Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205648.roa
File: AS205648.roa (raw, json)
Hash identifier: vwhXhyKaYemISvBJnlrDYRwjffOgJVsqN6M4IlZmw6o=
Subject key identifier: 06:BD:52:16:1D:AC:D5:7E:9F:78:46:84:E9:9E:40:13:69:34:35:F4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7DBE33BFF6B7114BDFD03D785511215B9DA150E2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205648.roa
Signing time: Tue 19 Aug 2025 09:16:20 +0000
ROA not before: Tue 19 Aug 2025 09:11:20 +0000
ROA not after: Tue 18 Aug 2026 09:16:20 +0000
asID: 205648
IP address blocks: 2a13:9500:bd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:be:33:bf:f6:b7:11:4b:df:d0:3d:78:55:11:21:5b:9d:a1:50:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 19 09:11:20 2025 GMT
Not After : Aug 18 09:16:20 2026 GMT
Subject: CN=06BD52161DACD57E9F784684E99E4013693435F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c0:df:48:db:6e:9a:b1:84:2e:d8:15:df:9e:
76:01:17:b4:4f:61:e5:26:58:84:f4:62:eb:e9:98:
92:6e:17:09:10:a5:64:29:8b:bd:cf:3a:61:e8:07:
a1:0c:d7:94:fa:f2:9c:56:0e:22:1d:42:06:68:9e:
83:dc:1a:66:37:a9:5a:f4:4a:5b:2d:21:e1:65:a3:
97:52:a7:ed:9b:49:65:1c:19:70:48:2e:2a:3a:57:
12:58:42:09:eb:9c:85:10:ab:c6:97:bb:a1:6b:eb:
e6:21:4f:4d:25:78:cf:c9:8c:41:06:cf:0e:9f:68:
fc:9a:17:1f:ec:8a:b3:b9:67:6e:4a:dd:cf:d0:bf:
b8:d8:95:35:97:7d:a3:17:5b:20:7f:38:85:17:fc:
75:ea:dd:86:1f:a9:04:16:7d:70:dd:fe:b8:c7:d5:
af:c4:17:3a:82:40:39:05:ff:e9:6d:2b:a1:01:ab:
4f:04:a1:ec:e3:57:e3:ec:24:d8:72:0e:28:7d:cb:
3d:c0:d1:9b:07:0a:6e:94:27:3b:51:aa:ce:16:c8:
15:9a:59:0c:85:0d:56:cb:da:8f:f8:16:24:8e:13:
13:a3:0b:af:d5:d5:ed:3e:3e:63:28:75:06:7e:7b:
f3:59:39:56:85:98:68:6e:9f:48:7c:fa:f8:05:40:
66:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BD:52:16:1D:AC:D5:7E:9F:78:46:84:E9:9E:40:13:69:34:35:F4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:bd::/48
Signature Algorithm: sha256WithRSAEncryption
5a:83:d9:c6:27:85:ab:ee:eb:b4:6d:35:9d:74:7b:44:11:41:
88:9c:24:67:d1:8c:9a:28:d1:45:07:dd:d0:a7:c2:ec:6b:f4:
64:91:77:bd:02:e5:c5:1d:ea:fd:0e:3b:5d:f6:b0:77:45:e2:
45:e5:fa:2b:e5:74:b5:8a:f7:60:4b:a9:ac:76:41:0d:b6:18:
e5:fa:d4:fe:a2:6d:10:fe:fa:2d:e5:d4:08:a4:89:39:1b:68:
84:b1:6c:16:11:90:c2:f4:53:1b:2a:39:32:be:6b:fa:c7:07:
30:45:be:01:b3:1b:bb:8f:7f:0a:d7:cc:d2:10:7a:fa:c2:ea:
87:d0:47:2b:89:2d:a2:db:1f:15:a4:56:99:a6:e4:01:de:35:
c4:00:1f:d8:62:c9:96:88:44:e8:18:1c:2e:84:f6:5e:d6:80:
b3:ab:01:8a:ca:aa:c4:e7:1e:1a:03:d1:41:19:9a:f6:10:27:
64:f4:a1:f0:a4:89:ed:46:f6:b9:c6:a9:07:ac:2c:a5:57:1d:
9c:0b:4e:40:79:3e:a7:bb:18:6c:1a:2c:02:7a:26:92:c7:35:
31:ff:f1:d4:e4:6d:cc:bf:fa:2a:b8:a5:e5:1a:0b:32:05:73:
50:ca:41:f2:28:de:e3:da:2c:f4:e9:1d:d8:b5:b4:17:20:3c:
95:f0:d7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:08:00 2025 by rpki-client