Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205378.roa
File: AS205378.roa (raw, json)
Hash identifier: W41t+P1QMkdijUwJNFbuZZpP3c1Psx8GwreQ2JFooMU=
Subject key identifier: 37:29:26:D7:EC:17:AB:23:DA:CB:67:C0:B1:A4:E8:3F:F1:A6:37:C2
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 25D46F83BAF319E696A57105B21EC27076061439
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205378.roa
Signing time: Fri 31 Jul 2026 02:08:59 +0000
ROA not before: Fri 31 Jul 2026 02:03:59 +0000
ROA not after: Fri 30 Jul 2027 02:08:59 +0000
asID: 205378
IP address blocks: 2a0f:85c1:cf4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d4:6f:83:ba:f3:19:e6:96:a5:71:05:b2:1e:c2:70:76:06:14:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:59 2026 GMT
Not After : Jul 30 02:08:59 2027 GMT
Subject: CN=372926D7EC17AB23DACB67C0B1A4E83FF1A637C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:cc:15:c4:11:43:0d:4c:35:8c:84:0b:d2:
1b:45:12:ff:53:14:27:9a:8f:d2:d9:ae:07:a5:d8:
ae:b4:b1:4b:c1:f1:d1:ad:29:16:86:e2:17:09:1b:
d9:d5:db:32:9f:79:3e:4d:d7:4c:64:d3:61:ba:dd:
c9:a9:bf:b9:11:e5:46:52:df:bb:cd:71:4b:71:5a:
87:17:dc:15:03:9b:f5:7e:51:cc:4a:73:09:25:66:
72:7e:83:d3:2f:42:f4:ef:3b:0b:c2:b7:ee:eb:f1:
98:48:86:c6:cd:f0:c6:f4:2d:8e:39:ed:6d:56:2e:
a3:07:b1:04:11:d6:a4:cb:bb:82:0d:5f:f0:5a:05:
30:c6:2f:a9:d5:80:d9:0d:87:56:4a:98:32:14:86:
54:98:a9:ee:e8:8e:b3:6e:c8:d3:a1:49:19:66:38:
65:18:6f:68:95:67:e8:5f:fd:ea:6d:3f:2b:3a:8e:
da:c0:45:49:c6:29:4d:ef:a4:33:e5:14:6b:85:9f:
e7:d5:45:92:1a:2d:b6:2e:bd:3f:97:90:ae:bc:fe:
c7:7e:53:67:b1:5a:6c:4c:1f:ff:7f:65:4d:62:c9:
42:e1:17:aa:e5:85:e4:75:60:5e:b3:96:a3:a3:95:
e2:ed:66:bf:c4:5f:2a:df:3e:5d:1e:9a:31:6d:23:
4b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:29:26:D7:EC:17:AB:23:DA:CB:67:C0:B1:A4:E8:3F:F1:A6:37:C2
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205378.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cf4::/48
Signature Algorithm: sha256WithRSAEncryption
3b:4d:c2:83:42:f9:5a:ae:8c:c6:91:01:0f:e7:24:7a:04:5f:
b7:82:f4:76:c0:be:5a:32:b4:4e:14:39:52:af:ab:2a:e0:70:
5a:c8:84:a9:1b:b1:ae:3a:66:8e:cb:9e:a7:ad:9a:b0:fa:63:
ba:f1:0d:70:99:c2:db:23:1a:c3:cd:64:5c:ae:45:90:f6:48:
82:a5:4f:e1:85:9f:9b:51:04:1e:3d:6a:3d:47:ef:e4:8f:5e:
e0:c9:8b:6b:18:63:59:ce:b0:3d:51:85:23:9d:d9:7a:9b:e3:
9d:ee:34:14:38:ec:32:10:84:b0:4d:d1:85:5a:5e:45:d2:71:
87:3c:28:0a:25:2c:ec:a3:4b:25:03:cb:1a:c7:f8:4b:e3:b4:
14:c0:db:8a:98:95:0e:b0:e4:05:6c:e9:f2:54:d9:ba:df:3d:
36:bc:73:7a:6c:f6:c8:0a:0c:3c:af:83:0a:4a:49:73:b7:19:
11:03:68:c0:54:7f:f5:42:99:2e:7f:b3:34:60:d1:4c:1d:01:
37:a6:17:f2:80:89:ac:70:ed:4f:0b:e5:e8:e5:00:a5:ad:7f:
11:87:89:95:7d:ec:bd:02:91:14:78:23:ec:02:cb:12:56:61:
33:ad:06:69:0e:d1:07:96:02:7a:19:ba:aa:d6:6c:41:22:8f:
91:a0:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:25:20 2026 by rpki-client