Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205208.roa
File: AS205208.roa (raw, json)
Hash identifier: ImPomr6UQDLWu2ECBd53r8u+xp3/b0F+2BQLH3tnUuE=
Subject key identifier: 61:C5:82:29:0E:97:06:D1:E0:39:4E:FC:70:D4:0C:A5:3A:25:CF:C6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0E6625676C52E00C1CA97AFAF61834918EE648E3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205208.roa
Signing time: Fri 29 Aug 2025 01:52:39 +0000
ROA not before: Fri 29 Aug 2025 01:47:39 +0000
ROA not after: Fri 28 Aug 2026 01:52:39 +0000
asID: 205208
IP address blocks: 2a0f:85c1:cfd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:66:25:67:6c:52:e0:0c:1c:a9:7a:fa:f6:18:34:91:8e:e6:48:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 29 01:47:39 2025 GMT
Not After : Aug 28 01:52:39 2026 GMT
Subject: CN=61C582290E9706D1E0394EFC70D40CA53A25CFC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ec:4a:76:33:4a:52:26:67:f8:d3:06:e1:2d:
14:1b:cd:5b:7f:63:d3:d0:a9:38:4c:60:6e:b8:dc:
d5:8d:bb:8b:28:82:c3:17:5b:44:11:b3:20:3e:a2:
a9:db:c7:29:0d:a6:19:1c:d4:f4:f1:af:59:5b:ef:
b3:a2:9b:dd:2d:a0:2b:73:36:55:f3:4d:91:bf:69:
75:e7:57:a8:ff:20:6c:be:a8:2a:d2:81:4f:c2:66:
94:8e:a0:97:08:e4:01:c4:b7:fb:d1:36:ce:c5:05:
97:3e:b1:f1:97:9d:90:09:4e:af:da:64:3a:33:91:
3b:09:bb:4f:d3:3f:23:6c:4f:2f:df:c8:64:23:3f:
c6:8c:06:8a:7e:f9:42:04:12:ee:6f:35:77:87:1f:
31:2c:c3:ec:d3:2a:ed:dd:6d:dd:1a:3a:d6:f1:0c:
9c:14:81:16:99:cd:b7:19:44:a2:6b:c5:52:54:3c:
6e:28:44:cc:3f:05:a6:57:b6:25:5b:61:d4:fa:e7:
0a:54:c8:f7:05:56:8d:58:86:3b:f8:3f:d1:42:35:
5f:27:3f:f9:36:42:2e:2b:80:e1:41:b5:87:4a:6f:
1f:12:10:d2:f4:89:a8:75:8a:9b:48:1a:07:4d:af:
97:12:fc:b2:6d:f9:11:62:15:da:3c:16:75:9c:cf:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:82:29:0E:97:06:D1:E0:39:4E:FC:70:D4:0C:A5:3A:25:CF:C6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cfd::/48
Signature Algorithm: sha256WithRSAEncryption
cd:9d:8c:7e:f1:3d:31:53:f7:47:bd:3f:d6:cd:da:84:fd:0a:
f1:ee:f9:aa:0b:56:71:05:4d:27:ac:6e:55:2a:59:d6:42:5e:
ab:45:45:e8:f4:16:b0:56:38:e5:6a:d1:2d:da:8b:9c:d1:dc:
ab:07:53:60:8a:ac:39:48:68:6a:df:0e:3e:08:5b:34:b0:e6:
81:78:e3:4e:ca:1c:40:b9:b3:00:0e:23:d3:90:44:44:c0:8e:
49:10:0f:86:3a:8d:17:b7:5f:8d:35:2c:74:7f:18:14:24:7d:
29:26:2f:7c:ca:4e:d8:c8:33:e4:08:6b:2f:e0:e4:c3:cf:d4:
de:76:5b:7d:d5:df:e5:22:3c:35:84:b8:83:4f:74:d7:cd:2b:
ea:53:d3:a6:19:a5:dd:e9:41:c9:7c:1e:c6:fa:dc:4f:06:f7:
da:5c:b6:3f:8b:1e:13:46:ad:56:03:14:f3:10:f7:7c:4a:8b:
f9:a7:41:fc:00:3a:7a:f2:70:1b:fa:46:27:8a:f9:2f:4d:d5:
1a:4b:41:a5:e3:9c:83:86:83:29:bc:40:ab:84:fe:b4:d9:4f:
16:44:57:97:95:f2:68:67:de:bc:c8:f6:b2:2a:d1:f2:97:c4:
57:a8:3a:27:90:fc:56:06:a1:3a:68:41:ab:10:09:29:40:88:
73:21:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:00:45 2025 by rpki-client