Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205795.roa
File: AS205795.roa (raw, json)
Hash identifier: QAAxWuADcOFS5A+b0C/I4rKeRd5Qxuue1SRux4ydlSI=
Subject key identifier: CC:BD:33:23:7F:10:DD:AA:00:86:B3:BA:D3:94:DE:9F:36:C3:68:DB
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 184F204285BBC4BFAC83B48993A40396C4A7F29A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205795.roa
Signing time: Fri 10 Jul 2026 13:08:51 +0000
ROA not before: Fri 10 Jul 2026 13:03:51 +0000
ROA not after: Fri 09 Jul 2027 13:08:51 +0000
asID: 205795
IP address blocks: 2a0f:85c1:cdf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:4f:20:42:85:bb:c4:bf:ac:83:b4:89:93:a4:03:96:c4:a7:f2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 10 13:03:51 2026 GMT
Not After : Jul 9 13:08:51 2027 GMT
Subject: CN=CCBD33237F10DDAA0086B3BAD394DE9F36C368DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:fd:44:a3:74:dd:a2:86:c2:16:b6:b1:13:
70:ce:8c:80:7f:d6:03:df:d9:fc:22:1d:fb:8f:b9:
1d:8e:d8:96:d0:86:81:7a:97:97:92:0a:6f:ff:3b:
78:70:f1:ad:5e:2e:84:0c:d8:11:bd:f6:74:97:82:
8f:a7:f4:27:14:6d:a8:72:62:ad:48:7e:63:48:f3:
08:b8:a0:8b:bc:2e:b9:f2:e2:f3:84:28:1b:1f:bd:
f2:4e:15:fe:b3:d6:82:25:e6:49:56:84:f4:92:a8:
d7:24:63:13:d4:c9:19:b1:9e:51:7d:f3:ae:8a:df:
82:50:6b:ac:83:77:b7:ed:e9:0d:fe:e5:19:c7:e9:
35:fb:71:28:b8:a9:e6:f5:7b:8c:f2:83:3c:6b:14:
44:c7:91:41:10:dc:5d:19:3f:7e:c9:09:58:12:46:
55:46:19:28:95:5d:44:b3:0d:c6:00:8a:e5:2f:3f:
08:bd:32:9c:63:09:0f:4a:9c:f9:5a:ac:5a:05:61:
d6:9a:5e:6a:b8:d8:30:78:78:36:a3:89:16:86:94:
3f:e0:eb:ea:4c:1c:7a:95:3b:c4:a2:a0:7e:a7:21:
38:95:ce:1a:95:5b:cc:15:ae:c1:ca:7e:34:72:e7:
cf:8b:3c:85:7b:23:ac:6a:21:6c:7d:c9:f6:42:42:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BD:33:23:7F:10:DD:AA:00:86:B3:BA:D3:94:DE:9F:36:C3:68:DB
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205795.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cdf::/48
Signature Algorithm: sha256WithRSAEncryption
69:ba:b4:63:fe:a9:76:3c:0a:dd:b8:09:1c:67:50:91:6f:05:
b2:f8:96:ba:da:fd:81:07:cc:fa:9a:4e:9f:b0:47:a7:15:16:
5f:6d:11:70:0d:72:6e:65:5a:41:90:51:99:bb:00:20:74:ee:
9b:7b:57:a7:94:4b:e1:b3:99:b9:43:8c:a9:67:7c:78:82:c5:
7c:0e:fb:8a:14:12:66:93:8e:11:8a:7c:47:60:1f:ef:a9:a4:
5a:13:67:63:91:3e:4a:d1:5b:4f:d9:d7:ae:18:b5:2c:19:e5:
8e:65:e2:3a:fc:b3:d6:13:bb:80:8a:47:c5:0e:57:38:b1:9d:
02:5d:60:e4:0a:71:e4:b1:1c:5f:da:78:b9:bf:bc:0c:1e:d2:
32:11:47:5d:71:d2:c8:25:b7:c2:b0:47:bb:3a:8a:18:96:19:
a0:f6:63:cc:f0:ec:1e:c8:18:18:8c:3f:50:5e:66:20:79:49:
01:2c:a5:d0:f5:67:8d:a9:b7:0b:21:b2:3b:80:5c:6d:31:e5:
73:d7:56:da:ab:61:6a:96:c6:99:d6:c9:58:ef:a8:ba:af:66:
36:3c:3f:ca:f4:66:66:fe:63:57:9d:10:bf:7a:7b:d3:f7:62:
e8:60:23:c0:cc:45:55:10:8d:cf:ad:16:7d:0c:b0:19:56:7f:
f9:6f:4f:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUGE8gQoW7xL+sg7SJk6QDlsSn8powDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA3MTAxMzAzNTFaFw0yNzA3MDkxMzA4NTFaMDMxMTAvBgNV
BAMTKENDQkQzMzIzN0YxMEREQUEwMDg2QjNCQUQzOTRERTlGMzZDMzY4REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCknf1Eo3TdoobCFraxE3DOjIB/
1gPf2fwiHfuPuR2O2JbQhoF6l5eSCm//O3hw8a1eLoQM2BG99nSXgo+n9CcUbahy
Yq1IfmNI8wi4oIu8Lrny4vOEKBsfvfJOFf6z1oIl5klWhPSSqNckYxPUyRmxnlF9
866K34JQa6yDd7ft6Q3+5RnH6TX7cSi4qeb1e4zygzxrFETHkUEQ3F0ZP37JCVgS
RlVGGSiVXUSzDcYAiuUvPwi9MpxjCQ9KnPlarFoFYdaaXmq42DB4eDajiRaGlD/g
6+pMHHqVO8SioH6nITiVzhqVW8wVrsHKfjRy58+LPIV7I6xqIWx9yfZCQkszAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUzL0zI38Q3aoAhrO605TenzbDaNswHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA1Nzk1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQzfMA0GCSqGSIb3DQEBCwUAA4IBAQBpurRj/ql2PArduAkcZ1CRbwWy+Ja62v2B
B8z6mk6fsEenFRZfbRFwDXJuZVpBkFGZuwAgdO6be1enlEvhs5m5Q4ypZ3x4gsV8
DvuKFBJmk44RinxHYB/vqaRaE2djkT5K0VtP2deuGLUsGeWOZeI6/LPWE7uAikfF
Dlc4sZ0CXWDkCnHksRxf2ni5v7wMHtIyEUddcdLIJbfCsEe7OooYlhmg9mPM8Owe
yBgYjD9QXmYgeUkBLKXQ9WeNqbcLIbI7gFxtMeVz11baq2FqlsaZ1slY76i6r2Y2
PD/K9GZm/mNXnRC/envT92LoYCPAzEVVEI3PrRZ9DLAZVn/5b0/U
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:44 2026 by rpki-client