Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204580.roa
File: AS204580.roa (raw, json)
Hash identifier: dBNl81JmMCzk34WTCUyFEI6nidYcKdHckGgImgwWAIE=
Subject key identifier: 6A:E8:FE:3B:E7:FC:CB:BC:92:27:13:A3:F0:23:FF:3B:65:1C:35:BF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 45A051B00D8B2F6A632669A797B550C1627C653F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204580.roa
Signing time: Wed 30 Sep 2026 04:09:15 +0000
ROA not before: Wed 30 Sep 2026 04:04:15 +0000
ROA not after: Wed 29 Sep 2027 04:09:15 +0000
asID: 204580
IP address blocks: 2a0f:85c1:d95::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a0:51:b0:0d:8b:2f:6a:63:26:69:a7:97:b5:50:c1:62:7c:65:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 30 04:04:15 2026 GMT
Not After : Sep 29 04:09:15 2027 GMT
Subject: CN=6AE8FE3BE7FCCBBC922713A3F023FF3B651C35BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:c9:b6:7b:ac:06:e2:ae:52:12:67:22:74:
f1:8f:b0:c6:ac:3e:ec:5a:49:1b:ac:32:32:56:28:
6f:4c:5b:fa:16:4e:fb:f7:e2:f0:41:c8:e2:95:9a:
39:ce:97:f6:b3:c3:d1:7b:4d:58:44:18:e3:0b:45:
5e:8e:7f:a0:56:1e:12:e8:ed:63:37:59:28:90:7d:
cb:4f:21:42:2b:98:bf:9f:ca:89:da:11:34:08:82:
8a:d2:67:55:c3:b7:73:d5:a1:cb:1c:26:b5:d2:d7:
71:ad:b6:f8:e3:f3:a2:4d:b5:1f:b0:a9:b7:e7:80:
4b:b1:a7:dc:64:32:0b:55:cc:f2:d8:37:2f:1e:2a:
3d:6b:dd:65:b5:bc:b5:04:3c:2b:27:35:3d:5c:f8:
04:3d:b6:73:47:bf:3e:85:52:e2:55:c9:36:49:b9:
e0:34:70:ec:c6:2d:82:7e:21:62:f7:93:71:ce:77:
52:92:4a:27:07:cf:52:dc:be:28:10:dc:e4:77:21:
ca:d8:4c:e1:fe:db:04:51:0e:a9:1b:ea:70:a8:70:
f6:92:65:b9:52:0f:5c:b4:ed:b2:1c:02:3e:45:1c:
ef:39:a5:10:9a:4c:3d:b6:65:3d:92:2e:58:39:d3:
5a:f1:96:d2:b9:e7:ca:50:d6:87:91:43:23:df:3f:
32:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:FE:3B:E7:FC:CB:BC:92:27:13:A3:F0:23:FF:3B:65:1C:35:BF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204580.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d95::/48
Signature Algorithm: sha256WithRSAEncryption
85:98:cd:b2:bc:2c:4b:2a:d0:0a:e0:6d:47:a6:cd:8d:f7:90:
4f:e0:ee:a8:46:df:4e:cc:d5:f9:b8:c5:7b:17:3c:bb:51:5f:
81:a9:90:a2:18:38:16:c0:28:5f:cd:fe:cd:6d:e1:85:6d:6b:
3b:86:9f:c8:33:7f:a1:d5:fa:73:1a:22:32:a4:9e:1b:93:0d:
fa:06:89:8c:6a:12:ff:5d:25:e0:c3:aa:40:a1:d0:b9:75:cd:
32:de:72:6d:40:7c:a6:de:8d:36:5c:98:55:6d:f4:00:ce:89:
4d:4b:0f:52:f7:23:eb:95:92:1a:87:17:1d:fe:48:a5:47:22:
36:98:13:c1:6c:5e:af:55:17:88:9a:0e:52:2b:9b:d8:77:d0:
0c:6a:2a:1a:51:35:a8:71:42:a0:fe:f9:fd:13:8c:91:04:93:
97:81:db:9d:03:65:9f:1a:fa:06:df:89:25:11:a7:f4:ac:a0:
21:70:aa:c7:65:50:7c:c7:8a:48:af:6f:f3:c6:4f:79:b4:85:
dc:97:b5:c3:2a:b6:4c:71:40:db:80:15:70:7c:69:19:98:30:
78:5c:90:4f:74:a9:8d:e7:6c:5c:bb:62:d4:23:1c:85:0f:7e:
ae:48:86:e1:2a:8f:e8:a7:d6:f2:a9:16:a3:61:a2:41:b5:09:
36:05:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:04:57 2026 by rpki-client