Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205383.roa
File: AS205383.roa (raw, json)
Hash identifier: xraqviek+3jvsl56D333XGIMJshBX4bgfo4N9Crv2SI=
Subject key identifier: 34:EF:37:56:85:34:B6:81:EB:9B:BD:0C:76:BF:E4:99:F3:DF:33:E3
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 70A377B0C076EFFD347BF4C49BB5B0DD97C2B9D6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205383.roa
Signing time: Fri 31 Jul 2026 02:08:57 +0000
ROA not before: Fri 31 Jul 2026 02:03:57 +0000
ROA not after: Fri 30 Jul 2027 02:08:57 +0000
asID: 205383
IP address blocks: 2a0f:85c1:cf3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a3:77:b0:c0:76:ef:fd:34:7b:f4:c4:9b:b5:b0:dd:97:c2:b9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:57 2026 GMT
Not After : Jul 30 02:08:57 2027 GMT
Subject: CN=34EF37568534B681EB9BBD0C76BFE499F3DF33E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b5:e9:d6:cf:b2:4f:fb:68:bf:ec:fa:c6:f0:
06:ac:71:f8:8c:07:b7:0b:90:36:c4:93:f9:ff:24:
5e:9e:da:7d:07:7c:80:b5:eb:41:7a:aa:af:7b:06:
a8:8e:47:50:da:56:bf:ee:f7:78:06:33:11:89:14:
60:89:27:50:86:9e:1f:de:ff:14:09:0e:4b:54:86:
7c:73:32:9c:0e:b0:5e:df:79:42:ab:90:14:b5:53:
4c:3b:b7:9e:b6:87:77:35:00:60:8c:76:b0:fb:ae:
88:da:33:73:17:e7:a4:b3:e3:98:0d:91:69:f3:54:
87:a2:bc:b5:dd:c7:7a:07:98:25:22:3e:0e:7b:cb:
f9:41:a3:b7:50:1a:a4:6f:05:30:2f:37:06:ce:08:
ef:6d:ec:02:b6:c7:9f:96:37:7f:cf:0d:ae:c5:7b:
ea:3d:7c:2e:fb:02:1b:af:6c:45:71:6c:c6:78:fc:
35:e0:d3:c4:a4:bf:80:28:f0:eb:57:a5:60:d3:58:
d3:84:21:98:01:8c:4c:a0:7e:a5:93:9d:e6:32:a0:
29:35:1e:57:c4:6f:9d:3a:97:35:c0:0b:9e:f5:70:
18:24:c1:7b:66:cb:a2:fa:0c:02:97:ee:33:91:04:
7c:0e:ec:28:0e:dd:0d:98:be:cd:26:6c:5b:d1:db:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EF:37:56:85:34:B6:81:EB:9B:BD:0C:76:BF:E4:99:F3:DF:33:E3
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205383.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cf3::/48
Signature Algorithm: sha256WithRSAEncryption
ce:68:69:59:02:9a:d2:ce:56:ea:1b:91:db:db:95:f5:fa:84:
78:c5:0e:e3:b5:f3:2d:c3:36:61:81:57:86:99:44:5d:6d:14:
37:ef:e9:f7:c3:74:eb:95:d9:60:c8:ce:bb:ea:87:d1:20:aa:
63:56:23:65:a8:c9:d7:79:07:f4:81:d4:b5:af:5c:ca:dd:64:
84:5a:43:f3:44:e9:9d:b3:08:01:68:8a:9e:77:a3:7c:1a:99:
68:61:33:a6:46:f4:e8:49:d8:9a:62:80:bb:5e:c1:82:2b:55:
00:03:9a:dc:a6:3d:19:0c:70:67:5e:2b:c7:94:0e:d7:77:b9:
25:bf:f2:07:85:49:1c:c9:45:9e:25:2e:12:e9:fe:d7:fb:87:
09:17:c5:29:5d:f1:23:df:52:3e:57:2f:b1:c5:ab:97:46:9b:
de:0a:8b:3e:4f:b2:a9:e6:ea:ca:39:59:e6:e2:cd:61:72:64:
da:ac:d0:a7:3b:ae:40:d2:47:a0:5c:3a:0a:cd:d2:95:cf:4f:
8f:d9:7a:42:06:62:f4:8a:26:9f:b8:c5:cf:5d:0d:d7:74:fb:
70:e4:bc:2e:8a:40:ee:35:1d:e0:46:32:e7:4c:89:6a:00:fe:
02:ef:7a:2f:2c:8b:7d:96:5e:0a:2d:e2:a4:f7:f8:15:c4:29:
62:54:9d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:04:30 2026 by rpki-client