Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS205733.roa
File: AS205733.roa (raw, json)
Hash identifier: vnO0sNn3oAe4QC5QEKUUX0GNiDVAqAFBYGTNd6liIDs=
Subject key identifier: A1:21:79:0F:FD:AF:C4:4A:FE:64:A1:FD:40:EB:F6:29:3A:34:95:13
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 3CC4076EB3E1551D7EA590B587D02AC0F4FCB754
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS205733.roa
Signing time: Thu 28 Aug 2025 10:17:31 +0000
ROA not before: Thu 28 Aug 2025 10:12:31 +0000
ROA not after: Thu 27 Aug 2026 10:17:31 +0000
asID: 205733
IP address blocks: 31.40.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c4:07:6e:b3:e1:55:1d:7e:a5:90:b5:87:d0:2a:c0:f4:fc:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Aug 28 10:12:31 2025 GMT
Not After : Aug 27 10:17:31 2026 GMT
Subject: CN=A121790FFDAFC44AFE64A1FD40EBF6293A349513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:11:fd:bc:7f:70:a8:02:19:3b:9f:08:ee:c1:
56:0e:c1:1d:f4:f6:9b:eb:50:3f:cd:04:b8:a4:30:
c9:a8:27:28:75:ce:ca:d7:ab:56:71:9f:34:16:72:
58:bb:32:ca:6d:86:8d:67:9e:e4:bb:f8:8b:26:ac:
0b:a9:88:fd:ac:8f:0a:87:9a:e0:24:5d:5e:9c:60:
f1:43:6e:5a:65:2b:8a:ed:02:79:e6:26:d3:3b:93:
a1:20:d3:72:c4:00:03:67:5a:c2:cd:93:52:d4:a4:
6e:64:e6:d6:c3:32:43:9d:23:87:ae:80:a3:2b:34:
33:cd:8a:2e:72:ea:2b:81:89:a1:de:10:a4:2c:d4:
71:55:85:97:d7:c0:ef:ae:15:fd:08:66:2a:4e:0e:
ad:4c:87:fe:8c:a4:8c:a6:b9:37:2c:14:ce:1b:79:
ce:a0:83:dd:ae:d5:ee:2b:83:80:6c:c2:8f:52:5d:
fa:83:05:4f:a0:e0:81:cd:8c:dc:f5:4d:3d:0d:76:
01:0b:67:2d:4e:02:f9:d6:ff:16:a5:73:2e:c0:7d:
b9:82:e3:93:c1:b5:14:e2:32:37:77:da:c3:04:ee:
74:c6:42:d3:c7:c0:01:87:e6:25:4a:16:30:53:c2:
7f:a5:96:d3:c1:15:a2:4e:c5:5e:45:cd:b2:3f:30:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:21:79:0F:FD:AF:C4:4A:FE:64:A1:FD:40:EB:F6:29:3A:34:95:13
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS205733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:cb:82:af:b3:5d:22:56:b1:87:f1:18:b5:2e:69:e7:1e:44:
76:01:20:5b:5b:59:38:93:63:4f:43:83:46:5c:b1:bb:08:7e:
fa:e7:48:9d:f5:f8:77:f6:e3:9d:ad:43:eb:93:de:9e:09:a7:
36:f7:0f:3a:59:fd:63:a8:d8:d1:81:e1:55:d4:69:dc:54:af:
4b:91:ce:2b:fc:b4:6f:63:cb:09:8e:d1:2f:75:9c:fa:4e:74:
ca:57:6d:96:85:94:ab:37:8f:18:af:c0:ec:01:a6:34:a0:d7:
7e:d9:c9:6a:a8:1e:b2:dd:ca:7a:21:f2:79:a6:05:b1:3e:7b:
78:d9:44:ba:0d:c9:86:8c:b5:8f:04:66:82:7e:fe:35:1c:2b:
7e:b6:36:7f:30:a7:87:21:a2:17:ed:44:90:9e:7c:46:39:ef:
5a:5c:00:ec:e4:0f:af:f5:8e:71:b9:85:86:79:55:f2:64:40:
44:e5:b5:a6:a7:38:1c:06:6e:52:71:06:06:f2:30:32:27:2f:
23:ff:0a:c5:b6:9a:a5:c1:30:15:50:a7:2b:81:f1:d7:b1:01:
8d:cd:29:4f:50:ac:7c:fc:31:78:9d:d8:85:27:d4:71:f2:3e:
99:81:88:0a:7a:1d:a0:58:9f:df:4c:aa:cf:7c:c4:89:03:1e:
21:40:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:58:59 2025 by rpki-client