Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204293.roa
File: AS204293.roa (raw, json)
Hash identifier: gWSwzAI93l8CNsJBr6IsR5iw2ZxG2AsFIuSyCzJnwGU=
Subject key identifier: FA:65:60:E5:56:F2:53:90:15:0D:50:6C:BC:54:04:A1:85:96:59:D0
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2CA77A044FD95F2521DBB79A0546EE31AD7D964B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204293.roa
Signing time: Thu 08 Oct 2026 15:09:16 +0000
ROA not before: Thu 08 Oct 2026 15:04:16 +0000
ROA not after: Thu 07 Oct 2027 15:09:16 +0000
asID: 204293
IP address blocks: 2a0f:85c1:d98::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a7:7a:04:4f:d9:5f:25:21:db:b7:9a:05:46:ee:31:ad:7d:96:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 8 15:04:16 2026 GMT
Not After : Oct 7 15:09:16 2027 GMT
Subject: CN=FA6560E556F25390150D506CBC5404A1859659D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:48:a5:c0:1c:4b:3b:a3:92:be:05:2c:d8:
c6:df:0e:9a:7f:2a:3c:f6:d0:e2:e0:f3:55:39:bb:
3c:a4:f6:d5:7b:cc:86:31:ff:78:40:78:c3:1c:3a:
df:b5:36:4d:2f:f8:60:b8:62:a2:1f:f8:a7:eb:aa:
d6:55:37:67:e5:02:ba:b1:56:eb:76:1f:8e:e5:79:
37:c5:b8:1b:f8:73:19:c9:d7:ec:81:99:32:37:15:
05:de:6a:aa:43:89:22:fc:9d:b7:d3:90:ed:b5:9e:
ae:18:47:d0:af:ae:e1:8e:91:d8:a9:62:4b:43:68:
45:00:76:44:e7:88:0d:43:38:5a:13:4f:b6:00:42:
be:9a:03:c0:a3:0d:79:0a:a3:61:8b:09:c5:3a:a4:
ed:ee:c5:b8:b5:4c:b0:44:20:2a:ae:c7:83:e4:13:
46:6f:b7:79:9a:28:ee:6d:64:4f:b9:d4:4a:14:cb:
cc:d9:70:27:a2:d0:89:25:52:71:d5:47:31:99:52:
18:e5:6b:39:6b:8f:ea:dc:b4:4d:8a:ac:05:7c:db:
0e:4e:05:0d:9c:78:b2:90:36:84:bb:0f:5f:23:83:
1b:8d:f4:e9:e9:cb:c9:1d:0e:9f:90:92:ba:d9:2b:
ae:11:ac:84:9e:f1:02:8f:bf:7d:7d:39:83:f8:d5:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:60:E5:56:F2:53:90:15:0D:50:6C:BC:54:04:A1:85:96:59:D0
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d98::/48
Signature Algorithm: sha256WithRSAEncryption
54:7e:91:6f:8e:4b:94:e7:90:b7:0e:ef:6f:d2:03:8a:80:77:
d1:c3:c9:b1:14:3f:4d:87:3e:b7:31:f8:e4:76:a5:35:c8:be:
4a:a5:31:03:81:87:16:4b:60:ee:9a:ce:cd:a2:8a:06:eb:42:
e8:7b:3a:51:5c:fb:53:fa:ca:6b:0c:29:e8:01:c4:1e:3b:b6:
e2:55:77:12:5f:47:68:38:e8:33:5f:69:d6:6a:b1:a1:f4:c4:
dc:8f:40:43:61:76:be:5d:55:5b:25:87:d3:82:41:d3:5a:21:
69:42:4c:62:f8:dd:c7:72:f1:3c:57:67:09:3e:61:4f:c1:47:
aa:c1:d3:00:31:b1:c1:84:fa:1a:44:b7:6d:69:86:11:69:94:
92:a3:78:1c:ab:f4:7e:cd:1a:af:1d:b4:86:46:a0:58:b9:20:
1e:15:8a:0c:0f:69:35:b0:9c:63:a0:f2:63:5f:f8:aa:f2:50:
12:6a:fb:6f:77:4a:01:de:2b:08:c4:1b:89:ee:ec:4c:78:48:
8c:a5:31:6e:46:5b:84:8a:06:66:c4:bc:e9:cf:87:6e:3a:65:
0a:55:55:fe:1b:38:9a:cd:17:ef:70:cd:9a:79:c5:1e:13:2a:
51:c8:1a:85:e7:f2:26:c6:b5:7f:01:70:17:29:e4:a4:0b:87:
99:8f:f2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 21:46:55 2026 by rpki-client