Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205131.roa
File: AS205131.roa (raw, json)
Hash identifier: 7Qo4hIY8hI9LWl36+jbJaAHNBpI61AB4pnLrhLViGz4=
Subject key identifier: 35:CA:1C:62:55:9D:37:0C:FF:62:9D:92:44:BD:F9:81:24:82:67:8D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6D00BB143B25D80EE329577D953F9537F81040
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205131.roa
Signing time: Fri 31 Jul 2026 02:08:59 +0000
ROA not before: Fri 31 Jul 2026 02:03:59 +0000
ROA not after: Fri 30 Jul 2027 02:08:59 +0000
asID: 205131
IP address blocks: 2a0f:85c1:d30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:00:bb:14:3b:25:d8:0e:e3:29:57:7d:95:3f:95:37:f8:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:59 2026 GMT
Not After : Jul 30 02:08:59 2027 GMT
Subject: CN=35CA1C62559D370CFF629D9244BDF9812482678D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:dc:d6:5e:b7:11:c7:fc:1b:83:ed:06:1c:
25:4e:ab:d2:10:55:66:7d:5a:dc:ef:46:3f:a6:80:
d5:8a:97:39:3e:d4:d9:48:e9:24:4a:e8:f1:35:d0:
3c:69:af:dd:9c:29:98:3b:91:b0:1a:3f:ee:94:83:
80:e2:ee:7d:b0:f1:a5:74:d8:6c:f3:d1:e8:b4:7e:
33:4e:09:14:bf:e1:e2:c2:59:f1:e0:4a:5a:fe:ab:
0e:73:8e:9d:92:ef:af:21:fb:71:9e:cc:4b:61:4e:
89:f9:2a:b2:eb:33:30:7c:21:37:0d:71:66:8b:45:
32:0b:03:d8:22:19:81:c8:2e:93:52:ec:8f:70:1b:
a8:e3:b7:d9:bf:ca:ff:79:a1:73:70:83:b5:b2:6d:
c7:5f:35:89:fd:66:a9:94:0e:85:78:02:39:66:01:
2e:65:3d:a3:fb:97:83:b0:79:52:bb:a3:33:2b:2b:
1e:28:ed:ea:b4:01:80:41:d6:ab:9e:d7:37:72:34:
64:02:b9:89:b6:93:a0:9c:92:d9:6d:d6:7e:e6:62:
be:b4:79:17:12:f9:d0:fb:46:9c:48:7e:cd:c0:bf:
e9:41:83:ac:43:d4:7b:9f:b0:3f:c0:3d:ea:48:eb:
46:9d:e2:ae:9a:35:14:06:9b:ec:88:4c:0f:a8:1d:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:1C:62:55:9D:37:0C:FF:62:9D:92:44:BD:F9:81:24:82:67:8D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d30::/48
Signature Algorithm: sha256WithRSAEncryption
b4:4c:59:de:1f:af:9d:ae:58:12:55:e2:b6:bf:ac:8a:94:2c:
1b:02:59:69:b2:a0:7a:f3:cd:85:aa:d4:4a:c9:a8:cf:6b:15:
c3:05:29:cb:9e:c9:be:63:8e:39:74:c7:88:3a:d9:45:24:f4:
9b:0c:e5:bc:7d:a2:53:ec:85:fa:82:99:26:14:85:46:2c:b4:
87:f9:a7:ea:95:bd:fb:d6:29:ee:97:7f:84:c5:09:9e:5d:04:
03:c3:b8:c6:86:03:13:25:e9:18:6e:12:ab:78:53:b1:d5:32:
8f:50:61:c4:53:40:3b:de:26:52:5b:3a:99:ad:4b:75:3f:6d:
fd:cf:17:23:af:77:16:c5:db:f1:7d:04:05:83:cd:2e:8a:9c:
d6:43:06:1d:b4:44:35:d0:d7:ea:62:4c:b0:29:35:f0:95:bd:
70:22:b2:44:ee:7e:fc:38:31:d8:d1:77:c4:b2:f2:50:61:28:
c0:3e:7e:f9:fe:8c:57:ee:cd:14:bd:e3:3e:58:00:28:6e:32:
de:cb:cf:48:f2:29:c6:75:4e:44:56:d3:ad:2a:19:6e:a7:c7:
47:8a:a2:a0:24:61:a2:cc:c2:cd:f2:bb:c9:cc:dc:bd:97:01:
b5:6b:a3:09:96:08:3b:fd:42:be:dd:7a:ae:fa:8c:92:9a:e5:
ee:cc:72:24
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgITbQC7FDsl2A7jKVd9lT+VN/gQQDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhjNGNlN2Q4OTAyNDA1YmE0NTk4Zjg0YjZhNDFjMjdkNzIy
ODM0YjFjMB4XDTI2MDczMTAyMDM1OVoXDTI3MDczMDAyMDg1OVowMzExMC8GA1UE
AxMoMzVDQTFDNjI1NTlEMzcwQ0ZGNjI5RDkyNDRCREY5ODEyNDgyNjc4RDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALsp3NZetxHH/BuD7QYcJU6r0hBV
Zn1a3O9GP6aA1YqXOT7U2UjpJEro8TXQPGmv3ZwpmDuRsBo/7pSDgOLufbDxpXTY
bPPR6LR+M04JFL/h4sJZ8eBKWv6rDnOOnZLvryH7cZ7MS2FOifkqsuszMHwhNw1x
ZotFMgsD2CIZgcguk1Lsj3AbqOO32b/K/3mhc3CDtbJtx181if1mqZQOhXgCOWYB
LmU9o/uXg7B5UrujMysrHijt6rQBgEHWq57XN3I0ZAK5ibaToJyS2W3WfuZivrR5
FxL50PtGnEh+zcC/6UGDrEPUe5+wP8A96kjrRp3irpo1FAab7IhMD6gdwScCAwEA
AaOCAg0wggIJMB0GA1UdDgQWBBQ1yhxiVZ03DP9inZJEvfmBJIJnjTAfBgNVHSME
GDAWgBTEzn2JAkBbpFmPhLakHCfXIoNLHDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0
ZjQvMC9DNENFN0Q4OTAyNDA1QkE0NTk4Rjg0QjZBNDFDMjdENzIyODM0QjFDLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQveE01OWlRSkFXNlJaajRTMnBCd24xeUtE
U3h3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnN5
bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00
NzAxLThmMWYtODQyNTExMTk2NGY0LzAvQVMyMDUxMzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqD4XB
DTAwDQYJKoZIhvcNAQELBQADggEBALRMWd4fr52uWBJV4ra/rIqULBsCWWmyoHrz
zYWq1ErJqM9rFcMFKcueyb5jjjl0x4g62UUk9JsM5bx9olPshfqCmSYUhUYstIf5
p+qVvfvWKe6Xf4TFCZ5dBAPDuMaGAxMl6RhuEqt4U7HVMo9QYcRTQDveJlJbOpmt
S3U/bf3PFyOvdxbF2/F9BAWDzS6KnNZDBh20RDXQ1+piTLApNfCVvXAiskTufvw4
MdjRd8Sy8lBhKMA+fvn+jFfuzRS94z5YAChuMt7Lz0jyKcZ1TkRW060qGW6nx0eK
oqAkYaLMws3yu8nM3L2XAbVrowmWCDv9Qr7deq76jJKa5e7MciQ=
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:13:25 2026 by rpki-client