Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204603.roa
File: AS204603.roa (raw, json)
Hash identifier: io7UWxZRNcy26BifFRkgRPYe7HoiGa9s2rvmwzvgqBE=
Subject key identifier: D4:48:2E:05:B5:54:F4:9F:11:86:C7:D4:D5:A9:59:3D:74:8F:F8:1D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 07FDEE9473E739A19954CDFA8B1BC67EB9A967EE
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204603.roa
Signing time: Wed 23 Sep 2026 14:49:31 +0000
ROA not before: Wed 23 Sep 2026 14:44:31 +0000
ROA not after: Wed 22 Sep 2027 14:49:31 +0000
asID: 204603
IP address blocks: 2a14:7580:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:fd:ee:94:73:e7:39:a1:99:54:cd:fa:8b:1b:c6:7e:b9:a9:67:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 23 14:44:31 2026 GMT
Not After : Sep 22 14:49:31 2027 GMT
Subject: CN=D4482E05B554F49F1186C7D4D5A9593D748FF81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:40:7f:79:05:91:73:ec:4a:06:7d:9c:43:
89:09:b4:f9:b1:03:6f:0f:8d:74:76:64:d3:ff:62:
07:f8:82:e4:56:89:73:52:aa:0c:f0:51:b2:e3:4d:
25:bf:d3:11:66:ea:00:df:7c:89:7e:4a:11:94:d9:
3c:21:b5:86:38:d1:98:d0:21:2b:ff:99:1c:79:96:
14:69:68:b1:41:42:ca:f0:06:47:99:af:71:4a:5c:
c3:9e:65:16:9d:d7:d4:b9:a3:d8:56:de:97:e8:b4:
ef:ab:3e:af:00:d2:e4:75:b3:56:c1:00:74:a1:97:
a4:85:aa:01:ab:d2:92:62:86:fb:59:cb:5e:04:0f:
e1:6c:1f:5b:e2:4d:8e:b8:0b:c7:8e:62:7c:66:b2:
f2:38:2a:85:30:e5:46:0c:2f:7e:08:3a:c5:2c:9b:
69:c7:5b:c8:71:bd:26:49:ee:e3:40:e2:82:21:0c:
91:86:0d:d7:16:67:83:18:60:63:fb:dc:88:8e:4f:
71:66:6c:fe:48:7c:34:43:76:16:bb:8a:9a:a4:9a:
3f:a2:d1:7b:d0:70:69:60:d4:09:24:da:cc:c5:a6:
33:3d:8a:c3:18:64:85:53:94:ff:9c:ca:97:c8:ea:
6d:20:af:33:14:05:9b:06:5a:9b:bd:c7:83:f3:4e:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:48:2E:05:B5:54:F4:9F:11:86:C7:D4:D5:A9:59:3D:74:8F:F8:1D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204603.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
18:2b:f9:95:1d:6e:ce:2c:37:67:7e:86:f9:7f:84:0d:54:da:
10:81:2e:71:e5:5a:b8:00:5e:38:48:42:bb:64:8d:32:44:69:
eb:5a:fb:f1:6e:f0:4a:a1:a7:94:43:3d:57:0f:9a:24:90:14:
63:3c:40:99:cf:a2:d4:bc:e6:46:ec:c8:a6:a0:72:84:a7:13:
ca:78:d1:a1:30:d9:00:e1:c4:5d:dd:68:fc:a4:a6:70:52:8a:
e4:38:dd:00:8e:bd:f9:e3:cf:84:17:f5:de:0c:02:30:ea:35:
f1:77:1f:97:dc:2f:74:88:3a:6e:ad:5a:1a:d9:f1:12:c0:ac:
e7:6f:03:7a:21:95:c6:ef:7b:d6:cf:9f:78:69:90:6e:14:dc:
a6:54:a3:c4:61:25:c2:f6:8c:4f:fa:5b:9e:24:72:f5:6b:5c:
de:cd:ac:cf:10:46:f4:6b:47:71:b2:b8:12:79:af:3c:76:eb:
32:c0:80:f4:48:f5:ad:b2:cb:8c:83:c7:8f:2b:33:45:51:51:
ef:92:83:71:d5:e6:06:53:69:79:1a:8f:3a:38:17:4c:b1:7c:
af:0b:45:28:57:1a:8e:38:b7:1c:e0:bb:2d:73:30:20:13:90:
17:ce:12:ca:e7:65:f4:e8:93:c7:7d:9a:0e:22:0a:dd:9e:46:
8f:f0:74:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUB/3ulHPnOaGZVM36ixvGfrmpZ+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA5MjMxNDQ0MzFaFw0yNzA5MjIxNDQ5MzFaMDMxMTAvBgNV
BAMTKEQ0NDgyRTA1QjU1NEY0OUYxMTg2QzdENEQ1QTk1OTNENzQ4RkY4MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBWkB/eQWRc+xKBn2cQ4kJtPmx
A28PjXR2ZNP/Ygf4guRWiXNSqgzwUbLjTSW/0xFm6gDffIl+ShGU2TwhtYY40ZjQ
ISv/mRx5lhRpaLFBQsrwBkeZr3FKXMOeZRad19S5o9hW3pfotO+rPq8A0uR1s1bB
AHShl6SFqgGr0pJihvtZy14ED+FsH1viTY64C8eOYnxmsvI4KoUw5UYML34IOsUs
m2nHW8hxvSZJ7uNA4oIhDJGGDdcWZ4MYYGP73IiOT3FmbP5IfDRDdha7ipqkmj+i
0XvQcGlg1Akk2szFpjM9isMYZIVTlP+cypfI6m0grzMUBZsGWpu9x4PzTl5FAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU1EguBbVU9J8RhsfU1alZPXSP+B0wHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA0NjAzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
gP//MA0GCSqGSIb3DQEBCwUAA4IBAQAYK/mVHW7OLDdnfob5f4QNVNoQgS5x5Vq4
AF44SEK7ZI0yRGnrWvvxbvBKoaeUQz1XD5okkBRjPECZz6LUvOZG7MimoHKEpxPK
eNGhMNkA4cRd3Wj8pKZwUorkON0Ajr3548+EF/XeDAIw6jXxdx+X3C90iDpurVoa
2fESwKznbwN6IZXG73vWz594aZBuFNymVKPEYSXC9oxP+lueJHL1a1zezazPEEb0
a0dxsrgSea88dusywID0SPWtssuMg8ePKzNFUVHvkoNx1eYGU2l5Go86OBdMsXyv
C0UoVxqOOLcc4LstczAgE5AXzhLK52X06JPHfZoOIgrdnkaP8HR2
-----END CERTIFICATE-----
Generated at Wed Oct 21 00:39:00 2026 by rpki-client