Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205779.roa
File: AS205779.roa (raw, json)
Hash identifier: 7gr4kr/NQwJXPdxWveRcBN+Sbl8Jc2Vs2e3945jjGQ8=
Subject key identifier: 21:F9:90:53:DE:6D:13:11:C7:08:6D:DA:64:1D:6A:03:5F:77:3B:4F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 37EB9CB56425169A43A7A1105DD63C7519C87859
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205779.roa
Signing time: Mon 20 Jul 2026 21:08:52 +0000
ROA not before: Mon 20 Jul 2026 21:03:52 +0000
ROA not after: Mon 19 Jul 2027 21:08:52 +0000
asID: 205779
IP address blocks: 2a0f:85c1:ce1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:eb:9c:b5:64:25:16:9a:43:a7:a1:10:5d:d6:3c:75:19:c8:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:52 2026 GMT
Not After : Jul 19 21:08:52 2027 GMT
Subject: CN=21F99053DE6D1311C7086DDA641D6A035F773B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:3e:00:51:b9:f4:89:27:3e:d2:b9:d7:23:
6d:bb:1e:10:b2:5c:a2:39:9a:aa:d2:8f:40:f6:32:
a2:d0:d3:af:e3:3b:c2:ba:17:b0:4f:d7:19:85:06:
c5:f8:88:d2:32:71:23:79:cd:d6:5e:40:01:b9:62:
4e:78:b4:08:f2:7e:1f:d6:fa:cf:84:95:b5:91:1d:
60:83:5e:bf:c6:cc:58:04:17:e2:f9:37:20:3e:1c:
79:d9:35:18:3f:4c:c1:93:25:52:3d:ef:dd:6f:f2:
85:a5:54:6e:a6:fa:c5:7c:fd:c8:81:b5:d7:24:d2:
84:55:c1:1b:ae:90:26:8a:17:42:c4:53:bc:8a:54:
8d:38:d5:61:a9:d7:32:72:a4:85:40:b4:51:01:dc:
61:c8:b5:f1:4d:59:fb:0c:3e:7c:e5:cb:82:18:fd:
2b:2e:19:ad:c8:ea:df:c2:29:c5:b0:50:f5:da:c2:
fd:29:5d:8f:ef:f5:90:9e:04:59:e6:19:24:a4:23:
c2:04:39:57:94:41:b4:61:95:d7:76:79:f7:a8:6e:
f9:c8:0e:d9:ed:87:24:1e:71:02:01:09:d8:57:77:
4c:37:7c:12:70:a5:81:b5:5b:96:9f:05:8a:97:df:
6c:d3:a2:f9:5c:64:56:a7:4c:92:8d:2c:41:a3:a8:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:90:53:DE:6D:13:11:C7:08:6D:DA:64:1D:6A:03:5F:77:3B:4F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205779.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ce1::/48
Signature Algorithm: sha256WithRSAEncryption
44:6b:0f:cf:84:a1:5d:ec:13:d3:96:ef:e9:fd:eb:6f:bb:4d:
15:75:7b:49:96:0e:e5:19:eb:84:da:93:e2:1c:e1:08:f0:16:
d3:84:7f:6a:1f:af:4b:d4:82:e5:c2:b0:7d:23:24:a4:97:dd:
24:7b:e4:c7:f4:64:b4:0c:d6:18:58:29:ed:35:41:92:44:c0:
54:46:c5:04:5d:af:d1:74:11:81:89:c4:00:c5:f2:d4:3d:58:
7f:75:f4:8a:7e:5f:79:b1:3d:56:5e:a8:f3:b0:cf:f7:2f:76:
eb:40:59:d0:33:3d:bc:d4:de:95:c7:c5:2a:13:b1:61:aa:3e:
ce:58:91:13:2b:86:1d:c4:98:dd:1f:5b:98:08:b3:1a:ed:3d:
f3:80:18:18:60:22:85:7e:53:32:a4:47:fd:74:f4:5e:90:20:
25:fa:eb:08:a7:ca:b8:c1:d4:2b:9f:d2:7a:73:5e:96:d0:93:
29:45:9d:14:cf:66:f1:f3:ad:e1:fb:14:89:9e:f5:a5:c5:0e:
fe:91:e6:41:9a:0d:50:64:3d:31:87:c2:66:2b:d1:6d:61:ca:
9d:df:b7:9e:c8:35:f1:30:7c:0c:74:71:2a:6c:b2:bd:1f:73:
ab:fe:47:99:81:29:23:53:01:ff:04:c1:d3:78:82:79:1c:1d:
72:ec:69:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:09 2026 by rpki-client