Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205634.roa
File: AS205634.roa (raw, json)
Hash identifier: 9V+1ROzvNDrT4qS2U/7f5GJI4dGJQENNracK8i6sc+s=
Subject key identifier: 2F:71:8D:AC:CE:68:83:62:89:21:50:93:04:0A:99:E0:F7:19:7B:43
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5AAB0EB0B3C096B448DDDBF77CA94C8213BBC63A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205634.roa
Signing time: Thu 18 Sep 2025 08:28:13 +0000
ROA not before: Thu 18 Sep 2025 08:23:13 +0000
ROA not after: Thu 17 Sep 2026 08:28:13 +0000
asID: 205634
IP address blocks: 45.87.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ab:0e:b0:b3:c0:96:b4:48:dd:db:f7:7c:a9:4c:82:13:bb:c6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 18 08:23:13 2025 GMT
Not After : Sep 17 08:28:13 2026 GMT
Subject: CN=2F718DACCE68836289215093040A99E0F7197B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:8c:ec:06:8f:85:9a:98:d1:49:e2:25:0b:
dc:64:14:6f:da:cc:ae:ad:2e:06:83:10:85:d7:52:
69:d6:87:f7:ab:ce:f4:59:cb:55:09:6c:5c:6d:93:
2d:05:4f:b1:54:65:32:66:d5:ab:b6:e3:85:3f:ed:
62:d2:f4:22:87:89:de:eb:1d:1a:d8:6b:06:b9:7b:
20:64:32:4c:ef:73:89:e1:a4:98:07:f4:10:6e:2e:
8d:49:65:6b:8e:19:c6:64:73:18:a0:20:c5:9e:a8:
e7:aa:3a:2d:ea:6e:bb:03:d0:79:b6:b3:08:cf:71:
4e:45:18:93:0b:a8:22:fb:24:b0:ac:8e:16:eb:68:
43:0b:08:7f:58:0e:bd:c5:51:ce:4e:9c:43:c6:fa:
48:af:62:36:cd:b5:92:cd:79:c6:af:dd:10:ca:1f:
b5:29:09:9e:92:8e:d2:ef:77:58:21:55:f3:df:1f:
1f:23:4d:d9:a3:5c:bb:94:00:93:cb:e1:11:55:02:
17:11:88:a1:0d:35:19:ac:99:e5:59:67:0e:10:e8:
96:5a:aa:8f:08:36:83:b7:fb:17:3d:f8:e4:f7:68:
cd:c3:07:6d:b2:fc:bc:ef:20:27:ec:16:e0:e5:f2:
9c:f0:d1:e4:eb:3d:4d:19:3d:4c:37:9b:d2:30:5e:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:71:8D:AC:CE:68:83:62:89:21:50:93:04:0A:99:E0:F7:19:7B:43
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.187.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5a:ec:6a:64:8d:4b:8a:80:78:f0:0d:79:04:09:eb:04:d5:
88:f9:ca:8d:63:13:ff:d1:8f:50:b6:65:89:86:4b:4c:ab:37:
3a:96:95:4b:66:6d:20:6e:a8:f3:14:70:37:7e:de:c4:60:c5:
04:43:3e:18:60:fc:56:b5:16:df:21:b9:20:42:7a:89:c4:bc:
29:80:da:32:52:1d:bb:44:94:85:96:0c:fb:24:b5:0d:8c:71:
03:81:cb:0a:6c:14:3c:36:11:47:5f:ff:8c:a3:de:94:fc:40:
2f:97:0e:d6:99:97:9a:b4:c3:34:9d:d2:5c:49:db:13:8c:cc:
20:a5:03:ad:01:cc:17:fc:d5:0b:30:19:52:5b:6f:a9:21:99:
9b:46:b3:78:43:d0:3e:93:98:71:dc:3c:e5:4a:fd:b6:34:77:
3b:bf:fe:37:f9:d9:2f:7a:cc:af:89:d0:61:d7:f5:3e:c2:21:
8e:1b:ec:4b:1e:69:c4:8e:a9:18:28:1d:36:b3:36:5d:db:b4:
81:ef:a9:5c:95:38:7b:d3:5e:ca:3d:57:50:ba:4d:f8:06:11:
db:ba:a4:6a:35:48:fd:fd:36:2a:7d:df:e9:54:2a:d1:28:ba:
97:1d:de:0c:10:f4:83:9b:b8:ab:30:25:56:8c:c5:f6:6d:18:
ab:cb:07:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:28 2025 by rpki-client