Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204580.roa
File: AS204580.roa (raw, json)
Hash identifier: GtVDcNgUuHdB4tITJl2KRjtSFobfqTKddf/FxZTRFyk=
Subject key identifier: E9:37:EF:60:C4:B4:C5:57:93:2C:90:C3:F3:37:8B:9D:3C:54:4D:9C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 42A4B9E599E8876D504D22015C2C539A140FF8C6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204580.roa
Signing time: Mon 02 Mar 2026 00:44:09 +0000
ROA not before: Mon 02 Mar 2026 00:39:09 +0000
ROA not after: Mon 01 Mar 2027 00:44:09 +0000
asID: 204580
IP address blocks: 82.22.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a4:b9:e5:99:e8:87:6d:50:4d:22:01:5c:2c:53:9a:14:0f:f8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 2 00:39:09 2026 GMT
Not After : Mar 1 00:44:09 2027 GMT
Subject: CN=E937EF60C4B4C557932C90C3F3378B9D3C544D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:52:d4:cc:f6:52:3d:e9:2e:c2:53:3d:e7:
ce:e0:9b:cd:dc:7a:67:69:d6:09:86:19:b0:99:6a:
4c:52:3c:91:bc:bc:56:2c:0d:fb:11:4d:d3:83:14:
98:5f:76:4e:57:a8:a9:6f:d3:ce:4a:0d:f6:57:1e:
ee:bd:a6:25:c6:91:f7:8e:06:08:83:86:ba:5f:5a:
53:ab:80:77:27:92:8f:88:7b:8a:ae:61:94:d9:8d:
7a:63:65:e5:28:ba:1e:75:d9:60:16:f1:42:b6:ba:
9d:39:66:09:eb:83:a6:1d:78:4c:26:b9:48:9f:17:
e3:14:e6:bd:6f:a3:30:52:4c:0e:83:e9:09:7b:4a:
b6:84:76:36:fd:d6:01:d5:37:5d:90:cb:25:2c:60:
82:d9:9a:7d:1e:62:fc:3c:22:1f:24:10:84:e2:e8:
b9:61:2e:ef:9e:28:bf:6a:1a:fd:9f:0c:ce:75:4f:
09:5a:46:23:48:b4:f8:7c:6b:79:99:af:8a:56:b8:
fb:01:76:b5:6a:b0:9e:9c:89:b4:81:c1:7e:41:b8:
a2:a5:19:3f:52:c7:7c:4a:e2:e2:60:7f:32:3c:dd:
a0:79:92:f2:69:84:e5:bf:7e:4a:49:5f:8b:1c:27:
6b:bd:b6:91:1f:e8:1e:64:f9:4a:7e:bb:4a:1b:aa:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:37:EF:60:C4:B4:C5:57:93:2C:90:C3:F3:37:8B:9D:3C:54:4D:9C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204580.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.32.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ed:bb:30:70:4d:64:78:96:cd:11:9e:70:24:48:00:ee:26:
06:aa:0c:a0:1a:1d:6a:d7:8e:17:9b:dc:86:27:91:2a:6e:ca:
1c:ed:c2:ae:20:ca:cf:20:a3:a9:e5:ba:54:fe:59:85:ef:e2:
16:fd:e9:e3:98:82:50:26:2f:a0:58:9a:a4:66:82:eb:6e:05:
61:be:e8:87:67:4b:ed:73:e5:38:74:a7:ca:f9:cb:d1:17:91:
5b:59:4f:70:82:c4:cd:aa:bb:c9:52:51:d8:fa:8e:a5:5e:01:
e2:18:ab:69:73:a5:3f:2c:4b:44:55:2f:19:1b:00:ca:ec:cc:
05:b0:3f:68:69:dc:97:86:01:c8:52:55:c8:8e:c5:ad:f8:36:
69:9f:fb:f3:27:e4:c4:84:15:56:ca:ba:0d:94:bb:fb:b9:ee:
c7:b1:f7:4f:11:04:b3:fb:7d:c2:c4:7a:af:27:8a:b3:1a:1b:
47:06:94:fb:d5:2c:ef:21:30:c4:2d:1f:21:28:8d:12:64:8c:
e3:0c:12:f6:1f:14:7e:70:53:8a:59:06:14:58:08:7e:cc:ba:
b9:a3:23:26:7c:22:0c:80:a3:01:46:a2:ac:18:10:b3:89:a8:
e8:d7:26:85:72:4f:2b:24:c7:a0:be:6a:2e:89:15:10:5b:15:
2c:96:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:04:26 2026 by rpki-client