Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205150.roa
File: AS205150.roa (raw, json)
Hash identifier: ArLDO7bmg/X3A6kwK/KPg4N0L8K9w2uiUlyhAu7buKg=
Subject key identifier: FA:BE:C8:D3:4E:F5:F6:D8:26:B4:CF:57:CC:ED:10:83:A9:D1:EA:29
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1BA909367FEA5D1AE7923FD63B17419F24541EB8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205150.roa
Signing time: Tue 02 Sep 2025 16:37:14 +0000
ROA not before: Tue 02 Sep 2025 16:32:14 +0000
ROA not after: Tue 01 Sep 2026 16:37:14 +0000
asID: 205150
IP address blocks: 2a0f:85c1:cfe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a9:09:36:7f:ea:5d:1a:e7:92:3f:d6:3b:17:41:9f:24:54:1e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 2 16:32:14 2025 GMT
Not After : Sep 1 16:37:14 2026 GMT
Subject: CN=FABEC8D34EF5F6D826B4CF57CCED1083A9D1EA29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:18:05:f5:c9:d1:f5:87:4a:ee:08:c3:58:
82:7f:13:68:aa:28:1a:ae:49:9d:62:25:f2:f3:a1:
7d:83:a7:fc:56:96:5a:d9:2d:e7:d5:e1:d2:1d:06:
2a:ca:7e:b2:b2:f9:6b:d5:f8:e4:bd:dd:d1:e8:bb:
e4:3c:97:b4:7e:ee:4f:8c:65:e8:5f:8d:5d:d4:61:
7b:3a:e6:17:d2:e5:f2:ca:ec:87:25:44:a0:b2:c4:
94:71:5d:f6:bb:e0:8d:20:18:98:f6:c4:b1:c9:08:
8c:2d:11:0d:0e:ba:f0:53:55:00:1b:e3:2f:e1:87:
e5:f7:f2:04:ad:81:ea:27:bc:76:fa:6d:81:c8:b3:
8f:e2:5a:9c:40:80:ed:ac:6c:c8:be:b5:9b:88:40:
79:5b:7e:a3:e5:dd:c9:8b:49:f1:8f:d5:59:ac:b5:
bb:d3:9c:73:1a:77:eb:2e:58:a0:9b:c8:a8:e1:2b:
e2:c9:b3:4f:ba:34:d3:25:a1:77:20:d0:d5:4e:4e:
4c:35:4c:a8:9d:13:2c:34:da:50:6a:b1:2e:38:08:
3c:bb:aa:4c:cc:e4:34:66:84:d8:38:eb:0c:a7:cf:
fb:b2:95:81:c2:e0:cb:17:a3:93:8b:3a:bd:ee:bf:
b1:1d:9d:6f:60:94:29:72:54:04:ec:6c:85:aa:8a:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:C8:D3:4E:F5:F6:D8:26:B4:CF:57:CC:ED:10:83:A9:D1:EA:29
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cfe::/48
Signature Algorithm: sha256WithRSAEncryption
22:0d:8f:c5:6c:06:c8:97:96:07:3b:44:7d:1a:24:76:27:6f:
02:04:5f:09:b7:7c:83:2b:d5:0f:ac:dc:a3:d5:5d:3c:75:04:
2e:15:42:d1:a6:95:de:d7:3d:c7:8a:1c:f1:db:19:57:61:21:
8a:24:cd:2b:c0:19:5c:b3:d3:b6:f1:1f:ad:d0:74:27:0f:d1:
39:ad:86:9a:5c:da:d9:0d:14:0e:a5:ec:4a:67:0b:8f:61:71:
c5:f6:0d:db:58:2a:d0:1d:df:3d:37:8c:e6:d2:68:0b:59:fd:
1d:d6:79:e1:40:94:ca:a9:8f:12:14:f1:d8:7b:50:96:be:b2:
b9:bc:f5:4c:ac:97:69:31:94:66:0f:29:bf:f8:d4:7b:9f:03:
4f:18:90:84:6a:70:7d:27:5a:d0:a1:0e:8f:76:3d:df:ad:07:
ee:e0:9c:ff:c1:c9:32:49:9c:27:5e:24:f6:09:42:5a:57:5b:
10:87:83:0f:c4:26:c8:c6:ee:ff:d1:17:9c:58:b7:a4:04:e4:
aa:06:c4:69:11:00:60:44:af:17:c2:4c:8d:8a:e5:92:c0:8f:
3c:5f:e3:67:1e:0a:68:49:62:9f:ba:98:d5:3d:2b:a2:7f:49:
3a:c8:e6:9b:d9:77:7f:57:17:27:41:80:64:4e:bc:e2:66:d0:
49:07:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:01:27 2025 by rpki-client