Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS204765.roa
File: AS204765.roa (raw, json)
Hash identifier: bosubCVAHpkIIIIg4IiG9QQYxOlYL+/vMkTHxEAzlvs=
Subject key identifier: EE:65:04:56:5B:5E:27:1F:63:37:B6:0E:15:3D:5D:DB:0C:B0:F5:3F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7D02409AF77FED2E0BC38B00C31699C7B57B041C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS204765.roa
Signing time: Wed 25 Mar 2026 15:41:49 +0000
ROA not before: Wed 25 Mar 2026 15:36:49 +0000
ROA not after: Wed 24 Mar 2027 15:41:49 +0000
asID: 204765
IP address blocks: 95.135.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:02:40:9a:f7:7f:ed:2e:0b:c3:8b:00:c3:16:99:c7:b5:7b:04:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 25 15:36:49 2026 GMT
Not After : Mar 24 15:41:49 2027 GMT
Subject: CN=EE6504565B5E271F6337B60E153D5DDB0CB0F53F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:f5:6c:bb:4c:2b:11:bc:e7:fb:e2:e0:10:
19:b5:6c:f2:86:43:1b:b4:30:c4:95:f9:b8:94:3f:
7e:cd:68:c8:9f:91:a9:96:2a:cf:09:bb:f0:e2:66:
23:ef:87:73:bb:4c:0d:24:84:19:c3:21:af:a8:8d:
49:6c:99:7c:75:81:0f:e3:9a:23:03:fa:79:fe:1f:
17:91:2f:e4:05:d3:6b:3b:7e:f1:f0:a2:07:0f:9f:
89:1d:8b:d4:26:f7:57:8c:91:b9:93:5e:08:5b:4c:
96:4b:ea:24:25:e9:96:aa:4e:80:a8:de:4e:d5:09:
c4:9b:b5:d9:4a:ff:c9:fe:25:e9:e8:3b:db:d1:51:
04:ff:5d:49:25:33:a1:72:26:1d:51:f0:55:5e:56:
55:fc:80:a0:fe:47:20:aa:95:b4:e5:6a:57:01:25:
e3:b0:1e:3c:48:38:e3:ab:99:4d:e2:c1:6d:13:b6:
5b:8c:d0:3c:90:f3:aa:a3:71:c9:27:df:0d:da:f6:
0f:4d:6b:18:e6:95:e2:61:d8:80:23:0e:b4:df:cc:
7f:d9:66:49:1a:86:30:84:8f:f0:3f:ce:c4:aa:7d:
81:13:d7:11:16:b7:e9:12:f7:63:a6:3f:5b:75:e3:
99:8b:ab:79:07:fe:7c:1e:c1:3c:3c:03:3e:4c:fa:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:65:04:56:5B:5E:27:1F:63:37:B6:0E:15:3D:5D:DB:0C:B0:F5:3F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS204765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.180.0/24
Signature Algorithm: sha256WithRSAEncryption
33:74:7a:ce:2e:ec:26:de:1a:37:d9:e3:bd:93:f6:84:61:ef:
4b:6c:c3:80:d2:4a:fc:13:af:49:56:c3:65:ea:9a:49:32:1a:
4e:6e:df:cb:a8:fd:8d:c1:9f:f8:26:9e:8e:f3:93:29:43:50:
61:46:1e:51:47:b0:ba:fe:8d:7e:3b:d0:a6:09:e1:67:7e:10:
f2:0d:d6:3c:f9:ae:09:9e:76:17:f2:31:78:03:72:44:8c:12:
98:b7:13:09:ef:5b:2b:00:38:06:b1:48:de:0c:7d:a5:16:40:
4f:ac:4b:d4:eb:0d:1c:f1:52:dc:1a:53:8e:7d:b4:1e:8e:d8:
22:ce:ee:9b:19:15:2c:75:3c:e9:be:6a:cc:58:e2:9c:8b:c4:
11:92:72:f7:ea:63:38:7f:e6:aa:f5:bf:57:16:b8:d7:28:b5:
b9:30:88:fd:18:2d:ff:eb:71:68:ce:db:a0:2b:05:2b:a6:06:
06:7e:3e:05:cd:60:ea:0f:9c:cc:02:7f:2e:9e:bb:66:c6:53:
41:ba:39:ba:02:4b:b6:a6:05:ae:19:7b:02:9a:ae:a2:9c:ef:
d3:66:81:57:e5:0d:33:68:f0:62:29:53:b1:9c:53:16:51:67:
c1:36:32:28:bb:1d:9a:28:88:4d:3e:9c:a0:3d:0a:c0:70:db:
79:3b:be:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:28:58 2026 by rpki-client