Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204902.roa
File: AS204902.roa (raw, json)
Hash identifier: VX9u9NUjPv/HQYzl9E6003pITUpGXRmol+mZCw50ptM=
Subject key identifier: 13:EA:21:84:1B:58:B8:6C:9A:A9:84:FD:D1:25:AE:82:49:D9:D4:5B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 31E74D12CA51DBD0DF2B9C2EEEAFE15A10501965
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204902.roa
Signing time: Fri 26 Jun 2026 08:08:46 +0000
ROA not before: Fri 26 Jun 2026 08:03:46 +0000
ROA not after: Fri 25 Jun 2027 08:08:46 +0000
asID: 204902
IP address blocks: 2a0f:85c1:900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e7:4d:12:ca:51:db:d0:df:2b:9c:2e:ee:af:e1:5a:10:50:19:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:46 2026 GMT
Not After : Jun 25 08:08:46 2027 GMT
Subject: CN=13EA21841B58B86C9AA984FDD125AE8249D9D45B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:67:2d:b7:97:0d:9c:af:70:a5:3a:5d:14:
ea:cf:ae:1b:61:95:a6:c0:a7:bc:f0:8f:2f:2e:d0:
29:13:ac:e2:06:f6:2c:11:4b:13:4f:42:f2:7c:67:
0f:43:7f:5b:f1:0b:d2:b4:6b:3e:aa:2a:88:02:7b:
1b:1c:6a:be:d4:48:82:c9:89:b6:32:81:e6:b8:b3:
b2:9c:d3:21:63:b1:8f:c9:26:a1:64:82:84:45:d7:
b5:e3:41:28:a8:b6:80:e3:b8:cd:7e:13:8f:bc:a0:
0f:53:ee:d0:e9:a7:bf:88:cc:63:23:f9:cc:15:50:
d7:21:f4:39:fb:14:84:2e:7e:29:69:be:30:82:9d:
37:10:fb:ef:d1:a4:b7:55:74:ad:a1:b2:c7:4c:c7:
12:6d:d2:30:db:99:95:89:31:b8:4a:40:04:77:d2:
32:2a:31:e0:1f:08:0b:e3:d5:64:0c:40:98:fb:8a:
40:97:8c:21:f5:32:c2:9e:56:2e:d5:63:74:86:ac:
71:2c:14:f1:1e:e3:44:18:63:05:8e:66:4c:e9:fa:
f3:7e:da:85:b8:c5:94:d6:f9:90:91:3a:f5:a3:7a:
4b:23:c8:55:ea:00:6c:5d:5f:1f:18:fc:16:13:8b:
39:90:8b:a8:e4:97:6d:d3:5c:d3:df:82:f0:8d:5d:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EA:21:84:1B:58:B8:6C:9A:A9:84:FD:D1:25:AE:82:49:D9:D4:5B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:900::/40
Signature Algorithm: sha256WithRSAEncryption
a1:2a:c2:91:00:1e:45:ca:f1:f1:c0:e5:78:44:b2:21:c0:7f:
75:a5:df:5e:9d:f3:a9:8d:71:d2:d4:c1:54:2e:50:17:54:6a:
11:0a:73:e2:70:ed:b9:1c:ee:51:61:d6:08:0f:9a:52:09:bc:
ce:fc:c3:83:69:0e:05:fe:a4:6f:2c:e0:48:ed:a5:8c:95:e5:
11:64:b2:29:0c:09:e7:58:32:69:be:fc:ee:06:eb:22:88:8f:
c5:fd:0e:b8:75:b3:3f:15:0f:03:14:01:a9:45:99:bd:dc:96:
e1:fc:79:e4:6a:94:f1:2c:f5:43:de:05:c5:5c:61:a6:57:67:
36:50:a5:7c:fb:92:2a:52:f4:d4:e5:ea:44:b6:a8:0e:a0:a1:
17:97:d0:18:d6:41:a3:56:95:12:4d:5e:5b:a0:b5:c2:a8:ad:
41:c8:29:81:85:52:2a:b5:eb:b4:c5:39:86:97:70:30:fc:ce:
38:12:a9:bf:ef:60:6c:8e:17:cc:e1:1b:d9:25:d0:dc:1c:68:
b0:a1:59:c4:cd:09:4d:45:98:f8:df:8f:ae:a2:bd:9b:3f:20:
d9:f4:d7:4a:2b:53:d8:14:a2:ee:28:c5:2d:a2:a5:13:de:2d:
f3:ee:d1:21:9c:44:fd:4d:fa:11:1b:73:4a:e0:55:c3:4a:30:
ed:2d:db:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:00 2026 by rpki-client