Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204844.roa
File: AS204844.roa (raw, json)
Hash identifier: Na5yUCt/ldS15Hx/9Q5RqwVs2ATMpHQI98B5jozK3+w=
Subject key identifier: 1D:56:62:AA:F8:F2:18:44:AB:34:FE:40:79:29:F5:73:06:58:22:81
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4441F5EAAECE94E824086C1EFFD5679C2A928341
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204844.roa
Signing time: Wed 17 Sep 2025 03:07:52 +0000
ROA not before: Wed 17 Sep 2025 03:02:52 +0000
ROA not after: Wed 16 Sep 2026 03:07:52 +0000
asID: 204844
IP address blocks: 2a0f:85c1:8b7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:41:f5:ea:ae:ce:94:e8:24:08:6c:1e:ff:d5:67:9c:2a:92:83:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 17 03:02:52 2025 GMT
Not After : Sep 16 03:07:52 2026 GMT
Subject: CN=1D5662AAF8F21844AB34FE407929F57306582281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:d2:4d:43:10:7f:24:39:9e:3a:8a:ac:e8:
71:90:b3:7b:1c:fd:cf:f9:7f:df:6a:c0:0f:76:16:
c0:c6:73:d0:92:1c:5a:8b:5b:8b:e3:51:fe:7c:79:
48:6a:2c:95:3c:47:0e:dc:b5:91:00:9a:12:3a:0c:
29:96:bb:8f:7f:6a:78:e0:ee:04:ae:0a:c2:aa:3d:
f2:95:13:b8:3f:03:ec:90:a6:a2:9f:61:45:ce:dc:
f9:37:44:3f:12:a9:06:1a:ae:2c:ae:c5:54:07:d7:
52:73:ab:19:15:21:78:33:4c:65:82:2d:43:b9:de:
2f:65:e0:45:da:e3:28:e5:5c:eb:81:b7:95:cb:4c:
11:3c:14:0b:79:c7:3a:10:8d:f0:9a:5c:e6:3b:ac:
a4:2c:ff:85:af:5d:35:b4:32:a9:ae:4d:96:51:6f:
d8:74:f7:b8:97:6a:07:7a:4a:25:1a:bb:c6:50:39:
2d:af:25:a1:57:53:44:3b:ce:c3:d7:3c:6b:0c:d9:
7c:8d:b2:da:d3:82:e2:11:7c:3f:c0:99:7c:f4:e3:
02:52:c3:9d:8f:74:c7:1f:35:77:82:c1:40:2c:3c:
9d:19:a6:0a:94:07:ea:7f:94:48:35:88:bf:ae:89:
4e:9f:ae:1f:53:27:a2:b9:35:9f:75:eb:56:43:b5:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:56:62:AA:F8:F2:18:44:AB:34:FE:40:79:29:F5:73:06:58:22:81
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8b7::/48
Signature Algorithm: sha256WithRSAEncryption
90:86:45:e7:08:37:27:d1:3d:f8:8b:48:9f:79:6d:d2:89:c4:
d1:dc:45:e3:a2:16:63:2a:1f:00:8a:ca:43:57:22:fc:b8:1b:
19:e0:05:22:8b:dc:93:a9:73:cd:b8:06:9a:b7:f1:2d:85:0d:
03:ef:7c:7f:1f:c9:8f:d1:61:99:e4:71:f7:07:be:9d:05:67:
17:31:07:7d:23:de:6b:c1:32:f0:fd:b7:96:37:4a:85:5d:23:
6d:ed:77:05:72:a6:fb:37:9e:83:81:e8:5c:cd:f2:95:78:4f:
78:45:2c:6f:35:05:20:c2:75:24:1d:c2:5c:a5:c6:d1:72:e7:
c7:2e:f6:ec:72:82:ce:5b:66:ec:e2:fa:13:a5:47:23:22:39:
e6:53:f4:32:49:88:26:7f:78:8d:f1:a9:e8:23:44:f8:19:cb:
7e:65:de:e7:29:56:13:1e:66:f0:36:72:72:e0:77:e1:a3:b5:
06:46:08:be:f1:61:49:f3:fa:06:15:f0:4b:de:1c:fc:e6:f9:
60:eb:23:7b:62:0f:51:03:73:28:36:f2:96:f6:5d:b1:d3:97:
f7:f6:ab:21:08:58:8a:e4:6f:9c:61:2c:27:a3:5a:ec:23:4d:
da:c5:78:85:ad:98:9d:84:e4:9a:44:ff:8e:0b:a0:5e:c4:3f:
f6:88:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:40 2025 by rpki-client