
fa:76:c2:21:5e:62:47:05:fc:55:77:fb:3d:26:ac:43:eb:0a:
91:34:27:ab:1c:16:64:75:9d:ee:57:fb:48:d3:05:54:6d:8c:
fa:6c:27:57:27:3f:51:52:f4:f8:f7:1e:ce:47:97:66:14:03:
29:43:46:9d:30:83:0c:70:cc:1b:64:a5:c4:92:df:86:16:02:
de:3d:29:97:9d:57:cb:ed:2d:54:76:ad:4f:0d:a7:24:de:e7:
a5:13:cb:69:cf:77:1c:85:ce:13:60:87:4d:10:5e:26:a4:a3:
23:15:c0:d7:e4:42:b0:52:f7:6b:04:7e:fd:2b:f7:0c:36:6f:
46:a8:1e:a5:13:83:10:66:34:c9:50:c3:1c:16:9c:b0:eb:ff:
62:63:ee:41:b1:d1:3a:56:e5:16:46:48:9e:76:d7:37:67:c6:
22:93:d8:f3:b4:05:1b:65:43:09:23:fb:d3:81:84:35:5b:7a:
a0:9e:d0:17:f9:79:74:d6:c0:b2:bc:dc:17:b9:cb:2a:a2:46:
f3:5d:bd:45:a0:68:ac:9e:e4:70:53:9c:df:65:5f:1e:6b:53:
fe:50:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:54 2026 by rpki-client