Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204245.roa
File: AS204245.roa (raw, json)
Hash identifier: XoJm8pBSaI5eO2lERyOkPjg+TekxUGzTKTRcSaqezoY=
Subject key identifier: 2B:A8:4B:79:70:13:88:06:EA:A6:7B:62:21:5E:2A:88:C5:90:62:CD
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 32F403E4FB8F67FEFFE6E4048BC3529E4A6763FB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204245.roa
Signing time: Mon 12 Oct 2026 23:09:17 +0000
ROA not before: Mon 12 Oct 2026 23:04:17 +0000
ROA not after: Mon 11 Oct 2027 23:09:17 +0000
asID: 204245
IP address blocks: 2a0f:85c1:d9a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f4:03:e4:fb:8f:67:fe:ff:e6:e4:04:8b:c3:52:9e:4a:67:63:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 12 23:04:17 2026 GMT
Not After : Oct 11 23:09:17 2027 GMT
Subject: CN=2BA84B7970138806EAA67B62215E2A88C59062CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:d9:37:92:e8:fd:07:17:06:1c:cc:7b:48:
28:98:40:c8:51:b7:c6:98:f0:38:90:ef:f0:e2:92:
57:52:50:f4:18:1a:6e:e5:dc:74:d3:df:45:16:79:
4e:83:f6:48:e9:db:1c:df:a2:fe:2d:38:24:94:8e:
d8:30:63:d0:6a:ec:61:83:e9:d6:d9:b2:34:dc:5d:
6f:e3:fc:1b:7c:54:0b:1f:2e:af:2d:04:b8:7b:3c:
e5:ae:71:ab:55:92:f3:ce:54:84:3c:0f:09:d3:e9:
2c:d2:a9:19:11:fa:cd:58:cd:91:c7:49:0f:f2:1c:
50:a8:9a:d0:e6:9f:22:b2:71:ba:49:81:72:92:d2:
14:47:83:5f:05:79:b7:66:0d:ed:30:07:04:bf:cb:
9e:f7:a9:de:03:b7:ef:96:bf:5a:5c:cb:10:47:c3:
e3:82:c7:86:14:7a:ec:7f:a6:c8:16:f7:79:84:f2:
eb:86:68:f4:f9:89:f1:e0:bb:a8:db:13:00:d6:7f:
95:24:cd:d0:a3:04:db:3b:12:e1:14:90:46:23:de:
69:c2:76:c8:e6:f2:f5:5f:41:92:9c:26:66:6a:2e:
16:3d:fc:1f:7a:c2:80:9a:8a:2e:58:ef:61:92:f3:
87:72:55:f8:a5:1a:1d:96:63:11:b0:57:b7:a4:36:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A8:4B:79:70:13:88:06:EA:A6:7B:62:21:5E:2A:88:C5:90:62:CD
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204245.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d9a::/48
Signature Algorithm: sha256WithRSAEncryption
6f:f5:23:40:1f:79:ac:c4:91:3f:5b:9b:7e:40:4f:60:fe:f7:
aa:0c:d9:76:0b:33:56:ea:52:06:04:e0:31:fe:96:78:7e:b4:
ec:9b:8e:4d:8f:70:12:69:aa:c8:83:e4:9f:b0:e5:26:b0:11:
d7:bf:c5:61:78:e2:a2:40:30:73:1c:3f:f4:65:b3:22:c8:b8:
b5:57:7d:c3:41:87:99:60:78:ee:d8:c9:35:7d:67:ef:3b:a8:
01:82:fa:3e:56:9b:75:35:79:a4:09:5a:cb:fd:27:97:10:db:
b6:20:84:17:6b:89:73:1e:10:27:a4:67:bc:53:64:4e:ee:a1:
f4:15:76:06:c2:66:f9:ca:4c:d3:be:1a:68:79:97:4a:f2:d0:
f3:06:d3:9b:d1:fc:f3:b7:56:de:db:cd:d2:78:b4:91:8f:97:
a2:a6:f7:6b:64:01:c1:9f:9a:6b:6e:c6:1a:e1:97:5b:9f:00:
0d:0c:b4:25:17:8d:be:0a:c3:6e:f4:fb:d0:30:54:59:99:83:
7a:98:ad:f0:46:fe:a2:73:eb:39:86:cb:b2:0a:04:53:a8:bc:
2e:97:9a:d3:d4:9f:5b:95:d5:e9:1f:a8:c8:50:00:c4:82:c2:
18:79:41:2c:32:e3:d4:8a:2e:b1:02:45:d8:4e:01:82:82:fd:
ad:4f:23:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:27:38 2026 by rpki-client