Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204844.roa
File: AS204844.roa (raw, json)
Hash identifier: 1Oo/2GGOaHf0HWDnNfuQvDC+ap7INhhlEB99gjeNolY=
Subject key identifier: 8A:84:A5:9B:F9:2B:5D:7E:C9:C1:45:E1:DF:C9:E6:0D:D5:E1:F7:A9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2E1DE81D122E1776A662CA9560E4593A641EB8CB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204844.roa
Signing time: Mon 24 Aug 2026 14:49:30 +0000
ROA not before: Mon 24 Aug 2026 14:44:30 +0000
ROA not after: Mon 23 Aug 2027 14:49:30 +0000
asID: 204844
IP address blocks: 2a13:9500:e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1d:e8:1d:12:2e:17:76:a6:62:ca:95:60:e4:59:3a:64:1e:b8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 24 14:44:30 2026 GMT
Not After : Aug 23 14:49:30 2027 GMT
Subject: CN=8A84A59BF92B5D7EC9C145E1DFC9E60DD5E1F7A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:37:5c:3b:48:b7:08:79:bf:0f:80:5b:35:1b:
42:8f:8e:a9:f3:ea:52:a7:79:40:7b:20:02:4a:81:
fc:f8:ce:49:39:df:a8:a4:df:9a:88:12:33:98:b0:
cf:9d:4b:74:6f:12:17:90:be:d6:c8:5d:e9:f7:74:
71:f0:be:d9:02:15:4f:02:04:f2:b8:62:15:8d:2b:
2b:c2:2e:93:e6:bb:59:98:c3:b2:55:76:f6:3c:8f:
0f:65:02:ff:21:71:21:17:9d:62:32:63:48:a1:33:
b3:78:44:3b:4b:48:64:db:3f:67:8a:0d:80:60:45:
5c:4f:d0:0e:cc:da:9d:0b:8a:44:9f:62:73:8f:5a:
96:d7:7e:31:cf:5e:f8:50:eb:a8:48:03:9c:ac:a8:
2f:c9:11:ff:02:b8:48:c5:fb:b5:8d:24:75:7e:5e:
b7:d2:9a:43:16:0d:e2:ee:e9:c4:82:13:e5:0e:a6:
af:a1:78:8a:9b:13:b1:d3:49:0b:b5:25:5e:a9:b4:
6b:c0:95:ba:eb:30:49:be:a0:3c:bd:dc:4f:12:98:
1f:aa:30:7a:4a:34:91:75:9a:fd:41:89:73:5f:d4:
3f:d7:93:81:af:ef:5c:4a:76:9f:09:1e:6a:80:40:
84:f2:b1:73:3d:9b:fb:0e:64:3e:c6:75:55:82:0c:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:84:A5:9B:F9:2B:5D:7E:C9:C1:45:E1:DF:C9:E6:0D:D5:E1:F7:A9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:e8::/48
Signature Algorithm: sha256WithRSAEncryption
20:c2:4f:5e:3d:a4:df:fb:16:b9:71:0a:6a:33:d1:2f:cd:42:
ad:94:c5:46:02:8a:ca:1f:eb:1a:7d:26:57:e3:c3:d2:bf:1d:
d8:cf:08:68:50:66:71:4f:a7:bc:97:1b:7d:8a:57:cc:13:51:
02:fe:7f:9e:85:de:31:b2:81:19:d9:c8:01:86:24:15:42:09:
ed:18:71:28:d8:47:d6:38:99:34:ac:f6:cf:cd:84:c6:fb:22:
b0:1c:20:cd:ef:ff:84:a3:48:a2:6a:d4:1c:8e:18:d2:3f:e1:
48:a1:52:42:99:4c:27:4e:35:03:2b:6e:07:13:41:f5:e7:e5:
19:45:46:9b:97:b6:7e:78:e5:bf:20:a2:53:69:6d:f4:fe:99:
19:51:66:5a:c6:9f:65:a8:63:7c:aa:24:cf:4e:c7:90:a8:29:
48:69:c6:d0:50:cc:2a:6b:80:e4:46:9c:76:86:94:78:86:00:
96:68:d1:f1:f4:1e:ed:7a:d0:62:98:b3:1e:3d:d6:fc:12:4b:
1f:e4:77:6c:a2:b0:2b:65:df:a6:b7:b7:39:b8:c3:ae:84:5d:
61:0e:4a:48:3f:13:63:ad:e3:49:67:dd:6d:aa:2e:cc:f2:ed:
37:36:49:dc:6c:da:f4:ac:af:4a:d3:60:e8:80:1d:f8:d2:3d:
64:21:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:17:05 2026 by rpki-client