Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205422.roa
File: AS205422.roa (raw, json)
Hash identifier: 5wqio6ZM0FiVRbVMT2/ngThAoGf0Kk6EpzlvEPz5rPs=
Subject key identifier: CA:02:8D:32:A0:B7:D3:92:56:71:10:C7:DA:28:B0:EA:B3:97:2B:3B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6EB1FEAA196803AF4C951A4B31479218FAB15886
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205422.roa
Signing time: Mon 20 Jul 2026 21:08:52 +0000
ROA not before: Mon 20 Jul 2026 21:03:52 +0000
ROA not after: Mon 19 Jul 2027 21:08:52 +0000
asID: 205422
IP address blocks: 2a0f:85c1:ced::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b1:fe:aa:19:68:03:af:4c:95:1a:4b:31:47:92:18:fa:b1:58:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:52 2026 GMT
Not After : Jul 19 21:08:52 2027 GMT
Subject: CN=CA028D32A0B7D392567110C7DA28B0EAB3972B3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:1f:a3:56:60:51:07:80:0c:ae:7c:79:68:
52:3b:8d:d9:c7:23:93:fa:e4:18:3a:3f:88:1b:0c:
5f:f8:f7:13:51:52:bc:52:32:56:b7:3c:5d:1e:fa:
3c:bc:89:1d:49:2c:99:87:b3:a3:20:2e:05:84:f1:
49:a4:c4:8b:8d:7a:4b:2f:14:27:24:2e:5a:39:8e:
55:fd:10:e3:e4:a2:59:75:29:41:96:a2:ba:17:3a:
5c:93:98:9d:bc:d7:25:68:bd:74:ed:8d:b3:04:62:
c6:14:3c:0b:d1:a3:9e:48:57:ad:c4:9a:6d:1c:ad:
63:54:23:a1:34:c8:bf:51:6a:49:3e:62:ea:29:11:
4d:d7:ff:28:50:e7:7c:49:19:8a:b2:de:4d:63:0b:
ec:a8:67:9b:3d:bc:8d:30:a9:b9:bd:e9:b7:e4:e8:
06:2b:ec:a4:c1:f8:7c:5e:79:85:67:11:f4:ee:a5:
d8:43:40:22:77:fc:81:d0:6b:75:53:4f:3f:fb:94:
6e:6b:3c:9d:0d:5d:4f:31:4d:b9:af:62:16:27:04:
28:eb:c3:a9:a7:d0:f8:19:f6:87:05:fa:a7:19:bd:
c3:e2:4d:10:0c:0f:38:da:f3:ce:c5:d3:08:a1:73:
76:25:0d:44:ff:0a:f2:30:66:e4:d3:10:c8:82:66:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:8D:32:A0:B7:D3:92:56:71:10:C7:DA:28:B0:EA:B3:97:2B:3B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205422.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ced::/48
Signature Algorithm: sha256WithRSAEncryption
74:77:e9:28:f3:0d:a8:58:aa:d9:53:04:d0:f9:39:1b:a9:6a:
b5:48:99:12:e5:c9:36:77:18:01:60:74:04:87:10:1e:42:d8:
80:b6:12:5d:26:b2:41:1a:c4:0b:22:e1:60:81:9b:26:5b:09:
e8:7b:e4:f7:12:87:8e:cd:98:6f:6c:49:ee:8e:a3:3d:47:56:
99:7d:8c:63:bf:35:e1:2e:e9:69:51:cd:fe:2e:0e:a5:29:75:
ba:56:90:96:1b:61:cb:b3:06:a1:94:8c:19:f0:6c:88:e3:c9:
9a:e5:32:52:04:5e:d8:37:31:0a:8f:64:3f:27:aa:58:77:af:
42:66:b2:66:33:a3:ee:6c:10:bf:68:d1:c6:4b:53:1f:f1:50:
ee:1b:9f:0a:06:c9:cb:39:47:fa:fb:89:34:96:21:e5:03:da:
91:53:b5:63:50:c1:df:6c:99:8c:b9:82:60:d6:f8:b7:4d:88:
ec:3f:b7:6d:94:bc:82:e7:63:13:3e:36:1f:0a:65:90:39:89:
63:24:a8:b2:54:5a:69:48:80:eb:8d:04:c4:1c:0b:a7:be:9a:
84:37:0c:80:18:e4:c8:d4:18:be:38:65:3f:9e:8b:0a:66:d9:
d4:71:c5:c2:37:bf:b0:c8:63:14:60:a0:e1:fc:54:f9:7d:ec:
c1:16:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:43 2026 by rpki-client