Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205131.roa
File: AS205131.roa (raw, json)
Hash identifier: TglCgEuvWAcL9VKUoy64CmfaTGiD11Auksr4LbJqNlQ=
Subject key identifier: 3E:BF:EA:9D:85:D9:8A:AC:84:4B:6F:B0:7B:4D:C6:B3:F1:87:86:44
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3EECAC1B1F00C15E4144F3B019779ED8CDEDDABB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205131.roa
Signing time: Fri 29 Aug 2025 01:52:25 +0000
ROA not before: Fri 29 Aug 2025 01:47:25 +0000
ROA not after: Fri 28 Aug 2026 01:52:25 +0000
asID: 205131
IP address blocks: 2a0f:85c1:d30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ec:ac:1b:1f:00:c1:5e:41:44:f3:b0:19:77:9e:d8:cd:ed:da:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 29 01:47:25 2025 GMT
Not After : Aug 28 01:52:25 2026 GMT
Subject: CN=3EBFEA9D85D98AAC844B6FB07B4DC6B3F1878644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:cc:6f:e9:01:ae:56:ef:8e:2f:05:24:02:
e2:00:7c:e7:c6:9b:d4:3d:8c:10:c8:92:17:8a:73:
dc:fd:98:9c:7b:a9:1f:4e:66:11:32:f2:c2:97:24:
bc:8e:86:c2:f1:75:00:14:18:c4:ed:a4:8b:02:ff:
59:c4:95:2b:b4:e6:cf:93:82:de:49:a8:da:0a:f2:
bd:fd:e5:4f:0a:3c:75:f6:ef:28:42:18:59:fd:4c:
d9:e4:cd:1a:0e:1b:2e:b2:a2:cf:14:2e:90:c9:e4:
13:d1:60:2f:ff:0e:12:c3:3f:97:cf:60:fd:63:a1:
47:e1:93:df:f4:52:ae:c2:4c:c0:c2:3d:a2:29:f3:
ba:96:f7:bf:7c:7a:f6:c2:07:38:60:15:66:41:59:
ce:07:7d:4c:57:9c:9d:21:77:84:cf:c2:e4:1e:af:
9f:81:d1:27:56:5d:17:1b:8a:e5:0d:a1:8e:8d:cd:
5a:1a:3c:7d:2b:42:d4:dd:81:c5:f6:ac:08:62:e2:
c7:16:a1:40:18:56:b0:fe:30:b2:d2:89:a3:b6:18:
cd:e2:23:5d:47:a3:d3:db:69:0d:7b:16:7c:10:b1:
8a:b6:d6:36:19:78:b1:7d:41:23:6a:60:2d:ab:5c:
af:8a:ef:5b:fc:97:6f:b2:15:86:8d:77:0a:a5:75:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:EA:9D:85:D9:8A:AC:84:4B:6F:B0:7B:4D:C6:B3:F1:87:86:44
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d30::/48
Signature Algorithm: sha256WithRSAEncryption
45:19:ad:09:bb:45:e8:e0:00:40:13:af:6b:d6:8c:01:89:44:
92:0d:ee:c1:32:4b:d4:fa:de:a6:9a:6f:be:e1:80:54:12:25:
cd:86:bb:12:51:32:1a:6f:c4:1e:d3:40:50:93:5e:36:4e:f1:
86:73:a0:5e:e4:83:c7:f6:18:be:48:eb:f4:e6:e8:02:db:3f:
dd:7d:ff:bc:bf:25:98:32:8b:6d:fc:66:27:e4:09:ae:ed:21:
ab:df:27:f5:b2:99:14:94:db:ba:6c:ae:2d:22:9c:12:11:e6:
67:3b:da:bc:a2:36:37:f9:ea:59:b3:59:b4:c2:b4:65:9d:0f:
0b:b4:1e:00:2a:70:b2:e5:2a:b2:ab:ec:bb:11:e3:5c:85:c1:
a4:93:b3:32:65:f1:25:1f:56:99:71:8f:1c:4d:dd:fb:65:ab:
c1:05:73:19:09:d6:43:f9:57:be:b5:20:df:f6:70:eb:9f:c9:
b9:0c:3c:84:f0:96:1a:6c:c1:ca:2b:4a:46:90:ff:a8:24:a9:
ec:13:26:98:43:7d:34:ad:e3:e5:32:46:fd:9b:28:f3:0d:05:
ba:ee:9c:3a:7c:c4:5e:78:3f:2d:dd:63:3a:bc:13:d9:4c:46:
98:64:e8:09:e4:7d:e1:f1:24:29:25:b8:65:d8:e1:9d:01:32:
7a:48:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 01:59:24 2025 by rpki-client