Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205649.roa
File: AS205649.roa (raw, json)
Hash identifier: 6P6v5Oce9OqEFGhkiLXk24j5flz9W5Qu7mflv8GRhqA=
Subject key identifier: 2C:C7:60:89:C3:89:62:AA:43:79:14:DC:7E:BA:43:6D:10:DF:2D:B9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1407227AE2E04465BB33865BB12F9A2F8DFAE03A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205649.roa
Signing time: Sat 15 Aug 2026 03:09:02 +0000
ROA not before: Sat 15 Aug 2026 03:04:02 +0000
ROA not after: Sat 14 Aug 2027 03:09:02 +0000
asID: 205649
IP address blocks: 2a0f:85c1:ce3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:07:22:7a:e2:e0:44:65:bb:33:86:5b:b1:2f:9a:2f:8d:fa:e0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 15 03:04:02 2026 GMT
Not After : Aug 14 03:09:02 2027 GMT
Subject: CN=2CC76089C38962AA437914DC7EBA436D10DF2DB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:1a:8a:71:94:57:a2:bf:4f:76:56:a7:4f:
4f:54:2b:92:c8:99:6b:e7:e9:6e:5a:8b:df:00:6b:
41:55:5c:bf:4d:9f:a2:51:b0:e9:8a:ac:70:29:80:
90:ac:d0:97:4b:b7:16:c9:a7:bf:4f:e3:c2:e2:c7:
db:3e:51:78:e7:a4:ee:7b:0e:5a:12:6b:7a:89:59:
90:d3:cb:db:fa:39:20:c5:ed:30:07:96:25:c5:75:
8a:80:5b:07:de:26:4c:9d:3c:f7:b4:2d:30:64:c4:
62:97:a1:b5:be:65:68:d9:27:e4:c8:4e:32:b1:ea:
08:b7:0a:92:6f:67:2c:12:b8:91:31:e5:89:68:83:
c3:a3:be:f4:15:8d:dd:84:81:bb:13:d7:75:a6:44:
d5:17:54:ee:e3:f9:fd:75:46:d8:0c:b2:f2:88:40:
ae:f2:c7:7b:c0:94:08:fb:7c:11:3a:04:bb:cf:72:
39:c7:1d:b5:ae:5f:27:4e:aa:c2:65:70:c3:20:db:
15:b0:e9:6c:b4:67:5c:bf:4f:43:f8:17:99:29:bc:
83:14:c4:82:c1:04:3b:3b:de:b8:a8:d9:26:78:14:
04:ab:6b:58:82:05:7d:55:81:d4:29:83:d9:43:5d:
e7:14:3f:3c:8d:81:08:85:eb:d3:50:d0:a3:24:0a:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C7:60:89:C3:89:62:AA:43:79:14:DC:7E:BA:43:6D:10:DF:2D:B9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205649.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ce3::/48
Signature Algorithm: sha256WithRSAEncryption
03:f3:1e:a8:24:ac:cf:aa:a0:3c:42:da:8a:5e:32:3e:9d:83:
aa:ee:87:5f:4a:aa:04:7d:19:81:15:09:ca:4a:99:71:2d:dd:
94:92:1a:f7:18:85:fe:7b:16:57:36:fa:39:f0:be:c9:f9:d8:
0f:dc:41:d3:1b:d1:42:8f:6d:3f:75:39:bd:bf:b1:fc:42:0f:
fe:bb:bc:40:b9:75:8b:ad:3e:1d:19:ee:b9:84:1c:d8:19:98:
16:45:32:c3:71:ad:20:4e:43:4a:f7:04:ed:70:48:2d:33:36:
4c:6c:ef:68:f7:c8:dc:f2:a3:f9:f8:34:f3:9e:ba:4f:a4:ba:
7f:18:67:5a:ca:7c:5d:7b:e7:a5:40:8d:c7:71:20:d3:99:89:
c0:d2:50:59:09:8c:f0:8d:c9:d3:cd:66:82:fc:92:74:1b:50:
01:1b:05:fc:a9:83:89:7b:67:0c:9d:73:79:a6:f6:ec:7c:f0:
93:fc:57:11:d4:a2:25:2d:d2:8b:aa:2f:d0:f1:9d:ee:70:a3:
9a:83:ed:e1:fb:da:83:00:8a:1e:63:f6:da:a8:b2:4d:e8:fa:
91:56:22:fa:07:58:35:33:27:d3:5e:b7:80:fc:1d:39:d0:e0:
22:46:6e:3e:63:a3:02:e7:5e:14:6b:a3:a4:84:1c:07:67:6f:
15:48:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:11:06 2026 by rpki-client