Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204353.roa
File: AS204353.roa (raw, json)
Hash identifier: 1f87ja6dnjzQss3ryE074VOXvonq28uFSULdFkJ7Cnk=
Subject key identifier: D0:63:03:FF:8D:BE:B9:54:93:83:BE:06:E7:EE:64:39:1A:24:FF:8C
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4CAA82227DCD32FD9BCF045A1E5E7F511F9B14CB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204353.roa
Signing time: Mon 28 Sep 2026 14:49:31 +0000
ROA not before: Mon 28 Sep 2026 14:44:31 +0000
ROA not after: Mon 27 Sep 2027 14:49:31 +0000
asID: 204353
IP address blocks: 2a14:7580:fffb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:aa:82:22:7d:cd:32:fd:9b:cf:04:5a:1e:5e:7f:51:1f:9b:14:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 28 14:44:31 2026 GMT
Not After : Sep 27 14:49:31 2027 GMT
Subject: CN=D06303FF8DBEB9549383BE06E7EE64391A24FF8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:d6:19:a9:b6:16:fb:68:e6:92:7a:4f:96:
87:dc:5a:aa:27:77:03:62:6d:9b:87:94:31:5e:c0:
cd:c3:97:7f:d3:40:05:95:5c:ca:1d:a6:6b:c2:d5:
6d:fc:15:e8:e1:c2:4a:9c:f1:3b:84:97:dd:d6:b3:
38:56:02:8f:3b:12:71:ec:4b:23:69:da:b8:3e:08:
e9:c3:60:d6:4b:21:7c:d4:9d:f9:e9:6b:d7:7c:99:
56:38:9d:b4:41:d9:22:27:5c:75:84:f6:de:1d:e7:
b4:76:b7:cb:4c:4d:26:03:fd:cf:63:e3:89:69:6d:
e9:f6:d6:b9:ff:db:6b:0a:8f:af:a8:4b:9e:9a:17:
da:62:68:dc:d8:c5:a7:a1:c9:36:b5:20:ec:83:2e:
8e:d6:61:64:44:17:27:9e:f0:44:55:ba:5d:79:27:
ed:d1:16:c1:1d:bb:5a:25:40:a5:f6:f3:c4:9b:f8:
01:0d:d0:61:ba:8a:44:c6:b1:56:60:80:db:a9:8e:
03:7d:0e:9b:d3:75:61:b1:a6:9b:fa:74:c5:ba:2e:
cf:bf:a9:bb:40:ef:21:c9:25:48:0c:a3:c5:b6:8a:
c4:07:f4:40:65:90:28:c6:cc:0e:e8:66:98:a0:a1:
c0:1c:e6:e2:84:33:a9:99:54:1d:ee:6c:2d:a5:3d:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:63:03:FF:8D:BE:B9:54:93:83:BE:06:E7:EE:64:39:1A:24:FF:8C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204353.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fffb::/48
Signature Algorithm: sha256WithRSAEncryption
6d:af:3e:1d:ad:39:84:ab:38:69:4a:b9:b3:07:ae:87:3e:46:
88:99:1f:9a:15:72:7d:c4:f0:5e:d6:77:2b:41:04:84:d7:fa:
92:67:db:2a:38:bb:a2:6c:fb:25:84:de:9f:76:2d:74:2e:d9:
bc:4b:af:27:a2:71:2e:37:d0:e3:fd:24:db:20:f9:f5:be:f8:
63:e0:fc:23:59:21:b0:3f:47:f8:f1:fe:f9:71:77:c9:8b:32:
97:b8:8c:ae:03:6a:dc:34:3c:f6:99:94:0d:bb:67:8a:45:bd:
90:9b:3f:5b:88:63:5d:9e:a9:c0:25:29:90:64:1d:fe:bf:d9:
c7:7b:a1:f9:24:cf:dd:d4:fb:52:e1:5a:d3:47:d0:fd:24:e3:
77:e2:5a:a5:28:73:6d:39:f5:6d:d1:60:6d:f8:6e:24:05:55:
85:0d:24:0f:cb:93:8e:e5:c7:39:00:38:e7:68:bb:64:26:86:
35:68:f0:17:da:a1:37:5f:10:d3:0e:82:f1:26:7a:d9:2a:b2:
f5:65:93:90:18:23:99:63:fb:e7:07:8e:ad:90:7e:28:5e:07:
44:a9:9a:01:ba:fb:ce:6a:da:62:7d:92:4a:45:2f:b1:b0:bb:
44:90:ee:ff:05:99:ca:65:9c:35:f9:c3:48:27:bf:f3:63:31:
b4:ee:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 00:39:07 2026 by rpki-client