Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205648.roa
File: AS205648.roa (raw, json)
Hash identifier: QGilp+LCejCrV2DY819a2G+nvquiBcglJU6oUGFRc9U=
Subject key identifier: 0E:4C:2E:5A:3B:75:2B:2E:11:0B:C0:36:9C:8F:C8:FB:46:37:DE:D7
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2F5C84362C275E0571ED2BB2F0786382D02CC6E4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205648.roa
Signing time: Sun 09 Aug 2026 07:00:18 +0000
ROA not before: Sun 09 Aug 2026 06:55:18 +0000
ROA not after: Sun 08 Aug 2027 07:00:18 +0000
asID: 205648
IP address blocks: 2a14:7581:3c00::/40 maxlen: 48
2a14:7583:f900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5c:84:36:2c:27:5e:05:71:ed:2b:b2:f0:78:63:82:d0:2c:c6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 9 06:55:18 2026 GMT
Not After : Aug 8 07:00:18 2027 GMT
Subject: CN=0E4C2E5A3B752B2E110BC0369C8FC8FB4637DED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:ad:61:bc:07:60:d9:1d:50:73:50:f0:d1:
01:f1:e4:d0:5c:d5:2f:a7:04:6e:2f:89:e3:36:8d:
39:14:8a:6d:f8:4a:69:71:89:ce:18:87:b8:57:6f:
9a:2f:20:63:db:97:b4:4a:5b:eb:94:93:dc:48:4c:
22:08:00:84:08:43:45:1f:3d:91:fa:4d:2d:e2:c6:
ee:79:d9:f6:3a:38:f1:d2:11:33:c6:b3:4f:c9:92:
be:94:a2:e7:5c:62:73:70:01:7d:5d:b0:ee:dd:22:
9e:80:7a:34:1c:09:7b:c3:fb:2b:66:e1:c4:1c:41:
ac:62:05:b3:7d:50:64:a5:d1:0f:e6:ae:03:c5:72:
3a:4b:ba:7c:89:aa:fa:9d:95:9e:65:b8:61:b4:92:
7a:4d:99:cc:21:b7:a0:b2:05:91:e6:73:7a:ee:bd:
d1:f0:a2:7a:78:21:4c:eb:1c:01:88:19:ef:d8:46:
b4:db:04:e2:7a:5c:d5:5b:1b:51:37:81:41:0b:0d:
dd:9c:3e:bc:10:60:03:13:79:79:c3:3a:3a:32:05:
48:cf:8f:f1:36:e0:bf:b1:df:53:0d:b5:ca:98:1f:
ea:1e:27:2e:c4:e7:bc:4f:ca:18:15:18:42:27:cc:
aa:f5:11:26:1d:c5:1f:52:76:d1:3a:84:f5:17:ab:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4C:2E:5A:3B:75:2B:2E:11:0B:C0:36:9C:8F:C8:FB:46:37:DE:D7
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3c00::/40
2a14:7583:f900::/40
Signature Algorithm: sha256WithRSAEncryption
63:3b:ac:69:04:6a:0b:3e:43:0e:fb:24:c2:2e:2a:58:5e:92:
ef:62:78:83:0f:46:f8:38:7f:1e:70:47:b2:3d:98:e1:26:4b:
ec:f0:d7:d0:da:ae:ae:27:eb:fb:c9:bc:7f:be:f3:c2:6e:a0:
0c:2d:ce:35:c3:d1:87:2e:7b:aa:5f:53:3a:d5:0a:ba:3b:56:
2a:c3:42:43:18:fc:16:c5:3e:67:83:5f:fc:a6:63:1b:1c:4e:
fb:5b:20:95:1a:67:84:57:36:36:4c:78:bd:ac:ba:e0:e1:cb:
a7:51:5b:6d:e4:ff:98:c3:42:fb:36:92:bf:c7:f7:3a:32:d7:
1b:ec:69:60:85:44:43:88:27:f1:72:87:e6:7c:93:ff:26:e2:
b6:2b:8e:99:56:13:1a:eb:a3:b8:2b:6f:71:8a:55:b3:1d:78:
a0:bc:ee:c3:99:f6:66:8d:a1:d3:3b:c6:52:7c:aa:51:bc:65:
7d:05:45:23:d8:48:6c:21:95:a2:05:bf:a6:44:fb:58:ca:c7:
be:0f:1b:94:3b:82:6a:6e:3e:75:da:7b:38:e2:9b:6c:db:c9:
64:01:4c:64:a6:48:19:8b:18:a2:64:ea:b5:fd:c5:4a:1c:39:
07:d9:b5:da:cf:bc:1e:9e:36:8c:46:aa:85:97:a9:f3:f4:4a:
ee:e1:10:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:28 2026 by rpki-client