Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205475.roa
File: AS205475.roa (raw, json)
Hash identifier: onNVNAjGjDvKdJqDY39sFofyWJKSmOXbw+nR0isgWkw=
Subject key identifier: 54:D2:E2:2B:96:24:35:44:5D:FB:65:8D:43:CE:14:04:0F:AA:B0:D5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5637A673BBAA98DB986AA346CCEE70D1BFF04EB6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205475.roa
Signing time: Mon 20 Jul 2026 21:08:52 +0000
ROA not before: Mon 20 Jul 2026 21:03:52 +0000
ROA not after: Mon 19 Jul 2027 21:08:52 +0000
asID: 205475
IP address blocks: 2a0f:85c1:ce6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:37:a6:73:bb:aa:98:db:98:6a:a3:46:cc:ee:70:d1:bf:f0:4e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:52 2026 GMT
Not After : Jul 19 21:08:52 2027 GMT
Subject: CN=54D2E22B962435445DFB658D43CE14040FAAB0D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:b0:2e:b4:8c:2f:f5:5a:9b:01:10:3d:56:
90:bd:e2:16:64:42:ba:e0:38:b5:bd:44:dd:7d:81:
fb:90:68:ee:d8:22:a0:6d:e0:47:a0:a3:91:e7:1b:
20:ca:c9:de:90:bc:8c:45:64:2a:f8:6e:15:4d:d2:
26:cd:20:f2:95:a6:f8:b6:1a:88:81:e8:08:9d:12:
5f:d2:02:9e:20:43:9f:37:73:5e:33:07:fc:5c:f4:
7e:4b:ff:67:d5:3b:43:7b:1b:07:50:88:ea:eb:e9:
4c:8c:2f:47:de:37:6b:e2:43:e2:14:a6:b9:40:d9:
28:0a:11:ea:62:10:59:45:e5:56:29:62:45:e1:c4:
4b:4c:d9:f0:0e:14:bd:83:64:d7:1d:14:7f:bd:3b:
d4:ce:9e:3b:9c:9c:d0:4e:8b:0d:12:41:64:81:eb:
0e:26:75:ce:69:e9:c6:ac:3b:88:20:92:d7:f1:61:
98:f8:66:d2:fe:9c:2f:0c:60:50:8d:68:24:b5:d0:
23:a4:69:fc:c0:cd:d4:7d:3d:a3:87:9e:29:d8:fe:
46:a1:37:38:6c:0b:27:cc:1a:62:3e:da:d7:9b:4f:
3e:9e:39:f6:af:14:f8:48:65:61:fc:99:dc:61:e4:
f5:e7:3f:3d:06:4f:ac:35:a3:66:9e:6a:9f:32:84:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D2:E2:2B:96:24:35:44:5D:FB:65:8D:43:CE:14:04:0F:AA:B0:D5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ce6::/48
Signature Algorithm: sha256WithRSAEncryption
4b:cd:76:29:26:4c:1d:56:a8:4c:13:19:f3:b0:78:6a:3d:64:
3c:f5:88:dc:19:54:35:8f:4e:41:1e:27:de:29:e8:a9:40:00:
d0:bd:92:65:08:8d:2f:11:95:7e:f6:eb:57:d2:88:a7:85:95:
cd:b6:ee:e9:39:51:7b:72:ca:31:68:e3:b4:1b:77:ff:fd:6d:
68:7a:69:2d:69:3e:fa:4b:53:8c:72:e3:aa:e0:d0:b2:d6:ee:
01:56:89:b8:69:7c:cd:1a:03:07:0f:32:fa:f8:cf:31:3b:86:
22:27:59:eb:81:57:a6:f0:18:84:39:42:f6:94:bb:5b:f7:a4:
36:71:2c:f4:5c:47:b2:f4:ff:36:03:74:dc:b5:63:f2:18:4a:
48:c2:61:45:cc:c1:2e:6e:6e:70:20:45:5a:a0:b6:74:92:b5:
88:d6:59:06:bc:2b:2a:a9:c1:6b:7f:fa:0f:a7:ab:37:d5:50:
0e:8d:6b:dd:1c:95:e4:8e:34:cf:a0:00:a8:90:8f:90:d5:91:
58:e5:b7:ef:17:d9:e3:3d:4e:f7:e0:5e:77:48:3c:50:98:4b:
95:9b:0d:36:aa:14:27:c0:9b:8e:b5:61:bd:06:4b:91:1e:4e:
64:be:b2:67:8c:48:d8:e9:fd:32:bc:a2:c6:b2:8e:33:6a:fd:
df:e6:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:16 2026 by rpki-client