Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205018.roa
File: AS205018.roa (raw, json)
Hash identifier: aCYmQYzMG1eLNqAI5mMRl/iN1rQz9XeSxqS7JCPQIHI=
Subject key identifier: E0:D9:57:32:F1:F2:8A:C3:6C:50:65:A3:98:ED:13:0E:BE:BD:68:C6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 20E1AC01FFF57E29EC0D911F53C401F0237132DF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205018.roa
Signing time: Fri 31 Jul 2026 02:08:59 +0000
ROA not before: Fri 31 Jul 2026 02:03:59 +0000
ROA not after: Fri 30 Jul 2027 02:08:59 +0000
asID: 205018
IP address blocks: 2a0f:85c1:d36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e1:ac:01:ff:f5:7e:29:ec:0d:91:1f:53:c4:01:f0:23:71:32:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:59 2026 GMT
Not After : Jul 30 02:08:59 2027 GMT
Subject: CN=E0D95732F1F28AC36C5065A398ED130EBEBD68C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:ed:63:ae:a4:5c:c0:7c:aa:4d:a8:aa:eb:
71:0a:3e:74:c0:f4:6e:f5:d1:30:f9:03:bd:d4:31:
b9:53:8c:f5:3c:30:b9:49:4c:db:97:ea:75:94:de:
34:a4:ee:45:cd:ca:f6:e9:f2:d6:d9:72:51:92:f5:
63:12:99:8b:9f:9c:43:50:a9:ee:dd:81:a3:fe:42:
94:a7:6d:27:46:f1:ea:dd:71:b3:05:6a:d5:d2:aa:
2d:ed:fb:ee:94:92:bb:20:99:2a:80:84:76:12:e5:
b9:3c:9c:92:6a:c9:34:45:71:5b:82:34:b8:6d:c7:
00:32:19:e5:70:57:78:f4:44:cf:e4:b1:f7:d6:96:
7e:ac:f9:15:35:1c:18:06:b8:be:f4:e6:0b:96:4b:
63:ec:d8:e4:ab:f9:2b:54:41:22:bd:7c:29:2e:b9:
0d:51:2c:1e:61:42:ce:49:5d:fc:39:06:c2:35:86:
c4:76:fe:d9:27:69:c2:55:b3:9e:38:e7:5f:fd:34:
04:81:13:6c:e7:51:58:a9:b7:dd:db:2c:6e:ac:8f:
ab:83:f8:33:64:af:8c:01:69:81:60:aa:d2:70:90:
c7:35:d9:54:ac:4f:f7:99:9f:29:29:e9:8f:82:0f:
fb:11:40:99:55:85:f4:8f:84:47:28:69:fc:a9:e3:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D9:57:32:F1:F2:8A:C3:6C:50:65:A3:98:ED:13:0E:BE:BD:68:C6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d36::/48
Signature Algorithm: sha256WithRSAEncryption
18:e7:1d:b2:bd:cc:da:e7:da:8e:86:e4:1b:65:a3:95:ff:34:
33:27:73:bc:aa:24:6b:72:a3:c7:89:e5:ec:f0:36:2f:f3:35:
82:a3:c6:ac:1d:ca:f4:58:d3:21:21:18:c8:82:18:5a:f6:9e:
72:95:1d:d1:f9:10:ca:d0:52:9a:9f:03:47:ff:7c:79:18:55:
3f:ee:fa:7d:e2:6e:58:91:f2:c5:c0:09:16:ea:06:43:b0:af:
53:4b:be:20:f0:58:af:57:f3:2d:26:ef:83:0d:7a:e0:cc:5a:
58:75:b0:cf:32:04:87:82:a4:68:e8:57:8b:3b:49:ad:bb:ba:
10:c6:4e:22:79:4e:99:fd:5b:30:18:f8:c5:5d:5f:21:37:10:
e0:a8:7d:4d:03:2c:1c:4d:cf:c2:a6:9a:56:6d:06:22:b1:d8:
8b:e0:ab:77:8d:7f:4a:78:f5:73:c3:37:77:8f:5a:91:1a:eb:
82:83:a1:01:15:3f:cf:20:1f:81:72:ab:d1:bf:e5:ac:8c:ac:
94:0e:4e:e8:0e:26:92:df:00:0f:68:e2:f5:14:55:eb:3e:e3:
3a:fd:1d:c2:88:fa:63:7f:7e:fd:a9:7b:01:11:4d:08:dc:5b:
38:8a:54:54:54:ed:47:db:51:c5:5e:4d:ae:c0:35:2c:7c:41:
16:ca:d0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:57 2026 by rpki-client