Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205298.roa
File: AS205298.roa (raw, json)
Hash identifier: KLSGs2mJFjhwO1+PsxDMvbkpgf2+DYbm/gdD35fO8Rc=
Subject key identifier: F2:60:F7:9A:18:19:E1:C4:7F:F1:D1:54:BE:25:ED:A1:B2:77:90:3E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1166EF7CB6136EFA5A9CB8D6878476931A5C12DD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205298.roa
Signing time: Tue 07 Oct 2025 11:04:35 +0000
ROA not before: Tue 07 Oct 2025 10:59:35 +0000
ROA not after: Tue 06 Oct 2026 11:04:35 +0000
asID: 205298
IP address blocks: 2a0f:85c1:cd0::/48 maxlen: 48
2a0f:85c1:d70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:66:ef:7c:b6:13:6e:fa:5a:9c:b8:d6:87:84:76:93:1a:5c:12:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 7 10:59:35 2025 GMT
Not After : Oct 6 11:04:35 2026 GMT
Subject: CN=F260F79A1819E1C47FF1D154BE25EDA1B277903E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:fc:41:58:20:43:eb:19:17:df:26:81:7c:
f1:2f:12:96:e0:b2:a1:ff:df:63:1b:99:f3:05:2e:
6f:26:d0:e2:8a:f7:6d:ef:c9:83:f3:e0:d5:5b:57:
ab:e4:9e:17:90:da:53:09:3e:9d:27:37:cf:fa:7f:
3f:3a:de:d7:49:dc:6e:79:97:49:77:fb:e0:50:d5:
04:f3:97:28:ef:90:3a:c8:8e:bc:47:59:02:0a:33:
e9:bb:7c:53:04:99:22:5f:2d:3e:18:02:d8:c2:3b:
f3:5f:4e:0a:90:d7:ab:a9:83:48:4b:77:74:a6:ee:
e1:d9:df:76:59:d2:bc:ac:a1:c0:97:34:aa:fe:bc:
a0:e0:7d:11:44:82:49:62:67:63:2a:13:0f:cd:fb:
5c:73:ed:3e:49:32:ca:c5:c1:68:96:e8:1a:5d:45:
7e:26:07:84:a9:00:73:7a:66:ad:53:1a:14:25:66:
44:0f:e6:3d:10:36:8c:83:de:56:df:63:5b:ff:e3:
e7:5a:49:c7:ba:e2:fb:1d:0e:c7:d9:1a:e9:05:5a:
57:87:1c:ec:a1:4a:73:d1:e7:30:03:02:d0:e9:53:
fd:bb:7d:4e:b2:ad:d1:4c:ef:41:e6:28:e3:0b:e5:
f1:46:f7:4d:33:33:bd:be:f4:90:78:4c:5c:fe:20:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:60:F7:9A:18:19:E1:C4:7F:F1:D1:54:BE:25:ED:A1:B2:77:90:3E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205298.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cd0::/48
2a0f:85c1:d70::/44
Signature Algorithm: sha256WithRSAEncryption
1f:5d:15:50:d4:7e:a1:b9:fe:38:1c:18:13:d8:1f:41:21:8d:
d6:35:3b:aa:7b:08:dd:05:4e:81:61:9a:77:1b:10:0a:80:10:
11:ec:14:ce:89:6a:95:e3:29:67:98:da:e1:4f:02:b2:17:49:
da:20:2e:56:94:b7:28:a1:8f:9d:46:4b:3f:47:7d:15:10:ce:
ae:dd:75:49:3e:3c:e6:a6:0c:8b:66:14:0e:79:ce:00:b3:08:
58:a2:0e:ae:f5:d9:c5:c9:bc:75:ea:5b:f3:86:fa:53:b9:c1:
84:e9:90:ed:45:be:05:05:7c:f1:8c:57:db:1f:85:b0:2f:6e:
0b:de:02:ea:77:15:54:79:30:a0:91:ae:e3:c0:3c:27:e8:c2:
e5:69:04:af:36:a3:f9:7d:73:27:b2:ab:50:a3:ad:7c:10:bf:
e3:31:77:50:87:f7:1e:73:8a:cd:0b:e9:a0:95:e2:be:93:5c:
a9:87:d3:2b:d9:e8:ff:74:0d:3a:e1:7c:fc:a1:cd:83:d4:52:
cb:64:99:76:3a:65:b6:bd:3b:db:3c:d7:e0:f2:ea:40:17:b7:
bc:e7:51:0d:8e:b7:59:1a:aa:38:ff:37:17:71:fb:85:9f:41:
68:6f:b6:9f:90:6d:25:2b:94:d8:19:7b:b7:c8:7d:ae:25:df:
a5:2f:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:59:02 2025 by rpki-client