Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204856.roa
File: AS204856.roa (raw, json)
Hash identifier: wRsZG7/NUBPgB422ix1mC9/vO1KfoUbOePeqWbNBbKI=
Subject key identifier: A2:79:31:1B:67:E9:3B:43:BC:BD:56:AA:B6:B3:27:8D:E7:3B:8E:9C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 60BAFEE0B7D9A4E2ED8E732AD23F62F29791E33D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204856.roa
Signing time: Wed 30 Sep 2026 04:09:16 +0000
ROA not before: Wed 30 Sep 2026 04:04:16 +0000
ROA not after: Wed 29 Sep 2027 04:09:16 +0000
asID: 204856
IP address blocks: 2a0f:85c1:d90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ba:fe:e0:b7:d9:a4:e2:ed:8e:73:2a:d2:3f:62:f2:97:91:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 30 04:04:16 2026 GMT
Not After : Sep 29 04:09:16 2027 GMT
Subject: CN=A279311B67E93B43BCBD56AAB6B3278DE73B8E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:f7:34:0e:96:5c:fa:a9:12:ff:f0:03:57:
64:17:d0:a6:32:18:15:07:70:a3:b9:97:0a:b1:8c:
5e:49:49:58:71:c4:05:a7:d1:a1:52:8c:2d:61:0d:
ce:e9:3c:eb:30:00:1b:21:45:15:b6:9a:1c:3f:22:
c0:aa:76:96:20:1b:d8:ac:fe:32:fc:e3:05:70:6e:
fe:6e:1a:54:5d:21:dd:23:aa:f0:38:cb:9c:e1:1c:
df:33:bd:87:39:af:0f:5d:58:13:32:87:77:52:ae:
47:77:b7:fa:e1:76:7b:07:26:75:e7:d8:6c:a4:bf:
02:28:38:7e:a0:0b:d6:0e:0f:fe:71:25:a0:85:b0:
bc:ff:c8:3c:73:82:c7:21:12:ef:38:fd:3b:7d:c0:
ad:2e:2c:c0:13:31:d0:43:33:35:f1:4f:ab:55:a1:
ee:2c:76:e6:d6:b0:f1:02:c2:d0:be:44:1d:da:8c:
e1:ec:1a:eb:54:60:bf:dc:f8:81:8d:1d:c5:ae:3f:
00:70:e4:7b:4a:82:33:c1:18:e7:ba:9d:3b:f9:cd:
ee:8f:91:c4:15:03:e1:74:d8:48:16:30:d7:ea:0f:
46:73:8c:28:23:0e:fe:e1:fb:9a:8d:b0:72:a3:bf:
db:fa:a7:d5:f5:5e:d6:bf:c0:b2:8e:84:80:74:4a:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:79:31:1B:67:E9:3B:43:BC:BD:56:AA:B6:B3:27:8D:E7:3B:8E:9C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d90::/48
Signature Algorithm: sha256WithRSAEncryption
b4:01:93:58:06:44:49:89:f2:18:8c:93:69:a4:e0:92:9f:00:
53:3c:8b:74:f3:1e:39:c4:86:05:15:66:01:2d:11:00:e6:44:
6a:5c:4b:1c:76:31:aa:61:33:c7:ac:13:f4:a9:d7:9a:88:a6:
77:43:8e:a2:e5:70:9e:79:3d:21:a2:4e:42:0a:60:6b:5f:29:
ce:c5:4f:83:76:cb:b5:d5:54:94:91:d9:2d:25:2a:48:0d:b9:
87:21:58:d0:4b:46:76:9d:4b:27:c4:18:87:44:fb:ea:c7:45:
c3:99:59:cb:5b:91:3a:9c:ba:27:78:0b:9c:1b:e0:ed:57:6f:
07:ec:5e:83:60:e6:cc:ff:9b:18:97:81:23:05:9b:95:de:69:
2f:99:54:48:22:1b:0f:3c:e9:09:81:49:6b:d3:21:f7:80:3a:
e5:e1:59:fe:af:9f:9a:37:0d:7f:c5:4e:7d:6f:64:6f:70:ad:
80:56:ae:7d:78:ac:91:80:3c:aa:d9:50:47:67:a7:22:2a:b4:
05:86:59:90:05:f5:d7:44:6a:f1:e4:58:2f:1d:07:55:80:f4:
74:13:c5:e9:38:7e:4b:ed:e5:c5:46:34:f8:2a:97:02:56:0f:
7c:ea:36:8b:c9:e1:74:ef:c1:a4:4b:63:6a:cc:c4:3f:b6:3f:
65:56:72:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:29:24 2026 by rpki-client