Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205208.roa
File: AS205208.roa (raw, json)
Hash identifier: 2UM0eK4HJ4wI+FTFi14RRjqkbyBXn6NdUcvpE7taOg8=
Subject key identifier: 7E:4E:BC:04:9E:4F:7C:C4:37:B7:12:BC:35:BF:B0:57:AD:D6:2C:45
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 533965F1F21D2C06D05CE59D9322795D0BC30345
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205208.roa
Signing time: Fri 31 Jul 2026 02:08:57 +0000
ROA not before: Fri 31 Jul 2026 02:03:57 +0000
ROA not after: Fri 30 Jul 2027 02:08:57 +0000
asID: 205208
IP address blocks: 2a0f:85c1:cfd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:39:65:f1:f2:1d:2c:06:d0:5c:e5:9d:93:22:79:5d:0b:c3:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:57 2026 GMT
Not After : Jul 30 02:08:57 2027 GMT
Subject: CN=7E4EBC049E4F7CC437B712BC35BFB057ADD62C45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:9f:cf:8d:4e:64:2f:f3:1f:98:61:ee:d1:
45:ab:9f:0d:d6:d1:85:72:72:40:6a:f9:ff:0a:16:
72:3e:a1:8a:a4:30:ed:ec:4b:e4:3d:7a:6f:8d:50:
76:b9:ba:13:d7:3e:b5:52:16:96:f2:3b:5e:97:6f:
47:32:e5:76:78:b8:09:9f:08:16:30:e0:ee:3a:f8:
33:30:15:85:e2:49:7b:b8:da:77:71:b8:14:94:58:
04:8e:6a:56:c8:20:7a:f2:59:00:db:2b:0c:19:59:
5d:63:20:bb:fb:a2:aa:6e:8e:a7:bb:74:35:28:ba:
cd:57:f6:ea:02:c5:43:26:8b:37:3f:11:1a:02:1f:
3d:78:76:2e:79:b8:ce:46:9e:14:be:5c:fc:46:ff:
a3:b5:ce:96:fb:c8:02:61:3e:49:38:97:d9:bc:a6:
c1:92:94:d5:9f:27:17:30:b3:7d:a9:e8:f1:cb:1a:
08:43:b8:30:b2:79:41:21:41:ab:ab:cf:6c:f9:30:
75:db:ac:b1:37:bd:6a:ff:4b:c5:d5:a5:e8:34:4c:
a2:ac:1b:8f:9c:00:12:10:42:0c:3c:b2:40:e8:82:
ae:8c:82:a8:56:73:8e:a5:18:6f:74:43:87:c8:29:
f4:3c:68:bc:f2:97:53:3d:a6:32:4b:97:3b:a2:9d:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4E:BC:04:9E:4F:7C:C4:37:B7:12:BC:35:BF:B0:57:AD:D6:2C:45
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cfd::/48
Signature Algorithm: sha256WithRSAEncryption
a8:2f:21:ea:5b:44:15:a1:e8:a3:47:62:3e:27:b6:90:23:d7:
6a:4d:83:9a:57:77:d6:76:b6:7c:41:94:2f:f5:8d:0c:29:e5:
7c:f6:fa:b6:93:3a:d0:9f:37:56:33:27:6f:81:28:39:33:61:
94:4e:78:4e:01:4d:90:20:01:85:27:fd:5a:8c:d2:5a:00:c2:
5d:d8:a2:6d:12:5b:c2:52:66:d9:2c:3f:ff:7d:b6:bd:dd:c3:
12:e5:9e:80:3b:66:11:5e:5a:39:fb:af:0b:17:0a:53:8e:2a:
7c:4e:76:28:e1:e0:2c:bf:22:0f:87:88:00:6d:a4:a3:0c:35:
18:ac:69:0c:12:c3:0f:a2:80:4e:73:6f:15:49:50:9e:5b:3c:
74:bb:76:87:2d:c8:d6:52:56:f4:5c:7d:af:bb:ab:4d:17:06:
85:fd:a0:ea:ea:f9:46:e2:48:2a:a9:d7:b8:23:ad:8f:7b:c0:
9e:ec:39:a7:5f:45:38:6a:cc:6e:62:9c:0c:01:9c:f6:a4:b4:
f9:8b:f1:ac:15:a2:bb:2a:b7:77:2a:4d:4d:3d:a8:2c:58:e5:
d7:63:f5:55:ca:ad:ed:99:2a:a1:8f:e8:b5:de:e4:56:c6:b1:
8f:8c:dd:4f:83:df:9e:4a:f2:83:de:fb:e4:83:94:18:2f:d2:
32:36:cc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:25:15 2026 by rpki-client