Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204768.roa
File: AS204768.roa (raw, json)
Hash identifier: QpovloFtjqGusQJU82TbPERlVLGtotYHS63/WKQO6Do=
Subject key identifier: 91:49:8E:E2:73:F2:A2:AA:26:64:21:42:91:20:34:CB:34:19:3E:EB
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 54A53591F52CC2D013D9C0FE625E286941AE0FA8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204768.roa
Signing time: Wed 30 Sep 2026 04:09:15 +0000
ROA not before: Wed 30 Sep 2026 04:04:15 +0000
ROA not after: Wed 29 Sep 2027 04:09:15 +0000
asID: 204768
IP address blocks: 2a0f:85c1:d93::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a5:35:91:f5:2c:c2:d0:13:d9:c0:fe:62:5e:28:69:41:ae:0f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 30 04:04:15 2026 GMT
Not After : Sep 29 04:09:15 2027 GMT
Subject: CN=91498EE273F2A2AA26642142912034CB34193EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:a3:3a:e6:77:da:32:33:c2:44:ff:71:ea:
dd:b0:a1:6f:0f:4c:31:75:38:d1:8d:b2:6b:90:ec:
53:73:e0:b5:b2:2a:0e:71:f5:38:db:06:5a:8d:37:
9a:f8:a6:6b:e4:cf:ef:09:d5:21:bd:93:3f:6a:41:
70:94:8a:bc:2e:51:60:3f:c4:50:83:ab:ab:bf:c8:
54:f9:6f:0c:f1:67:7c:4c:de:b3:7e:c7:b7:e2:e9:
4e:a0:c6:1a:d4:60:b6:49:71:83:28:10:1b:84:04:
e5:a3:07:3b:54:3c:89:ca:a1:b0:8d:ac:26:85:a9:
a8:ac:4a:14:aa:e7:7c:a1:c1:ee:90:30:23:10:69:
7e:41:e2:79:08:40:7f:b2:ae:a2:a6:aa:ea:cf:01:
34:6a:87:64:f2:8a:36:88:a7:3c:5f:d7:d0:ab:08:
a6:82:cf:53:59:86:72:4d:97:cc:33:81:f0:62:6f:
59:e3:2d:86:21:18:b4:81:b3:aa:71:32:87:28:f6:
a2:72:3f:74:03:47:9b:c3:d9:4d:f2:2e:c9:27:9e:
8e:7b:87:00:97:1a:d2:f0:2a:6a:57:a0:35:29:cf:
fe:40:c6:b7:ab:9b:62:0a:52:3a:ba:52:d8:84:90:
0f:5e:49:50:e4:b3:65:f2:1f:6f:63:da:f5:ee:65:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:8E:E2:73:F2:A2:AA:26:64:21:42:91:20:34:CB:34:19:3E:EB
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d93::/48
Signature Algorithm: sha256WithRSAEncryption
3d:b1:86:26:6c:83:a9:af:ad:da:9a:7d:87:1e:20:31:51:81:
52:21:81:8f:c1:52:02:bc:6a:75:80:9f:bd:99:5c:b9:e1:db:
05:03:19:06:9b:da:2e:a5:bf:35:6f:48:f5:5a:49:e4:ff:6b:
72:f7:21:d6:5f:f8:86:c1:34:61:2e:34:de:26:91:dd:ab:3e:
0d:3d:aa:e5:e3:3d:e7:b7:2a:dc:d3:06:8d:b9:77:5a:8e:4b:
fe:01:34:50:ff:f1:f1:7f:27:b2:47:8a:e2:23:af:6d:83:e9:
6f:ed:e2:17:e8:d8:91:83:ba:f7:d9:26:67:d7:a8:8a:34:9b:
71:c9:2d:d4:80:40:03:fa:a0:cc:1b:c4:c9:dd:d2:b9:b1:62:
77:a5:a2:ac:04:ca:a0:c6:1b:19:01:c8:c1:07:a2:d2:7a:61:
a9:21:2b:79:97:07:92:ca:e1:ea:e8:4b:05:98:6d:da:64:f8:
76:42:19:65:65:36:c5:f4:6f:22:e2:dc:6a:25:10:c5:89:70:
91:f2:d3:b0:31:52:7f:18:25:a2:7d:a5:1c:23:e4:35:07:81:
cc:90:4d:0b:a4:0e:96:c5:6e:7f:cd:82:3f:fa:8e:0a:44:e1:
7a:2c:bf:fd:31:c8:bd:dd:50:ba:2d:f8:0a:2a:2b:0f:b0:50:
9a:6e:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:43:03 2026 by rpki-client