Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205781.roa
File: AS205781.roa (raw, json)
Hash identifier: gZ/ZQQd7uHn1gHzYeWWnmNC2g+5iE/ddL2uXJZV/1eQ=
Subject key identifier: D8:8F:45:93:C7:1D:18:D5:3D:BA:AB:F5:D7:65:FD:66:5A:3F:8F:15
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4D39E495C3C73F6E50FEF4CA28880948C2E63796
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205781.roa
Signing time: Wed 06 Aug 2025 12:35:16 +0000
ROA not before: Wed 06 Aug 2025 12:30:16 +0000
ROA not after: Wed 05 Aug 2026 12:35:16 +0000
asID: 205781
IP address blocks: 82.24.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:39:e4:95:c3:c7:3f:6e:50:fe:f4:ca:28:88:09:48:c2:e6:37:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 6 12:30:16 2025 GMT
Not After : Aug 5 12:35:16 2026 GMT
Subject: CN=D88F4593C71D18D53DBAABF5D765FD665A3F8F15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:97:58:5d:37:b3:73:fb:15:a4:70:4a:65:
f1:a4:0a:0e:57:37:f9:46:97:e4:84:bb:85:5d:8c:
b0:ab:f6:f4:83:65:e9:b1:81:ed:37:3d:cb:9f:41:
91:17:62:6f:95:00:de:bf:2e:c9:69:9d:be:f3:e8:
e9:54:7b:54:63:9d:d2:b9:8c:25:1e:ef:a6:70:7b:
b8:7c:68:f3:e2:85:ee:9b:22:53:6e:39:d0:e8:60:
d4:55:83:b7:72:72:24:bb:7e:33:af:6c:5f:30:7f:
f7:93:f7:b9:32:03:bf:92:31:e4:15:08:6a:e5:09:
65:31:3a:77:b1:1c:78:b7:e2:71:4f:76:28:b5:2e:
f0:38:61:32:50:62:9e:69:16:ae:87:d0:48:eb:64:
fa:a2:2f:8b:00:94:e8:1e:fc:a3:bd:b2:10:d3:64:
87:e2:55:a5:bc:f3:06:f3:b9:b7:26:57:84:23:d8:
1f:1e:ba:42:bd:a0:b8:63:99:18:b1:86:5a:c7:ee:
bf:2b:91:65:f6:1a:06:88:7a:27:e0:bc:0e:4a:1b:
e5:c2:a5:2a:02:c7:c7:7b:73:02:72:e3:ab:1f:db:
13:38:14:e6:fd:0e:80:6b:25:56:e6:25:ca:81:fd:
2d:ee:83:08:b4:44:fc:6c:1e:0e:94:0b:ad:ec:8e:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8F:45:93:C7:1D:18:D5:3D:BA:AB:F5:D7:65:FD:66:5A:3F:8F:15
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.83.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9d:d2:4a:b7:91:30:31:2a:be:40:d5:71:7a:2c:a9:f2:42:
71:94:13:04:5c:49:bd:f2:53:a1:fd:40:ce:ed:0e:1a:fa:f7:
99:72:f3:5c:52:fc:b3:af:f3:2b:a4:16:82:b9:f6:f4:f6:87:
d8:7c:0c:ad:49:3a:c0:88:26:51:70:30:32:89:e4:56:4c:24:
9e:9e:20:a7:86:67:18:6b:4a:db:60:33:ce:fa:02:9f:c1:c2:
b7:ff:50:bd:7c:b8:e3:fa:14:d7:c5:b0:d9:f3:b9:9d:8a:d9:
92:79:e2:e5:75:16:ff:54:b7:ff:0e:b1:74:32:00:6b:37:de:
0f:21:24:7e:cb:26:38:43:57:ca:90:14:45:2d:2f:7e:ab:75:
fa:ed:bd:c0:7f:aa:20:92:5f:0a:3e:ac:6a:0e:6f:b3:b0:1f:
83:cb:8e:6e:c7:a9:a6:9b:3a:e8:5c:ea:a7:a2:0a:52:33:2b:
78:b8:7e:3b:ca:59:71:c6:e5:e9:09:83:33:02:53:42:74:8a:
e8:d8:bd:46:5c:64:23:f3:f3:56:d4:ae:8e:11:71:41:62:1f:
2b:9a:85:e2:12:81:79:0e:24:b2:79:92:6c:a9:52:cf:6e:6f:
1e:43:0d:15:10:b6:ba:31:4f:bb:80:cb:e2:71:d3:28:12:44:
e6:2a:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:08 2025 by rpki-client