Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205336.roa
File: AS205336.roa (raw, json)
Hash identifier: XKk2gxTinMdqbglZSlwposOs24BsFxzQYI8K7ikX83Q=
Subject key identifier: 93:07:C9:ED:71:6B:DE:EE:02:8A:F8:2E:A0:22:71:8D:DF:21:21:41
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4A7F6011A8D257D50C74DF94F1087C2C87C0D470
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205336.roa
Signing time: Fri 29 Aug 2025 01:53:24 +0000
ROA not before: Fri 29 Aug 2025 01:48:24 +0000
ROA not after: Fri 28 Aug 2026 01:53:24 +0000
asID: 205336
IP address blocks: 2a0f:85c1:cfb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7f:60:11:a8:d2:57:d5:0c:74:df:94:f1:08:7c:2c:87:c0:d4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 29 01:48:24 2025 GMT
Not After : Aug 28 01:53:24 2026 GMT
Subject: CN=9307C9ED716BDEEE028AF82EA022718DDF212141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:05:5b:2b:b4:7d:26:3a:bc:df:66:96:4c:
d8:25:be:32:b6:87:22:c5:a2:05:eb:0a:91:a1:70:
3f:83:a2:40:19:2b:c1:76:ff:8e:84:cd:7e:59:9e:
cf:bf:a4:63:0d:de:a2:9e:77:e0:f4:2e:d0:19:4e:
da:85:27:31:2f:b5:4b:d9:e8:10:7f:e8:12:62:72:
51:28:b0:4e:cc:cc:26:ec:e0:3a:cf:79:c9:ae:53:
85:f7:72:cf:1d:16:95:9c:a4:00:b1:04:2c:c0:a8:
97:e8:5c:f2:5d:c5:65:ca:41:5e:d3:a3:dd:e9:84:
5a:23:6f:75:69:ee:71:dd:6e:d9:06:b7:af:c0:c1:
b8:e6:66:c1:b3:db:03:f6:7e:44:ff:9d:be:94:dc:
40:9e:1e:b7:19:42:11:d3:d6:a2:84:e7:46:6d:73:
e2:ee:81:89:d3:fa:f5:ac:ca:08:78:b5:a6:cf:3d:
e4:35:82:84:ca:a5:7c:a1:a6:c6:c1:69:95:73:3d:
82:61:29:b9:92:80:aa:ea:71:8b:58:c9:f2:1e:22:
ff:ce:7f:f1:18:74:85:57:d4:da:d6:f2:55:8b:cb:
3d:cf:09:2d:56:d2:bb:47:b6:67:ff:e0:8e:bd:1b:
0f:03:0b:5a:c5:72:09:0c:e3:70:66:7a:cd:cb:30:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:07:C9:ED:71:6B:DE:EE:02:8A:F8:2E:A0:22:71:8D:DF:21:21:41
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cfb::/48
Signature Algorithm: sha256WithRSAEncryption
90:04:b4:6e:1b:18:bb:ce:2a:45:16:c9:bb:75:c8:43:18:6d:
3b:9d:40:ae:ac:c2:61:3a:36:ed:8b:a7:fe:cd:65:53:da:ed:
05:17:5a:df:48:63:d1:24:b3:92:3d:e7:bd:c9:18:2d:bc:54:
39:bc:66:c8:b6:7f:15:7b:7a:9e:a8:28:bf:05:e9:13:7a:c2:
98:db:e4:2e:19:d3:a8:e7:ee:ca:71:0b:b4:25:76:2d:2c:15:
6e:c2:5f:04:f3:45:2a:3c:09:f0:6a:08:9c:21:5e:b6:6e:28:
62:1e:42:33:55:53:7f:53:a0:ed:30:99:36:73:1b:51:de:46:
f4:52:d4:de:7d:52:a6:59:f6:0f:3c:63:88:6d:7e:7a:cb:f8:
6c:21:7d:d9:9a:7d:3c:fc:ef:b2:ef:fb:e2:ec:5c:93:7f:11:
cd:d9:9c:8c:df:5e:5a:06:9b:ad:3b:21:10:45:af:e5:9e:1a:
59:60:3e:f7:ee:0d:5d:46:97:56:aa:fc:a4:44:9b:94:93:90:
02:e1:23:13:51:f6:00:be:70:1f:90:fe:b4:5b:1a:80:23:13:
a2:36:02:f8:c1:ce:bc:15:56:60:08:93:ba:00:0c:eb:37:0c:
13:9b:1f:1e:eb:59:bc:9a:95:ff:32:85:7b:5c:9e:1c:6d:48:
ae:ae:36:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUSn9gEajSV9UMdN+U8Qh8LIfA1HAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA4MjkwMTQ4MjRaFw0yNjA4MjgwMTUzMjRaMDMxMTAvBgNV
BAMTKDkzMDdDOUVENzE2QkRFRUUwMjhBRjgyRUEwMjI3MThEREYyMTIxNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8awVbK7R9Jjq832aWTNglvjK2
hyLFogXrCpGhcD+DokAZK8F2/46EzX5Zns+/pGMN3qKed+D0LtAZTtqFJzEvtUvZ
6BB/6BJiclEosE7MzCbs4DrPecmuU4X3cs8dFpWcpACxBCzAqJfoXPJdxWXKQV7T
o93phFojb3Vp7nHdbtkGt6/AwbjmZsGz2wP2fkT/nb6U3ECeHrcZQhHT1qKE50Zt
c+LugYnT+vWsygh4tabPPeQ1goTKpXyhpsbBaZVzPYJhKbmSgKrqcYtYyfIeIv/O
f/EYdIVX1NrW8lWLyz3PCS1W0rtHtmf/4I69Gw8DC1rFcgkM43Bmes3LMH+dAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUkwfJ7XFr3u4CivguoCJxjd8hIUEwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA1MzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQz7MA0GCSqGSIb3DQEBCwUAA4IBAQCQBLRuGxi7zipFFsm7dchDGG07nUCurMJh
Ojbti6f+zWVT2u0FF1rfSGPRJLOSPee9yRgtvFQ5vGbItn8Ve3qeqCi/BekTesKY
2+QuGdOo5+7KcQu0JXYtLBVuwl8E80UqPAnwagicIV62bihiHkIzVVN/U6DtMJk2
cxtR3kb0UtTefVKmWfYPPGOIbX56y/hsIX3Zmn08/O+y7/vi7FyTfxHN2ZyM315a
BputOyEQRa/lnhpZYD737g1dRpdWqvykRJuUk5AC4SMTUfYAvnAfkP60WxqAIxOi
NgL4wc68FVZgCJO6AAzrNwwTmx8e61m8mpX/MoV7XJ4cbUiurja6
-----END CERTIFICATE-----
Generated at Sun Sep 7 01:58:30 2025 by rpki-client