Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205126.roa
File: AS205126.roa (raw, json)
Hash identifier: PQXmKaIxXVhRBZMI7p8J7fh/G/aWoK7BYke3AzCgVb0=
Subject key identifier: 31:53:FA:C2:1A:0C:CA:DF:33:93:AA:88:22:C7:02:D1:79:AB:3B:1E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 49DE8EFFAF8DAEB1EBA1EA1D5B47C535272BD4AB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205126.roa
Signing time: Fri 31 Jul 2026 02:08:57 +0000
ROA not before: Fri 31 Jul 2026 02:03:57 +0000
ROA not after: Fri 30 Jul 2027 02:08:57 +0000
asID: 205126
IP address blocks: 2a0f:85c1:d31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:de:8e:ff:af:8d:ae:b1:eb:a1:ea:1d:5b:47:c5:35:27:2b:d4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:57 2026 GMT
Not After : Jul 30 02:08:57 2027 GMT
Subject: CN=3153FAC21A0CCADF3393AA8822C702D179AB3B1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:5b:9b:8f:7f:ba:95:1e:ae:25:18:f0:8c:
63:03:e5:f9:88:97:93:e8:c2:a4:be:67:e1:83:2f:
35:d8:c0:00:f8:0c:f8:84:10:8a:dd:91:d7:ee:f3:
1e:69:8d:04:1b:08:04:30:42:7f:72:bf:ce:0e:da:
63:db:a4:1c:77:49:dd:c4:8d:13:64:ab:e4:3d:4e:
95:95:a9:ce:75:7f:32:c0:60:b6:15:a7:cf:87:53:
b9:db:82:9f:e6:ba:6e:7b:31:ba:97:c8:9f:32:4e:
45:3f:1e:27:37:87:71:c5:d0:c6:bf:95:30:b4:f7:
5b:be:9a:21:62:35:c4:1a:31:38:c3:78:58:87:ef:
9a:86:5d:48:1e:db:45:dc:d2:a0:42:a5:a3:61:a1:
4c:41:c2:7f:bf:9d:c1:c7:97:2a:d4:d3:bb:41:69:
a0:33:67:cc:ac:0f:c7:8b:f7:be:6e:b6:0e:b6:de:
a4:85:62:12:88:ed:1d:d0:32:bb:69:8b:db:36:8b:
26:ba:f0:ce:29:18:c1:41:9e:dd:d4:66:c2:06:40:
db:bf:b9:4d:83:6d:fb:f5:0c:87:e7:9d:49:9a:c8:
51:9b:5b:b1:e7:b5:75:24:45:46:ed:9d:8f:33:12:
67:f0:2f:1a:5d:62:95:8d:7a:6b:4c:c9:fe:b8:95:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:FA:C2:1A:0C:CA:DF:33:93:AA:88:22:C7:02:D1:79:AB:3B:1E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205126.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d31::/48
Signature Algorithm: sha256WithRSAEncryption
c5:04:06:0f:26:dd:1a:c8:89:a9:72:b9:02:e8:25:b5:7f:02:
e4:a6:19:41:4f:07:02:eb:2b:09:b5:48:64:3e:cb:62:d6:81:
ce:5f:e4:f7:78:ec:d0:c1:e1:52:0b:79:c7:1f:75:11:4f:25:
68:0e:56:54:8a:56:b0:1f:23:ce:08:24:ff:28:01:8b:19:55:
47:c9:74:27:58:7a:c0:25:9f:bd:d2:43:df:24:ce:09:ec:59:
bd:c0:93:85:4d:82:36:f2:9d:1f:87:b8:b2:20:ee:84:e9:6f:
56:eb:c8:a5:da:8d:8d:ff:fb:c8:8e:bc:e3:3e:13:ca:c7:aa:
87:a2:96:ee:6e:f3:e8:73:0e:c0:50:04:41:73:67:a0:0c:56:
f6:dc:f0:19:77:8e:18:c0:cc:07:c2:74:71:e3:27:c0:3e:d9:
8a:bf:4b:c7:d1:ec:88:2f:4b:96:18:89:f9:35:77:39:c6:be:
e1:72:b4:80:85:32:9a:b7:f6:05:42:ee:2e:a4:86:04:58:96:
f4:e0:83:d6:bb:f8:4b:5d:88:d8:f2:54:3c:76:ac:70:19:12:
be:2a:26:70:31:93:c4:5d:ab:50:c6:f0:29:4b:03:30:fc:c0:
99:89:de:80:9c:1d:ca:5a:a8:b5:db:47:d3:34:22:ba:7c:7d:
ca:63:0c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:59:38 2026 by rpki-client