Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205163.roa
File: AS205163.roa (raw, json)
Hash identifier: cVRjnOUXas9UrveZNVYopeTw4tdyu1lYYt8Ls+brMTU=
Subject key identifier: 0A:53:D9:DA:D0:49:5C:51:68:C8:4A:57:88:96:B5:4D:0F:34:EC:7C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1BA7085597F39C2325B9FD64032909148497D8D2
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205163.roa
Signing time: Tue 14 Oct 2025 20:26:16 +0000
ROA not before: Tue 14 Oct 2025 20:21:16 +0000
ROA not after: Tue 13 Oct 2026 20:26:16 +0000
asID: 205163
IP address blocks: 2a0f:85c1:d6e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a7:08:55:97:f3:9c:23:25:b9:fd:64:03:29:09:14:84:97:d8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 14 20:21:16 2025 GMT
Not After : Oct 13 20:26:16 2026 GMT
Subject: CN=0A53D9DAD0495C5168C84A578896B54D0F34EC7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:15:e6:c3:09:b8:6f:59:23:77:a3:b6:f3:
7d:dd:8e:39:ab:64:b9:a9:eb:cd:86:4d:73:c4:6b:
43:37:09:87:10:53:16:90:4c:2e:db:a0:eb:89:f4:
35:ec:2d:6a:6e:6e:4f:f2:67:e7:98:79:2f:f1:97:
db:c5:e5:9f:a4:b5:08:30:37:c7:21:23:13:76:26:
75:71:32:fa:fc:e8:61:59:f8:c6:e3:b4:56:34:1b:
05:a1:e7:07:c3:07:db:ef:e9:3c:06:9c:a0:71:77:
15:b6:0a:bf:d5:d7:cc:58:9c:88:7a:7c:ab:8f:d6:
67:13:29:ea:0b:90:b8:f0:04:e2:9a:88:92:09:8f:
75:ce:18:df:52:59:38:18:28:71:d5:9c:ac:e7:95:
9e:9f:e7:1d:e5:6a:c3:bf:00:29:69:af:69:12:35:
29:18:c6:c4:c8:9a:58:3a:f1:4d:b0:bb:b7:f8:75:
be:65:41:83:e1:12:7a:56:25:eb:d6:dc:7e:97:b4:
78:e6:53:19:04:ee:10:35:37:7d:c5:b7:51:d0:9e:
1a:de:e5:21:67:cb:73:22:60:b6:a9:17:7e:42:bc:
26:c0:d3:ef:f3:e5:c8:85:f2:69:2f:f7:fd:a7:af:
54:4b:ed:6f:36:97:5a:64:dc:7a:b1:6d:6d:0c:e3:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:D9:DA:D0:49:5C:51:68:C8:4A:57:88:96:B5:4D:0F:34:EC:7C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205163.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d6e::/48
Signature Algorithm: sha256WithRSAEncryption
24:41:69:90:22:4b:fc:85:50:81:5e:42:0f:f9:fe:75:fe:a1:
ae:8b:68:13:0f:cf:a4:4a:8e:53:d1:7c:78:01:f1:3b:26:90:
3d:c5:3d:96:87:7a:a6:c2:42:54:8a:74:6f:13:df:54:75:e3:
71:4f:52:82:ee:ad:a6:73:17:9d:d8:13:39:7c:df:97:18:e7:
b4:e3:0f:ad:1c:8e:1e:5f:20:73:83:2a:38:11:ca:58:cf:84:
47:2e:2f:4f:7f:c5:b8:09:2a:0d:b9:fb:cf:cc:50:d9:db:dc:
b9:ef:5a:8a:fe:5d:58:59:63:64:8a:73:14:3a:70:3a:bb:1d:
fe:99:07:f6:2e:99:f0:92:a2:e8:e8:db:64:00:42:3f:95:5a:
e8:b9:06:05:e1:08:0a:b8:c6:71:a2:60:ac:0a:d4:6b:dc:9a:
b9:73:d9:83:a3:34:e2:d9:0a:fd:9d:04:c3:d1:3d:ab:72:b1:
0f:47:fe:3c:65:b3:7a:fa:7c:33:3c:a5:0c:47:9f:ab:cb:de:
fd:ac:0f:0f:3f:87:2d:4c:df:88:97:93:29:87:9a:ec:ef:4a:
7f:2d:71:bd:ad:c4:7b:b4:24:60:4d:c0:85:d6:58:58:40:24:
69:4f:42:68:9c:84:81:e8:4d:74:cb:3a:61:46:fb:a2:86:8e:
27:80:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:29 2025 by rpki-client