Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205336.roa
File: AS205336.roa (raw, json)
Hash identifier: aTYScAJNWyNo7zwVotLpQnGF8sllKt2yMa3S9LURVRs=
Subject key identifier: 00:67:76:25:7B:B8:76:36:A3:B5:D5:99:8C:AB:5A:C8:E8:C6:13:A6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 59A2F71C4AE855A78512528678834DA8480264C3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205336.roa
Signing time: Fri 31 Jul 2026 02:08:58 +0000
ROA not before: Fri 31 Jul 2026 02:03:58 +0000
ROA not after: Fri 30 Jul 2027 02:08:58 +0000
asID: 205336
IP address blocks: 2a0f:85c1:cfb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a2:f7:1c:4a:e8:55:a7:85:12:52:86:78:83:4d:a8:48:02:64:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:58 2026 GMT
Not After : Jul 30 02:08:58 2027 GMT
Subject: CN=006776257BB87636A3B5D5998CAB5AC8E8C613A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e9:3a:cb:51:e9:ac:f8:1d:f4:5c:a5:b8:5a:
0a:03:d3:e6:2b:82:0e:13:30:56:5a:ff:43:cb:27:
33:ab:58:26:21:c6:97:dc:ee:bc:a1:a7:25:5b:a3:
aa:01:55:70:87:34:2f:7f:95:8f:11:fe:db:76:7f:
4a:90:0e:58:3b:4a:32:a5:6d:9d:76:1e:fc:5a:8d:
08:18:5f:b3:42:c5:83:71:f9:fd:6f:43:33:a7:9f:
2d:e7:a1:c7:b7:9d:52:5c:d9:ab:fa:d4:a8:65:3b:
08:72:49:ca:57:6a:df:73:52:9b:3c:4d:e5:ed:6b:
9f:7a:00:3e:28:6d:91:93:27:56:e4:f7:8f:f8:2c:
62:74:06:30:32:2f:32:27:ef:86:03:d6:c5:0e:f2:
7e:f8:53:cb:8a:13:5d:b3:2f:39:72:f2:98:46:b6:
59:43:d8:29:c4:ea:6b:a2:75:4a:44:0c:ba:8b:95:
94:68:2c:1a:2c:1e:5e:8c:7d:b8:20:f1:49:14:26:
3a:48:73:53:57:8f:b2:dd:1e:94:4f:4e:4b:3a:8d:
50:ab:32:76:27:f1:32:c9:73:4b:6d:08:1c:06:1a:
b4:47:d7:ba:97:c3:df:d0:85:a8:f8:13:f9:82:8f:
da:ab:e3:fb:c4:08:d8:e1:aa:a3:21:ae:5e:0e:80:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:67:76:25:7B:B8:76:36:A3:B5:D5:99:8C:AB:5A:C8:E8:C6:13:A6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cfb::/48
Signature Algorithm: sha256WithRSAEncryption
36:a5:1f:42:d3:6c:55:7f:2b:a6:17:b8:26:95:3c:5e:50:88:
02:f9:5d:42:ed:8b:e1:b9:de:d9:14:45:d0:d6:66:e0:4a:9d:
d0:1d:f0:91:ba:05:11:c1:98:f0:74:b9:af:2a:76:89:ac:df:
ce:5e:85:e3:c9:fa:4a:54:29:52:75:8c:46:7d:0d:0f:76:61:
90:b8:82:5c:94:0b:89:b3:8f:5d:bd:51:50:cb:5d:52:94:b1:
a4:87:15:67:b7:8f:39:d6:00:40:68:aa:0a:6b:ec:a6:eb:71:
ba:65:12:7a:40:ec:91:b7:14:65:e0:ea:4f:b1:ba:01:2e:78:
7e:5e:eb:bf:dd:f4:a9:f3:36:57:13:44:93:34:5d:e0:eb:2f:
8f:ae:50:1e:36:8e:79:50:19:92:b1:64:04:3d:62:fc:1c:bf:
f7:8f:2a:8b:e9:d7:46:05:ee:cf:6e:bd:ef:e6:35:b7:a6:69:
90:96:22:88:cf:f3:ee:d5:ac:72:80:38:a8:6b:ae:2e:78:86:
df:8e:3e:8c:bd:50:77:f3:dd:a4:c7:b7:3e:09:8b:d5:20:fc:
11:e9:6a:62:3a:3f:65:60:4b:61:29:3b:bd:15:4a:a8:4f:25:
56:4d:97:d9:bf:39:6e:06:fe:16:45:3f:ae:86:8b:c8:6f:25:
e6:71:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:04:19 2026 by rpki-client