Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205378.roa
File: AS205378.roa (raw, json)
Hash identifier: lXiIoRGV95MK7k3tJZwIcn135cYxZkpod13g6fdbCnY=
Subject key identifier: B6:96:02:C3:DE:1E:E9:34:AB:4F:EF:F8:6E:FF:09:C5:17:FA:19:B6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 056275DCDF8EA76A09511A5D4EAEE6901E699045
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205378.roa
Signing time: Fri 29 Aug 2025 01:50:40 +0000
ROA not before: Fri 29 Aug 2025 01:45:40 +0000
ROA not after: Fri 28 Aug 2026 01:50:40 +0000
asID: 205378
IP address blocks: 2a0f:85c1:cf4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:62:75:dc:df:8e:a7:6a:09:51:1a:5d:4e:ae:e6:90:1e:69:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 29 01:45:40 2025 GMT
Not After : Aug 28 01:50:40 2026 GMT
Subject: CN=B69602C3DE1EE934AB4FEFF86EFF09C517FA19B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:a2:45:ce:c8:d1:2c:6d:8d:de:40:c3:74:
d7:a8:37:fc:d5:bb:4a:f6:d7:e7:72:68:cb:ff:7f:
90:2b:ed:12:8b:39:fe:94:6e:b6:c7:88:2a:ee:22:
01:37:55:14:24:73:40:71:5a:9b:56:92:bd:ef:84:
62:09:b0:27:a2:00:bd:c2:88:ef:34:1d:41:6a:82:
d9:49:87:5c:6a:7d:6c:3b:28:3d:61:11:64:a5:60:
81:07:ea:60:f3:c2:a1:47:c2:60:3a:dd:b5:e8:7c:
3d:ee:a4:f9:76:c9:60:29:ad:01:cb:3e:52:7a:b6:
08:fa:10:d8:af:a9:e1:82:90:bd:e1:d6:4b:99:e8:
50:64:96:5f:c7:a7:15:33:ee:d3:cb:0a:77:ea:d9:
dc:78:e3:58:f5:9c:cc:d8:9b:f6:46:a3:5e:75:8e:
5b:03:83:3a:f7:7c:d1:33:bd:31:dc:fd:fd:a8:fd:
2e:0d:dc:15:ea:78:c6:59:0a:a2:c1:7e:ea:bc:45:
f4:27:3d:27:1e:5d:24:0f:4a:31:60:16:3d:b7:8d:
12:88:d8:e5:e9:4e:42:1d:a1:39:39:ec:c3:a2:c3:
92:73:e7:5b:46:d1:95:c3:8e:df:e5:bd:7f:fa:b6:
11:52:1f:14:3c:76:c4:72:02:58:fa:c5:74:81:52:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:96:02:C3:DE:1E:E9:34:AB:4F:EF:F8:6E:FF:09:C5:17:FA:19:B6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205378.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cf4::/48
Signature Algorithm: sha256WithRSAEncryption
9e:ea:73:ed:d0:26:85:89:8f:30:32:4b:27:44:b3:17:46:a4:
20:98:cd:4f:c4:d2:ff:a9:19:a3:b5:74:12:e5:a1:df:da:8b:
23:d2:9a:80:6c:01:27:e7:15:9e:25:f7:c8:f8:cd:17:03:3c:
a7:5c:84:04:ff:36:7d:3b:d3:a9:9d:d6:0e:c4:04:49:fe:77:
24:ff:60:60:e5:01:e1:b4:ee:a0:4e:2c:ca:33:58:00:32:b6:
a4:a3:a1:f5:29:ad:9c:d6:53:bb:11:d9:76:ea:f6:82:0f:af:
5e:db:fc:27:57:e7:60:8c:48:6b:ab:99:00:ea:db:a2:d1:29:
53:92:1f:86:1b:b9:46:24:17:14:c1:42:9e:ac:5b:71:a4:5d:
ae:aa:09:2c:68:76:4a:b4:b9:b4:b8:e9:a9:fc:1f:04:5e:b3:
62:34:49:36:aa:fd:06:c7:bd:06:25:44:7e:dc:e9:f5:1d:04:
1e:90:c5:62:d4:f6:58:ee:0e:6f:eb:67:52:f0:4b:1c:c7:7a:
fd:98:2a:89:d6:e9:80:78:50:a1:fd:bb:ca:58:bb:14:68:c7:
56:83:e8:52:a9:80:c6:a3:ea:65:a3:a0:44:28:b8:25:c1:c7:
f4:60:ca:5c:23:2a:a8:44:7e:a8:5f:cf:ae:05:3f:54:5a:04:
0a:f2:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 01:57:52 2025 by rpki-client