Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205648.roa
File: AS205648.roa (raw, json)
Hash identifier: tKDqbnkup5TcXGU5ke/ESNH6liJupb0K9qfotJI8lUo=
Subject key identifier: EA:E1:3B:36:47:85:79:9D:9B:41:4E:8A:02:EE:EA:65:30:0E:67:6C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6B6DEC361FCEA90DCF0B99B86DAEA9E678601F10
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205648.roa
Signing time: Tue 21 Jul 2026 09:49:14 +0000
ROA not before: Tue 21 Jul 2026 09:44:14 +0000
ROA not after: Tue 20 Jul 2027 09:49:14 +0000
asID: 205648
IP address blocks: 2a13:9500:bd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6d:ec:36:1f:ce:a9:0d:cf:0b:99:b8:6d:ae:a9:e6:78:60:1f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 21 09:44:14 2026 GMT
Not After : Jul 20 09:49:14 2027 GMT
Subject: CN=EAE13B364785799D9B414E8A02EEEA65300E676C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:7e:e6:9d:60:98:26:65:df:2c:53:0b:bd:
2c:11:7e:07:17:4a:6a:ec:02:00:0b:0d:cf:63:bc:
cd:30:45:e0:be:59:d7:ec:9f:52:bd:27:10:2c:2b:
70:7e:a5:86:29:55:14:a2:31:55:0d:04:c2:c8:27:
22:63:4b:aa:ac:1d:ef:42:17:57:a9:f9:e5:80:77:
c0:9c:a2:64:85:fd:3f:20:3e:b4:4b:c4:2e:f1:50:
0e:c2:b5:12:32:68:bc:63:be:8b:57:88:04:35:f8:
e9:69:c2:50:af:27:43:5d:e9:9b:1c:20:4c:87:a2:
08:5f:ac:60:dc:27:3b:2f:6f:a5:77:7e:d2:f9:b1:
d2:10:f7:4a:a9:5c:5b:0f:48:28:1f:72:56:3d:01:
42:14:15:d0:4d:e7:38:86:c1:68:39:44:aa:c2:71:
c0:b1:c2:7a:82:28:a8:a2:36:22:00:91:8c:b2:ed:
33:ca:6f:e6:07:f3:76:cb:2d:51:ca:3a:81:c5:e7:
05:7a:d0:f2:da:40:0e:48:c7:e4:6d:48:ed:71:f8:
48:a3:88:61:a8:00:13:ff:ee:4d:93:f7:e2:16:45:
c3:ab:ad:ab:d7:9c:6e:8f:8c:4d:b2:74:aa:6c:97:
aa:ba:1e:b3:ff:5a:65:c9:79:7a:66:76:ed:ec:05:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E1:3B:36:47:85:79:9D:9B:41:4E:8A:02:EE:EA:65:30:0E:67:6C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:bd::/48
Signature Algorithm: sha256WithRSAEncryption
5e:56:6b:7b:da:a8:19:0b:02:6c:dc:8c:d0:66:de:19:89:76:
d6:51:d9:73:62:60:f7:32:47:0a:c0:75:4d:2b:0f:2f:da:45:
66:3d:30:45:cc:a6:7f:56:b5:66:a6:57:f9:50:ec:da:bc:20:
0c:bf:eb:0c:6d:0b:17:98:5a:46:c4:80:51:62:8a:ea:0d:12:
bc:42:77:af:1e:f6:d3:0a:38:f5:b7:57:86:e7:2d:d2:63:7d:
77:3e:0d:99:4c:c9:f4:de:5a:57:dd:26:52:38:6e:68:04:f1:
25:18:e1:0f:6b:35:a3:a3:42:eb:eb:fd:ed:85:48:e3:cd:4c:
76:41:0c:13:b1:05:19:25:45:c5:5a:42:33:34:f5:a6:e2:0f:
d5:17:a0:3b:75:84:1e:ff:53:b5:b8:4c:9a:c9:45:02:9f:69:
b5:fb:e5:b8:21:3a:fe:aa:92:3d:93:27:0f:91:34:72:61:67:
43:3f:07:25:51:1f:4b:8c:fb:97:ca:0d:ea:69:23:d6:c1:7c:
c3:46:a1:a8:33:e6:10:94:88:b8:9c:00:3f:d1:87:8a:53:05:
ab:94:38:93:48:69:43:76:ba:55:81:3e:f7:c1:5f:7c:5e:aa:
d8:cb:ec:c6:8e:b9:cb:43:f2:38:b1:d7:b5:a6:d8:59:9d:22:
2c:f1:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:17:45 2026 by rpki-client