Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204994.roa
File: AS204994.roa (raw, json)
Hash identifier: 6csnBzV2fU4kl+TtRhpAdOSdS49Y9qYKVKmyebzjdkQ=
Subject key identifier: 9A:7B:9F:CE:EA:20:AC:2D:19:01:02:0E:E9:FD:AB:EF:C4:BA:08:3B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 712BFFDC47C56D2CE860E222547275D432EB25BF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204994.roa
Signing time: Sat 13 Sep 2025 02:22:04 +0000
ROA not before: Sat 13 Sep 2025 02:17:04 +0000
ROA not after: Sat 12 Sep 2026 02:22:04 +0000
asID: 204994
IP address blocks: 2a0f:85c1:d37::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:2b:ff:dc:47:c5:6d:2c:e8:60:e2:22:54:72:75:d4:32:eb:25:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 13 02:17:04 2025 GMT
Not After : Sep 12 02:22:04 2026 GMT
Subject: CN=9A7B9FCEEA20AC2D1901020EE9FDABEFC4BA083B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:15:4b:d0:e6:b7:91:47:10:12:6a:9e:76:
20:cd:00:28:50:b0:84:00:e4:c7:16:4a:1e:09:5b:
6b:f4:93:26:a1:5b:fb:c0:31:ae:9e:a5:d5:70:87:
6c:22:29:66:a5:c2:e7:ed:17:cc:fd:0d:4a:04:10:
bb:1d:6a:8e:54:1a:e0:ae:cc:45:1c:22:ad:ff:0e:
57:34:e3:f7:57:13:aa:ed:a6:4f:44:d3:cd:61:01:
b4:1d:cd:87:e2:17:2a:54:32:11:52:89:61:00:eb:
75:ef:7a:fb:fe:2e:1b:d5:ea:25:99:1f:7a:02:a8:
6e:20:a1:5b:b2:c8:79:bb:0c:40:06:47:3e:c7:5d:
76:c5:d0:33:42:cf:ab:ce:c7:24:53:1b:6b:bd:ee:
1d:44:d0:87:5a:c3:47:8e:87:4a:b1:5b:0f:5e:ee:
1d:b6:26:b4:2b:d1:ab:01:dd:36:c7:b6:79:20:6b:
97:59:6f:d7:84:9d:70:b9:22:cd:f3:41:82:b9:44:
d8:ba:eb:63:cf:fc:d0:1f:63:fb:be:e3:3f:bb:1b:
f9:a3:ef:84:34:ac:0f:54:5a:26:2c:e4:ad:f4:f3:
0f:46:e2:db:67:0a:1d:f1:1a:94:79:4a:aa:e6:f2:
b6:d1:a8:b1:ac:db:b5:88:e4:87:23:6d:44:fc:e2:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:9F:CE:EA:20:AC:2D:19:01:02:0E:E9:FD:AB:EF:C4:BA:08:3B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d37::/48
Signature Algorithm: sha256WithRSAEncryption
d9:63:fb:83:cb:4e:03:d2:1e:f4:5e:b0:61:d3:6b:70:a6:9d:
3d:3b:54:71:e9:a9:b5:50:e9:b5:94:ee:89:3d:36:24:85:e9:
ce:69:10:fc:bd:46:c9:1e:f6:b9:87:6c:a4:d5:07:37:c9:46:
53:ca:84:d2:bd:bc:ce:3e:45:4c:f3:4f:c8:e9:d5:7c:de:1f:
12:42:67:b7:39:f1:d4:f9:cf:a7:d6:3c:25:8a:7d:ee:33:8a:
cf:f6:2c:54:71:70:e3:0b:54:56:bc:80:db:d8:a6:f5:1c:56:
5a:d9:14:25:9d:6e:7f:c4:b8:2d:0d:d8:73:43:5d:cc:37:40:
30:2b:91:2b:9f:d4:b0:20:b8:b8:c7:7d:dc:65:63:d4:f0:df:
8e:f2:3b:50:23:3e:bf:03:8e:fa:13:57:04:49:ac:cf:0f:13:
30:c3:f7:e8:8d:5e:f8:8a:85:8c:0b:db:20:0c:7e:d2:f4:76:
ff:e5:4a:02:28:b2:52:41:56:22:57:3f:29:8f:56:a1:e3:43:
18:e6:de:13:eb:3c:b3:bf:9a:4b:1d:72:1e:f7:4e:a1:65:55:
e4:52:46:87:ce:df:be:83:92:ee:b0:0e:f4:b0:f0:79:ed:ff:
0d:28:ca:ad:8a:4d:33:e8:55:a4:46:44:01:b3:8c:3c:a0:a2:
de:74:75:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUcSv/3EfFbSzoYOIiVHJ11DLrJb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA5MTMwMjE3MDRaFw0yNjA5MTIwMjIyMDRaMDMxMTAvBgNV
BAMTKDlBN0I5RkNFRUEyMEFDMkQxOTAxMDIwRUU5RkRBQkVGQzRCQTA4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJFhVL0Oa3kUcQEmqediDNAChQ
sIQA5McWSh4JW2v0kyahW/vAMa6epdVwh2wiKWalwuftF8z9DUoEELsdao5UGuCu
zEUcIq3/Dlc04/dXE6rtpk9E081hAbQdzYfiFypUMhFSiWEA63Xvevv+LhvV6iWZ
H3oCqG4goVuyyHm7DEAGRz7HXXbF0DNCz6vOxyRTG2u97h1E0Idaw0eOh0qxWw9e
7h22JrQr0asB3TbHtnkga5dZb9eEnXC5Is3zQYK5RNi662PP/NAfY/u+4z+7G/mj
74Q0rA9UWiYs5K308w9G4ttnCh3xGpR5Sqrm8rbRqLGs27WI5IcjbUT84r2/AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUmnufzuogrC0ZAQIO6f2r78S6CDswHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA0OTk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQ03MA0GCSqGSIb3DQEBCwUAA4IBAQDZY/uDy04D0h70XrBh02twpp09O1Rx6am1
UOm1lO6JPTYkhenOaRD8vUbJHva5h2yk1Qc3yUZTyoTSvbzOPkVM80/I6dV83h8S
Qme3OfHU+c+n1jwlin3uM4rP9ixUcXDjC1RWvIDb2Kb1HFZa2RQlnW5/xLgtDdhz
Q13MN0AwK5Ern9SwILi4x33cZWPU8N+O8jtQIz6/A476E1cESazPDxMww/fojV74
ioWMC9sgDH7S9Hb/5UoCKLJSQVYiVz8pj1ah40MY5t4T6zyzv5pLHXIe906hZVXk
UkaHzt++g5LusA70sPB57f8NKMqtik0z6FWkRkQBs4w8oKLedHX3
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:15 2025 by rpki-client