Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204464.roa
File: AS204464.roa (raw, json)
Hash identifier: hUgRlTGnAAucaNGfo4hWYU6zjYKnhQcWIdNGbe8t+Lo=
Subject key identifier: 65:75:9B:80:64:6B:0D:D6:FC:46:17:A7:F4:BD:31:7B:48:D6:B3:15
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 58E0B4AEA1BF638C32C6E07D38D42940945E2899
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204464.roa
Signing time: Fri 31 Jul 2026 20:50:02 +0000
ROA not before: Fri 31 Jul 2026 20:45:02 +0000
ROA not after: Fri 30 Jul 2027 20:50:02 +0000
asID: 204464
IP address blocks: 2a14:7580:4000::/36 maxlen: 48
2a14:7581:5000::/40 maxlen: 40
2a14:7581:5100::/40 maxlen: 40
2a14:7581:5200::/40 maxlen: 40
2a14:7581:5300::/40 maxlen: 40
2a14:7581:5400::/40 maxlen: 40
2a14:7581:5500::/40 maxlen: 40
2a14:7581:5600::/40 maxlen: 40
2a14:7581:5700::/40 maxlen: 40
2a14:7583:e800::/40 maxlen: 40
2a14:7583:ef20::/44 maxlen: 44
2a14:7583:ef70::/44 maxlen: 44
2a14:7584:b000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e0:b4:ae:a1:bf:63:8c:32:c6:e0:7d:38:d4:29:40:94:5e:28:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 31 20:45:02 2026 GMT
Not After : Jul 30 20:50:02 2027 GMT
Subject: CN=65759B80646B0DD6FC4617A7F4BD317B48D6B315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:95:4a:42:6f:1a:ca:bc:ad:74:17:79:f5:
ba:d9:40:15:27:f7:1f:af:8d:ee:25:5e:e8:3e:ba:
6f:53:2e:cc:0e:70:59:3f:7d:51:99:af:bf:12:1f:
f3:0b:a0:97:32:be:14:a6:70:a9:f3:74:01:0c:77:
bd:2c:15:bb:91:68:8d:25:eb:8c:cb:ff:55:42:a9:
02:e4:0d:1b:b7:d6:4e:c8:58:86:71:20:bb:71:e5:
32:c4:d2:6e:b5:e0:9c:74:08:86:15:3b:48:6c:52:
e1:d6:0f:36:36:66:7c:80:1c:65:79:74:02:2f:9a:
77:20:2c:2e:b6:14:6a:af:a6:e7:41:91:da:8b:dd:
d5:0e:b3:cf:7a:44:33:02:61:9b:2b:0b:39:f6:21:
92:89:8f:4f:28:06:71:1c:0f:fa:2d:70:10:6a:60:
a6:7e:8c:61:aa:2c:97:27:c7:2a:7e:c0:ec:72:0d:
02:72:56:f9:09:44:06:1b:5f:8c:f0:de:41:b4:11:
b2:1c:24:40:7a:3d:d6:71:ce:49:82:cb:be:77:f4:
74:e8:e1:58:1e:17:1e:70:53:9b:da:a0:09:6e:6d:
e2:1d:42:72:47:9f:1a:f4:62:4d:5b:7d:dd:a3:9e:
c2:43:d5:fd:e7:90:c1:eb:a4:ea:9a:7a:ef:63:7e:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:75:9B:80:64:6B:0D:D6:FC:46:17:A7:F4:BD:31:7B:48:D6:B3:15
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:4000::/36
2a14:7581:5000::/37
2a14:7583:e800::/40
2a14:7583:ef20::/44
2a14:7583:ef70::/44
2a14:7584:b000::/36
Signature Algorithm: sha256WithRSAEncryption
86:db:e1:7b:ef:df:37:e0:ae:57:6a:4b:c6:bb:3b:03:10:c2:
57:a0:78:4a:89:3d:18:ee:14:87:29:4a:99:10:1c:65:7a:89:
89:b5:d7:25:61:e5:35:66:21:9e:80:f7:46:22:7b:e9:f5:ef:
52:40:89:60:8c:80:ea:de:2f:36:5e:ae:a7:2d:aa:85:f5:bf:
33:16:11:05:10:77:a2:a5:a7:68:f8:be:fd:d0:88:05:1f:3a:
ea:1d:05:11:4b:6b:b5:9c:65:fa:ae:b8:b5:7f:3a:c3:15:ef:
24:2a:c6:a5:69:36:2c:c3:e3:b7:05:e0:f8:12:16:74:a0:ad:
5f:8f:a5:fd:e1:62:31:f8:ce:0f:18:23:86:8f:be:3d:a6:de:
11:85:f8:78:be:eb:88:a5:00:a2:b7:ef:7e:4e:5d:1f:db:5a:
5d:42:be:9e:1c:63:33:8f:cb:dc:05:4e:04:2b:be:7e:37:5e:
78:2a:10:c4:1c:98:14:20:d9:b5:05:77:48:26:6b:19:45:e1:
7a:80:75:c9:b6:d4:ee:36:4a:c9:44:53:9c:05:ae:30:95:2b:
10:25:f4:c2:bd:23:e2:dd:81:d1:94:ef:98:7b:de:c7:db:5e:
a8:38:80:52:16:97:e0:e8:d2:53:08:5f:d6:d2:aa:8e:f1:a3:
15:e2:17:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:42:15 2026 by rpki-client