Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204944.roa
File: AS204944.roa (raw, json)
Hash identifier: YV/IHf2O3Fa3Uh116JEADTc1DH9C8uHvgEu0sF3t4xc=
Subject key identifier: B2:C3:5D:DC:DC:3B:AA:60:E7:F5:91:92:45:C5:BD:27:36:35:A4:4A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 56584A10F1214C230EFE95D4BEFE39A4A1D9CC9C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204944.roa
Signing time: Tue 14 Oct 2025 20:26:21 +0000
ROA not before: Tue 14 Oct 2025 20:21:21 +0000
ROA not after: Tue 13 Oct 2026 20:26:21 +0000
asID: 204944
IP address blocks: 2a0f:85c1:d6f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:58:4a:10:f1:21:4c:23:0e:fe:95:d4:be:fe:39:a4:a1:d9:cc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 14 20:21:21 2025 GMT
Not After : Oct 13 20:26:21 2026 GMT
Subject: CN=B2C35DDCDC3BAA60E7F5919245C5BD273635A44A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:80:d4:39:42:62:a0:91:39:04:0d:1b:14:
9b:35:26:be:82:33:f5:67:4c:2a:f1:63:8e:dc:51:
c0:d8:a7:34:54:19:0e:72:c1:73:73:97:4d:3c:f2:
a1:c6:98:66:37:0c:75:b5:11:9f:c2:69:8a:76:d1:
c4:80:6b:3a:e8:d1:8e:32:cd:3b:df:d5:52:2a:76:
94:7c:2b:f9:70:b2:5a:9b:e4:35:6f:fa:9d:1c:88:
2b:b1:34:21:02:af:22:1b:ce:9a:5a:97:19:ef:fc:
36:0a:9f:7c:36:9a:5d:59:a6:57:48:47:a2:0f:d2:
59:0d:57:96:af:6f:0f:14:41:5b:c0:44:ae:f5:0e:
ef:ec:61:b5:e3:c9:28:2e:a3:f4:6f:f6:fd:2c:d8:
81:d4:12:34:bb:4b:25:e0:9a:df:db:11:1d:93:76:
ab:32:df:1e:ff:3d:42:2f:54:fd:c7:7b:4e:3d:45:
5a:99:3f:71:b7:d9:1c:ce:51:76:17:0e:3d:51:6d:
b8:eb:09:0b:a5:51:a3:86:42:3f:e3:08:30:cb:5d:
ee:83:9e:ea:ef:4e:92:80:ed:da:e5:c8:6b:f0:8b:
af:4a:ce:bc:6b:66:f3:92:74:b8:3b:1a:58:35:17:
03:87:ed:8e:cb:c6:96:7a:cb:b2:c8:38:3f:2d:4c:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C3:5D:DC:DC:3B:AA:60:E7:F5:91:92:45:C5:BD:27:36:35:A4:4A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204944.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d6f::/48
Signature Algorithm: sha256WithRSAEncryption
23:66:4b:50:65:c8:f2:cf:a0:b7:bf:2b:27:52:cf:b2:c1:3e:
6d:d7:ad:c5:cf:63:69:cf:a5:63:ad:0e:4b:c8:e5:85:c1:a3:
2f:49:25:b3:9c:4a:7b:71:80:31:cb:62:80:25:be:fb:fc:9b:
05:4e:b2:2e:7e:2a:47:43:00:fc:2d:ed:11:50:ee:db:53:7d:
a2:bd:cb:3d:ca:34:3b:71:96:d7:92:6d:03:12:a9:b0:f4:07:
7a:60:69:7e:8a:09:3c:19:bc:1e:50:25:41:0d:1c:d7:f8:5d:
22:08:fa:98:d0:22:36:0a:f5:0c:1a:fb:51:a3:f3:7f:ea:f3:
5b:5f:e5:2c:4b:b9:24:40:e0:ff:83:cb:32:93:c8:d5:df:b1:
00:1a:24:10:4d:4b:81:86:fc:03:d9:62:a5:0a:f4:7e:ed:4d:
81:e9:2d:f4:73:d5:21:99:9c:b2:03:c2:31:cf:ce:7f:bb:eb:
40:04:c9:4e:b3:1b:25:b1:81:fb:58:e9:17:60:ee:0d:d6:38:
cb:d4:57:60:40:45:81:e2:a5:f5:4f:8d:69:73:89:03:9a:a7:
79:65:50:cc:25:98:e8:75:d2:b1:77:15:58:db:3e:00:cf:f1:
80:46:66:30:2a:fb:0f:b5:08:a0:8c:d0:e7:99:5a:fc:a8:86:
f6:4a:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:44 2025 by rpki-client