Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205941.roa
File: AS205941.roa (raw, json)
Hash identifier: 2OGYu0Bj4u0Y4asFLcee7OTihg0V1IG5g7k6zogLor4=
Subject key identifier: 78:31:7B:4A:38:AB:74:27:54:18:F6:92:02:D8:41:27:43:DE:F8:DE
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 72CC727EAAA9C20F08D249257E7421DE773051F0
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205941.roa
Signing time: Tue 23 Jun 2026 11:03:09 +0000
ROA not before: Tue 23 Jun 2026 10:58:09 +0000
ROA not after: Tue 22 Jun 2027 11:03:09 +0000
asID: 205941
IP address blocks: 2a14:7580:ff9e::/48 maxlen: 48
2a14:7580:ff9f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:cc:72:7e:aa:a9:c2:0f:08:d2:49:25:7e:74:21:de:77:30:51:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 23 10:58:09 2026 GMT
Not After : Jun 22 11:03:09 2027 GMT
Subject: CN=78317B4A38AB74275418F69202D8412743DEF8DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:55:aa:54:be:eb:97:71:36:82:1d:6a:e8:
ec:df:c9:ee:40:f0:3c:0a:ec:20:47:6e:11:ea:40:
56:b1:ac:0a:8d:a6:0d:90:70:94:fc:c8:3a:12:68:
8d:b8:5c:39:46:ed:08:df:28:c9:d6:19:60:fc:77:
d2:32:35:45:1d:b2:09:07:2b:2d:db:7c:cf:75:03:
0e:5f:ec:ed:d3:ec:da:d2:21:c0:c4:ae:01:20:ff:
b0:c2:2f:c7:77:ac:a8:9a:9d:cb:b2:ed:59:6e:bb:
ef:61:d9:6e:9f:b6:be:4e:06:80:34:36:8a:e5:55:
82:bd:b6:ed:dc:ed:af:d4:14:62:d9:ec:03:78:2a:
b8:a1:1d:07:b6:8d:30:fe:10:04:83:ba:cb:21:1b:
77:b7:19:b9:eb:fc:dc:ef:e1:f7:fa:dc:21:e6:2d:
40:d7:cf:07:ef:e7:1c:40:a6:98:e2:72:fe:57:d0:
a3:94:a7:e1:5d:ce:64:b2:d0:f0:2f:ba:0c:c0:88:
cd:e5:13:68:bc:f7:1b:f2:47:ef:33:3d:5f:3e:06:
a4:87:c6:48:de:ee:6d:90:b3:0e:82:24:c1:ea:4f:
52:27:41:aa:a8:c0:a2:d9:7e:48:92:4c:f0:8e:d2:
4f:13:4c:11:80:92:a6:58:e0:41:9e:cf:4c:10:0c:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:7B:4A:38:AB:74:27:54:18:F6:92:02:D8:41:27:43:DE:F8:DE
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff9e::/47
Signature Algorithm: sha256WithRSAEncryption
33:e6:90:45:67:d9:4f:78:1a:20:7a:77:db:84:27:f6:03:1e:
89:4d:a9:c5:4a:15:1d:c4:a4:ec:21:20:f5:41:2e:58:29:4d:
08:d4:07:6d:e0:95:a6:ab:9a:4a:75:38:ee:0a:20:ac:35:91:
e6:e9:4a:01:01:2c:d6:d5:52:33:0d:87:56:f0:95:fa:42:e5:
7c:21:c8:1d:f2:cf:19:27:84:b5:ce:2a:49:89:1b:90:d8:66:
b0:91:ab:57:64:35:be:06:0e:5c:28:fd:56:59:55:43:2a:1f:
b6:f4:5b:fc:7b:a9:af:9c:e6:14:13:d4:6e:01:2a:84:43:a0:
ac:7a:2e:7b:f9:b9:32:a4:1d:c0:38:45:c5:49:24:6d:ba:fe:
03:43:b6:71:ce:35:8b:1e:31:a7:fa:0b:0d:d7:b0:87:af:48:
5b:07:6e:20:f2:42:35:69:68:38:4c:9d:3a:00:fe:95:7d:a9:
b1:95:88:c0:e5:b8:5f:64:ee:ed:f1:ab:9d:b9:7c:cd:cd:f3:
e6:42:38:bc:90:4a:19:4c:8d:62:59:64:31:8c:db:af:00:0b:
44:5b:f8:7a:69:30:47:98:ca:6e:c3:f7:b8:86:b9:f7:e9:a6:
77:35:e2:71:83:f1:e9:11:31:04:2f:df:1f:33:a8:b9:26:7c:
68:06:a9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:29:47 2026 by rpki-client