Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205224.roa
File: AS205224.roa (raw, json)
Hash identifier: 4qzVPeRPwFr9tr3FkS7aA+fbs9k/w1hYsNMimX6SGc4=
Subject key identifier: 81:E6:33:68:43:DB:A0:42:25:51:6A:E0:3D:FB:CF:A3:21:25:11:09
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7E9AAA70CD25AF24B25C3AF0AAB21D916D7FF4AC
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205224.roa
Signing time: Fri 31 Jul 2026 02:08:57 +0000
ROA not before: Fri 31 Jul 2026 02:03:57 +0000
ROA not after: Fri 30 Jul 2027 02:08:57 +0000
asID: 205224
IP address blocks: 2a0f:85c1:cfc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:9a:aa:70:cd:25:af:24:b2:5c:3a:f0:aa:b2:1d:91:6d:7f:f4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:57 2026 GMT
Not After : Jul 30 02:08:57 2027 GMT
Subject: CN=81E6336843DBA04225516AE03DFBCFA321251109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:55:da:2e:1c:5a:d4:da:bd:82:92:a5:78:
5b:49:f4:21:57:b2:a6:ba:ee:9c:2f:7a:92:3d:b5:
62:2b:5a:3e:12:0b:92:fb:db:5b:e9:9d:0f:04:77:
92:8a:8c:ac:25:80:08:ef:ec:90:0e:1d:16:12:51:
a0:ef:49:7b:2b:57:d2:a3:38:2a:17:2e:58:76:5a:
9c:0c:7d:77:b2:9e:69:3d:96:73:87:70:f6:0c:25:
3f:03:cf:a7:bb:f3:41:d8:55:ca:42:24:21:75:15:
01:91:ab:79:6a:d8:8f:1f:7d:13:7a:d4:ae:db:1f:
3d:32:81:bd:c3:63:22:d2:fa:5b:4a:f7:48:35:69:
5b:a5:14:43:87:b0:60:5f:b8:8a:e9:6b:0c:d4:4e:
54:eb:71:9f:bf:c6:ac:06:ff:8a:21:a6:7a:a3:bb:
b1:a8:c9:2b:a3:76:19:a1:e2:1d:55:9e:3b:8e:fe:
91:92:46:b8:cc:81:24:ed:64:b8:2f:98:6d:36:f6:
e1:8a:db:90:70:7e:86:2b:c2:34:14:3c:f3:0f:7f:
5d:75:92:12:b7:e7:8d:b8:ec:51:f2:61:c0:52:d6:
16:6b:ea:22:6b:0b:57:72:cc:92:d8:28:9d:23:19:
d6:91:51:48:7d:c2:15:83:e6:ca:5d:fc:85:ab:ce:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E6:33:68:43:DB:A0:42:25:51:6A:E0:3D:FB:CF:A3:21:25:11:09
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cfc::/48
Signature Algorithm: sha256WithRSAEncryption
e0:a8:99:97:19:36:d5:29:e0:12:20:7c:e6:d7:f1:44:2b:7c:
87:9f:ea:0a:d5:93:39:7d:09:3e:ec:e6:15:b5:8a:12:2b:91:
56:99:f5:de:15:fd:8d:1b:3d:37:3d:dd:52:3d:c7:c9:5f:9d:
bf:c1:f3:e9:b5:e2:31:7e:ed:b8:aa:e8:4e:f6:0c:48:98:d9:
d8:5b:82:bb:da:22:78:a8:a2:d3:f9:0f:ec:f1:71:57:e9:85:
92:9d:9e:91:9b:ca:78:57:3b:05:95:4b:43:9b:d4:65:cc:ca:
93:bb:ae:c6:be:25:5a:6f:7b:c3:50:48:4f:ab:0b:a9:f4:ae:
29:e4:bc:9d:38:c4:80:0b:e2:0b:8c:58:74:42:48:52:2c:d0:
b2:92:1b:69:b1:c6:f4:7c:6f:50:34:37:01:83:95:4b:81:71:
3e:2b:ca:79:08:84:f1:c7:35:8e:11:d2:44:78:8f:b5:7d:71:
cc:93:49:d2:87:21:db:97:cf:0f:08:a6:80:01:f2:59:58:ca:
ee:22:29:3f:15:00:fc:1b:5e:71:8f:89:6f:81:58:4f:b3:75:
70:b3:bb:73:3a:51:7d:62:d5:05:d0:ad:e4:0f:c4:f3:fc:67:
1a:95:3f:ac:bb:3d:8c:b3:f6:68:3b:10:c1:06:01:59:8c:0c:
4b:9e:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:25:26 2026 by rpki-client