Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205018.roa
File: AS205018.roa (raw, json)
Hash identifier: fIJ6tLoDWQs0lkNQ0lfh5NXI0suzJro1Qw9YtBIA+7o=
Subject key identifier: C5:4F:A4:75:C1:B4:9C:D8:D6:A3:1D:A4:24:F8:BD:73:84:1A:0D:64
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 07D0DFBF8ADEE47B34810499A64B0F14E75F87F2
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205018.roa
Signing time: Fri 29 Aug 2025 01:53:31 +0000
ROA not before: Fri 29 Aug 2025 01:48:31 +0000
ROA not after: Fri 28 Aug 2026 01:53:31 +0000
asID: 205018
IP address blocks: 2a0f:85c1:d36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d0:df:bf:8a:de:e4:7b:34:81:04:99:a6:4b:0f:14:e7:5f:87:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 29 01:48:31 2025 GMT
Not After : Aug 28 01:53:31 2026 GMT
Subject: CN=C54FA475C1B49CD8D6A31DA424F8BD73841A0D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:ad:02:c3:2d:da:7e:12:8a:5d:33:a9:ec:
e3:ce:85:91:78:e2:47:0f:3d:46:18:bb:1a:42:1a:
00:80:86:fe:e3:30:10:ce:cc:3b:0c:e0:3f:60:58:
65:39:95:12:44:82:f5:be:a6:04:f7:77:60:ec:31:
4f:14:22:1f:b4:76:6a:41:ba:4d:3c:4c:e0:a2:04:
f6:38:f0:f9:1e:e1:98:2d:1c:47:25:6c:74:94:b7:
1b:17:32:31:58:55:36:6e:23:b8:9c:9b:4b:e8:af:
ec:34:ce:5a:49:cb:4c:c3:61:e6:d2:d3:68:bb:55:
c5:56:ad:12:68:94:04:97:e6:67:02:9d:d5:42:44:
df:ac:6d:ef:61:dd:b0:86:7e:b8:c5:0e:91:c8:74:
45:48:e4:81:8a:96:37:dd:3f:46:c4:ab:a8:e8:ca:
34:80:f0:13:b2:f5:ad:8d:29:4f:bb:ab:9d:f1:da:
f1:da:da:a0:c4:40:33:26:7a:ef:92:2e:b4:24:3a:
46:47:7c:1a:96:83:17:77:bf:34:91:c0:e1:1d:13:
5b:40:c5:a8:25:98:7e:d2:ad:72:a5:be:2b:58:b2:
b9:1d:9e:87:4c:3c:13:24:2c:13:47:da:c6:c9:62:
67:29:aa:d8:51:78:92:c1:19:ca:61:1f:21:bc:9e:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4F:A4:75:C1:B4:9C:D8:D6:A3:1D:A4:24:F8:BD:73:84:1A:0D:64
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d36::/48
Signature Algorithm: sha256WithRSAEncryption
0b:d1:11:fd:a8:ee:14:a8:6d:57:6a:d4:cd:a4:59:a4:7c:b3:
55:37:9f:ac:c4:a3:71:0e:63:a8:1d:27:f0:37:ee:02:81:0e:
b3:fe:6c:f2:57:ff:42:5b:16:9c:9e:f5:bf:4f:37:3f:7f:a7:
f4:98:53:cf:94:67:89:16:6b:d2:1e:3d:6d:30:c4:52:58:6d:
bb:94:f3:c5:6d:59:a7:1e:0d:66:55:c2:44:da:4e:61:7f:99:
b0:2a:e4:ab:e1:2e:83:40:4e:b3:ab:2a:88:0a:85:66:72:8e:
bd:36:38:c6:2c:89:d5:0d:b1:17:05:79:7f:0f:67:7d:04:97:
61:45:52:22:73:9b:42:93:02:8d:84:bc:b4:bc:c9:4e:c0:c7:
90:bf:79:10:e6:81:2a:63:c2:1a:2a:c5:a7:9b:70:ac:ae:6f:
31:76:49:3b:fe:15:cb:0b:69:92:bf:cf:f4:98:b2:25:fa:c0:
1b:1d:d0:b9:63:9b:00:e1:3e:8c:bd:99:bc:39:2d:d8:84:a3:
de:91:2f:af:14:3d:c7:c0:12:cd:37:2c:16:64:97:68:97:8a:
ab:90:a8:51:91:3d:de:d0:20:1f:e1:b2:55:94:3d:b9:ca:4e:
ec:1b:35:07:c9:86:0c:3d:39:0d:8e:c7:19:63:5e:fb:63:81:
d5:27:b9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:03:03 2025 by rpki-client