Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205123.roa
File: AS205123.roa (raw, json)
Hash identifier: GDwd5nCqMWtRbYJFQNyGLH/u581yIRHtGYBbObCAXrk=
Subject key identifier: 63:19:FA:11:58:FD:C2:CD:25:F4:91:6C:54:F9:62:93:5D:76:47:35
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 07AAD6D4EEC3C75FB677161C3954D7446DE9A1B0
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205123.roa
Signing time: Fri 31 Jul 2026 02:08:58 +0000
ROA not before: Fri 31 Jul 2026 02:03:58 +0000
ROA not after: Fri 30 Jul 2027 02:08:58 +0000
asID: 205123
IP address blocks: 2a0f:85c1:d32::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:aa:d6:d4:ee:c3:c7:5f:b6:77:16:1c:39:54:d7:44:6d:e9:a1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:58 2026 GMT
Not After : Jul 30 02:08:58 2027 GMT
Subject: CN=6319FA1158FDC2CD25F4916C54F962935D764735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:34:a7:3c:9e:c0:f0:8a:96:a9:83:16:58:
b1:cb:48:46:6d:33:4c:12:6a:49:f2:a6:6e:c0:6e:
17:6b:f3:b8:68:e8:b6:a0:4a:a1:f2:9e:dc:97:79:
a3:0d:ee:51:46:0f:3f:55:68:85:05:04:ae:4e:ba:
1c:ec:d8:27:95:65:94:60:63:80:ff:fb:5a:78:70:
79:23:63:37:b4:bd:7b:4c:69:b3:4f:b7:69:41:00:
a2:ac:c2:91:89:e2:b1:d3:11:2f:a5:23:a7:1a:3e:
1c:9c:ae:60:fa:b2:25:e4:b2:27:90:dc:2a:08:50:
aa:da:3b:52:93:34:1f:d3:26:5e:af:61:99:51:f9:
a7:0b:2f:7a:28:24:ee:e2:49:e9:68:20:a2:51:28:
af:8a:79:b0:05:d2:13:6c:95:b6:9b:0d:b3:e7:e8:
f9:fc:31:c1:c3:16:d1:59:82:e3:1f:69:0b:28:f2:
29:61:3d:01:0f:5c:c7:f7:2c:ee:b8:42:52:19:d2:
10:b5:8b:ce:8a:6f:24:97:56:77:05:05:8a:5a:25:
77:9b:91:3c:ba:d1:25:8e:d6:b1:ea:5e:4d:e4:90:
67:31:68:ff:e9:df:8d:97:7e:d9:68:99:b5:8e:90:
5e:d3:7c:61:ab:67:2f:a6:e4:b2:f7:ac:0d:cd:85:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:19:FA:11:58:FD:C2:CD:25:F4:91:6C:54:F9:62:93:5D:76:47:35
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205123.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d32::/48
Signature Algorithm: sha256WithRSAEncryption
26:dd:ad:a2:bb:d6:97:04:b5:f1:34:15:b1:c4:0b:4f:c6:d9:
b6:43:22:1c:35:40:b5:25:f6:5b:5a:8b:da:b8:8b:9f:05:6c:
7a:3a:1e:5e:1e:da:81:6b:7c:6d:01:9f:42:02:e8:95:cc:4a:
4d:c8:3e:05:96:ec:c3:57:6a:b3:20:14:fd:7d:3c:ea:25:a9:
fa:28:f4:8e:8e:f6:b0:6e:6b:44:47:33:24:54:a9:26:1f:d3:
1d:d1:73:a4:88:34:a6:39:e1:c4:90:bf:7d:db:f0:d1:ff:9d:
91:9b:39:33:5f:de:ec:04:13:bd:30:de:7b:6b:d9:6a:78:1e:
62:37:a2:94:1b:ab:44:f7:15:a9:2a:b9:2f:bb:f6:5d:5a:a9:
74:6f:ae:56:14:62:27:fc:0e:02:54:81:e1:f0:2d:d7:74:80:
25:40:4e:57:d8:da:c1:9b:73:94:4b:b5:11:b4:23:4b:50:58:
fb:ae:f3:23:90:f7:56:82:25:d3:02:cc:2e:c0:b3:c9:a1:a0:
fe:e7:5a:1b:1d:44:70:c8:3c:ea:97:cd:2f:36:c4:7e:65:33:
9a:be:ba:ca:f5:3b:3c:08:46:54:6b:42:a5:7e:db:52:c3:cb:
06:a6:74:e3:46:38:01:7c:21:85:fc:48:ae:c0:e8:ad:22:81:
a9:91:28:c1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUB6rW1O7Dx1+2dxYcOVTXRG3pobAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA3MzEwMjAzNThaFw0yNzA3MzAwMjA4NThaMDMxMTAvBgNV
BAMTKDYzMTlGQTExNThGREMyQ0QyNUY0OTE2QzU0Rjk2MjkzNUQ3NjQ3MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTuzSnPJ7A8IqWqYMWWLHLSEZt
M0wSaknypm7Abhdr87ho6LagSqHyntyXeaMN7lFGDz9VaIUFBK5Ouhzs2CeVZZRg
Y4D/+1p4cHkjYze0vXtMabNPt2lBAKKswpGJ4rHTES+lI6caPhycrmD6siXksieQ
3CoIUKraO1KTNB/TJl6vYZlR+acLL3ooJO7iSeloIKJRKK+KebAF0hNslbabDbPn
6Pn8McHDFtFZguMfaQso8ilhPQEPXMf3LO64QlIZ0hC1i86KbySXVncFBYpaJXeb
kTy60SWO1rHqXk3kkGcxaP/p342XftlombWOkF7TfGGrZy+m5LL3rA3NhRP/AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUYxn6EVj9ws0l9JFsVPlik112RzUwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA1MTIzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQ0yMA0GCSqGSIb3DQEBCwUAA4IBAQAm3a2iu9aXBLXxNBWxxAtPxtm2QyIcNUC1
JfZbWovauIufBWx6Oh5eHtqBa3xtAZ9CAuiVzEpNyD4FluzDV2qzIBT9fTzqJan6
KPSOjvawbmtERzMkVKkmH9Md0XOkiDSmOeHEkL992/DR/52RmzkzX97sBBO9MN57
a9lqeB5iN6KUG6tE9xWpKrkvu/ZdWql0b65WFGIn/A4CVIHh8C3XdIAlQE5X2NrB
m3OUS7URtCNLUFj7rvMjkPdWgiXTAswuwLPJoaD+51obHURwyDzql80vNsR+ZTOa
vrrK9Ts8CEZUa0KlfttSw8sGpnTjRjgBfCGF/EiuwOitIoGpkSjB
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:25:15 2026 by rpki-client