Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205305.roa
File: AS205305.roa (raw, json)
Hash identifier: lthReMG+oQ4Jiu7/13ZG25xM7jlGQpleaXBck0OEO5g=
Subject key identifier: 51:AC:38:53:92:4E:B4:FA:0A:AB:B1:2B:B3:01:00:C5:4F:C3:7E:1A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2EDEB28F41EE3676890B72B8A4B78E552CAEA684
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205305.roa
Signing time: Fri 31 Jul 2026 02:08:58 +0000
ROA not before: Fri 31 Jul 2026 02:03:58 +0000
ROA not after: Fri 30 Jul 2027 02:08:58 +0000
asID: 205305
IP address blocks: 2a0f:85c1:cfa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:de:b2:8f:41:ee:36:76:89:0b:72:b8:a4:b7:8e:55:2c:ae:a6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:58 2026 GMT
Not After : Jul 30 02:08:58 2027 GMT
Subject: CN=51AC3853924EB4FA0AABB12BB30100C54FC37E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:c3:47:bb:cf:22:61:74:d3:62:9f:42:4c:
cf:6d:c0:54:bb:bc:c6:27:68:5f:b1:b4:b8:13:c5:
12:8e:82:2f:6c:61:53:b3:d8:78:50:2a:30:bd:73:
2f:76:85:5b:cf:fe:c7:d9:af:9e:64:53:9b:14:8a:
4e:ef:85:13:08:61:e6:7a:b6:59:4c:9a:f3:92:95:
e6:0a:a3:bc:b6:ad:03:4b:17:04:1f:6e:75:9f:f4:
08:57:8a:a7:f9:2e:4d:ea:56:b6:e8:c8:e1:81:47:
4f:a8:2b:e1:60:ab:d5:24:86:cc:85:12:34:58:6a:
3f:66:15:04:e8:de:e9:5a:9a:04:47:3b:5a:75:dc:
5b:13:42:b6:b8:c2:7a:10:55:a8:98:08:3c:d3:9e:
0d:40:1f:c1:09:ef:46:0d:17:c5:ad:69:0c:ea:3e:
91:59:a6:3e:04:8c:e8:45:72:5e:f9:e8:7a:4b:57:
d9:1d:bb:9d:a6:d0:86:2a:03:34:fa:1c:4d:e4:12:
0e:75:f4:32:cb:80:e3:df:6f:ef:9d:bb:fa:55:c4:
1d:4c:e8:30:33:4d:cb:32:06:98:9c:a5:bc:f3:d9:
a8:61:25:8f:27:ff:66:14:ce:89:05:ab:9a:cc:73:
b7:a6:13:92:51:cc:16:bd:ca:7a:96:72:24:fe:3f:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AC:38:53:92:4E:B4:FA:0A:AB:B1:2B:B3:01:00:C5:4F:C3:7E:1A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cfa::/48
Signature Algorithm: sha256WithRSAEncryption
a6:19:d7:13:ef:20:3b:3f:59:83:67:de:bc:4c:d2:9d:c3:79:
10:9a:fb:62:1c:0e:a8:30:26:90:c8:a6:95:0e:cd:3c:bf:63:
6c:09:38:ad:f7:07:da:87:fd:c1:5e:06:18:af:92:4c:d8:b6:
3f:29:e3:55:9a:8c:68:0d:93:2c:5b:dc:2c:25:2d:a4:db:7f:
93:e0:0c:50:b6:54:51:a7:88:94:3c:08:36:dd:2a:88:0a:df:
3b:07:dd:d3:38:7e:11:c7:c7:62:c5:92:fe:a2:75:3f:80:b3:
8f:65:60:57:4f:51:8a:e4:20:27:ec:4f:34:c7:8c:22:ac:ef:
73:d3:b3:24:4a:7c:31:df:76:7d:f8:f4:42:4f:7a:94:f9:b2:
41:5c:5a:d4:51:b0:3a:c5:a1:9b:eb:c1:95:50:7c:2a:93:2f:
5f:2d:2c:58:d7:1b:fe:61:a2:3c:c6:ee:34:b9:7e:0c:63:6f:
14:b2:d2:91:73:52:8d:63:ee:d5:6c:2c:25:6b:2b:06:e4:64:
ee:ba:18:60:6f:6e:e3:e0:4a:84:7b:22:68:13:c1:76:2d:f0:
71:91:52:5d:91:5d:6b:43:ee:3a:60:6a:6e:ad:08:14:7e:02:
ae:8c:41:e9:73:b7:46:24:1c:84:17:0a:75:f7:58:6a:e7:34:
1b:03:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:59:27 2026 by rpki-client