Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204728.roa
File: AS204728.roa (raw, json)
Hash identifier: g4FqUzaPTyGXX31X4M+c8dmGcFtjXrr7hZZBEMmTBg4=
Subject key identifier: 08:73:EC:B5:55:9A:BD:04:0F:C8:19:52:92:B8:32:5F:D2:D4:5E:F3
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 757E7506EC777F48EE3FB9F19033DD052F182D42
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204728.roa
Signing time: Wed 30 Sep 2026 04:09:15 +0000
ROA not before: Wed 30 Sep 2026 04:04:15 +0000
ROA not after: Wed 29 Sep 2027 04:09:15 +0000
asID: 204728
IP address blocks: 2a0f:85c1:d96::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:7e:75:06:ec:77:7f:48:ee:3f:b9:f1:90:33:dd:05:2f:18:2d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 30 04:04:15 2026 GMT
Not After : Sep 29 04:09:15 2027 GMT
Subject: CN=0873ECB5559ABD040FC8195292B8325FD2D45EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:eb:49:c4:16:98:d4:be:d9:f0:6a:02:7c:
e3:79:1d:f6:b5:cf:c2:23:79:e7:01:f7:80:68:be:
66:58:a3:c9:f4:6b:94:5c:e1:ce:78:2c:70:8c:3d:
5b:31:30:28:f2:b4:5e:1d:c4:43:ac:ea:bd:dd:1d:
0b:e2:a2:0b:12:7f:d7:ff:2a:4e:74:b7:23:29:b2:
f2:3f:ae:d9:8f:69:af:b8:ca:42:7e:02:fb:ab:24:
12:04:12:29:81:b8:53:47:d6:f9:2c:38:4a:d6:85:
eb:80:33:ac:24:5b:b4:7e:8d:0f:9c:42:6b:02:e5:
f2:66:70:17:5a:ab:a3:0e:cd:be:ab:2a:c2:b1:2f:
b4:a3:2d:10:be:54:69:74:c5:a6:f8:02:97:8e:7a:
d8:c5:26:5a:a6:44:12:35:04:d6:2e:11:c0:22:e6:
3e:04:4d:67:8f:06:84:cb:7a:af:07:56:55:1b:5f:
28:1a:69:2f:e1:fe:3e:29:8b:42:22:99:6e:81:a4:
f9:d2:81:c0:69:2c:73:1e:e4:ce:0c:cd:34:ea:bc:
41:0c:de:55:cc:2a:39:e1:e2:e2:34:4e:c9:e6:6d:
47:6a:c7:32:c7:ce:8e:1f:26:42:7f:4b:16:da:80:
aa:b6:38:c7:a0:67:d2:87:bb:84:e8:a4:5b:c9:87:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:EC:B5:55:9A:BD:04:0F:C8:19:52:92:B8:32:5F:D2:D4:5E:F3
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d96::/48
Signature Algorithm: sha256WithRSAEncryption
12:54:1c:71:62:90:92:08:25:6a:e6:f6:00:fd:bb:3c:4a:95:
17:7b:ae:7c:c5:ad:3e:60:14:62:3a:5a:ea:76:de:c6:f2:e8:
bc:0b:80:6c:09:63:bc:2c:2c:16:b7:1c:d8:f3:5c:cf:7c:a0:
48:af:ae:56:bc:8c:f8:a6:2d:67:bf:ca:d4:fa:63:03:cf:84:
db:4c:b9:2c:51:30:44:6b:c0:85:a4:86:f8:2c:0a:0a:58:9b:
89:34:29:f6:4f:a0:df:a4:7e:d7:81:31:9e:ef:64:26:82:fe:
9d:64:79:05:30:1d:c2:97:97:42:ba:c6:b9:29:e0:1c:fc:40:
ef:35:80:2c:33:c0:19:23:ec:dc:58:1d:3f:2c:41:0a:c4:8d:
9d:66:88:0f:18:b8:ee:d8:b5:0c:c4:55:43:41:d1:19:d4:89:
03:99:35:7c:9a:3b:a9:79:47:02:b8:a3:7b:95:dd:81:21:0c:
7e:78:99:18:60:f0:32:c3:29:4f:74:81:85:c6:7f:87:e7:b4:
b0:1b:91:d8:24:51:07:a7:24:7e:54:13:95:38:41:6c:56:f9:
25:e7:df:25:c4:11:06:63:d0:8e:34:1d:d3:9f:3a:83:aa:ea:
98:2d:0b:b8:74:5c:b6:de:c2:00:3a:47:d1:40:ed:30:22:75:
5b:ed:b2:15
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUdX51Bux3f0juP7nxkDPdBS8YLUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA5MzAwNDA0MTVaFw0yNzA5MjkwNDA5MTVaMDMxMTAvBgNV
BAMTKDA4NzNFQ0I1NTU5QUJEMDQwRkM4MTk1MjkyQjgzMjVGRDJENDVFRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGutJxBaY1L7Z8GoCfON5Hfa1
z8IjeecB94BovmZYo8n0a5Rc4c54LHCMPVsxMCjytF4dxEOs6r3dHQviogsSf9f/
Kk50tyMpsvI/rtmPaa+4ykJ+AvurJBIEEimBuFNH1vksOErWheuAM6wkW7R+jQ+c
QmsC5fJmcBdaq6MOzb6rKsKxL7SjLRC+VGl0xab4ApeOetjFJlqmRBI1BNYuEcAi
5j4ETWePBoTLeq8HVlUbXygaaS/h/j4pi0IimW6BpPnSgcBpLHMe5M4MzTTqvEEM
3lXMKjnh4uI0TsnmbUdqxzLHzo4fJkJ/SxbagKq2OMegZ9KHu4TopFvJhySnAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUCHPstVWavQQPyBlSkrgyX9LUXvMwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA0NzI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQ2WMA0GCSqGSIb3DQEBCwUAA4IBAQASVBxxYpCSCCVq5vYA/bs8SpUXe658xa0+
YBRiOlrqdt7G8ui8C4BsCWO8LCwWtxzY81zPfKBIr65WvIz4pi1nv8rU+mMDz4Tb
TLksUTBEa8CFpIb4LAoKWJuJNCn2T6DfpH7XgTGe72Qmgv6dZHkFMB3Cl5dCusa5
KeAc/EDvNYAsM8AZI+zcWB0/LEEKxI2dZogPGLju2LUMxFVDQdEZ1IkDmTV8mjup
eUcCuKN7ld2BIQx+eJkYYPAywylPdIGFxn+H57SwG5HYJFEHpyR+VBOVOEFsVvkl
598lxBEGY9CONB3TnzqDquqYLQu4dFy23sIAOkfRQO0wInVb7bIV
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:29:24 2026 by rpki-client