Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205649.roa
File: AS205649.roa (raw, json)
Hash identifier: O1DS7UTdn3atX6pmWMGeiCwGGX1JLlEAxOJGBrvfCAs=
Subject key identifier: DD:4B:2E:62:8F:35:28:95:54:C6:65:AE:2F:7A:55:9C:7E:C1:B1:ED
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 224E2BA6AAE67F04229FFB488C2D5D3F13169B5A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205649.roa
Signing time: Sat 13 Sep 2025 02:22:27 +0000
ROA not before: Sat 13 Sep 2025 02:17:27 +0000
ROA not after: Sat 12 Sep 2026 02:22:27 +0000
asID: 205649
IP address blocks: 2a0f:85c1:ce3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:4e:2b:a6:aa:e6:7f:04:22:9f:fb:48:8c:2d:5d:3f:13:16:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 13 02:17:27 2025 GMT
Not After : Sep 12 02:22:27 2026 GMT
Subject: CN=DD4B2E628F35289554C665AE2F7A559C7EC1B1ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:e7:c3:ff:50:10:3f:31:6c:03:db:16:29:
f3:e1:d6:0d:50:ef:71:30:d5:8c:6c:dd:17:8b:84:
7d:76:0b:83:be:a5:2d:4b:e9:76:35:05:d5:99:c2:
3d:c7:5f:21:53:fb:32:77:8c:a6:e3:f0:70:2e:2c:
74:e6:bc:95:81:a8:6e:f3:7f:ce:ba:4f:28:0d:4e:
51:3a:eb:34:5a:df:fa:7a:82:83:14:9e:65:98:20:
b5:36:33:0f:bc:46:0a:4b:ab:bf:b1:f3:dd:d8:23:
9c:05:3e:fc:18:c5:7d:a2:bd:fe:05:c9:76:13:c9:
87:e9:b7:5e:b7:90:41:00:75:61:e5:d5:e0:eb:33:
99:83:f5:66:a9:97:47:82:57:e9:9a:df:22:d0:b4:
b7:42:37:b7:7a:00:be:5c:13:42:26:32:26:ff:a7:
04:92:7d:e4:81:a3:e6:e1:c0:39:8f:a7:f5:c3:ce:
d4:91:6f:4e:76:02:98:25:91:70:f5:b7:5e:8c:4f:
86:9b:f4:67:61:ea:fd:52:29:8c:02:9d:78:14:e9:
37:5e:45:b4:1f:15:13:60:af:79:a8:ad:34:f3:df:
de:3a:51:54:7c:37:c9:15:b2:84:d1:7d:bf:9b:e9:
a0:70:5b:29:a6:3c:45:59:17:b0:0f:7a:88:ae:68:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4B:2E:62:8F:35:28:95:54:C6:65:AE:2F:7A:55:9C:7E:C1:B1:ED
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205649.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ce3::/48
Signature Algorithm: sha256WithRSAEncryption
96:f2:94:92:0e:f6:f1:b3:ef:ef:f9:49:c9:21:f2:2d:30:9f:
39:08:45:6a:10:7c:70:8b:0c:24:86:ab:39:ce:3a:0c:78:12:
65:4a:08:db:1d:6f:36:f8:30:dc:69:52:8d:c7:be:3d:a4:65:
06:89:3e:25:97:9d:ad:0e:45:67:c5:53:27:d4:cb:48:e6:c9:
a4:01:fd:5d:9e:d1:6e:32:e4:3a:f0:e7:6a:0a:1e:16:3e:c5:
59:89:b0:a0:63:c5:d0:8c:0a:f1:90:76:d5:83:ce:e5:4d:10:
62:05:7f:2e:9b:8f:e3:d8:ea:ef:14:74:ee:29:95:58:32:da:
c9:83:95:fc:41:b5:d2:69:b8:6f:d4:52:67:1e:10:96:7d:2e:
e0:26:81:fa:53:c5:53:aa:0c:0d:a2:df:a8:55:ff:ed:97:d3:
a2:d6:1d:e3:fa:cb:ee:52:86:14:47:71:5e:82:cd:4b:4e:6a:
dc:17:45:32:86:c9:b7:a2:17:37:a6:f8:9b:4c:ec:47:97:7b:
5c:a8:95:09:53:79:24:84:d1:26:d1:71:c2:e5:89:07:7c:53:
f8:f4:01:70:89:c0:e8:60:0c:73:1f:c6:99:6a:55:12:3a:83:
ca:9f:72:63:7d:23:db:62:44:51:d7:74:15:04:79:20:ed:21:
f7:74:29:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUIk4rpqrmfwQin/tIjC1dPxMWm1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA5MTMwMjE3MjdaFw0yNjA5MTIwMjIyMjdaMDMxMTAvBgNV
BAMTKERENEIyRTYyOEYzNTI4OTU1NEM2NjVBRTJGN0E1NTlDN0VDMUIxRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgI+fD/1AQPzFsA9sWKfPh1g1Q
73Ew1Yxs3ReLhH12C4O+pS1L6XY1BdWZwj3HXyFT+zJ3jKbj8HAuLHTmvJWBqG7z
f866TygNTlE66zRa3/p6goMUnmWYILU2Mw+8RgpLq7+x893YI5wFPvwYxX2ivf4F
yXYTyYfpt163kEEAdWHl1eDrM5mD9Wapl0eCV+ma3yLQtLdCN7d6AL5cE0ImMib/
pwSSfeSBo+bhwDmPp/XDztSRb052ApglkXD1t16MT4ab9Gdh6v1SKYwCnXgU6Tde
RbQfFRNgr3morTTz3946UVR8N8kVsoTRfb+b6aBwWymmPEVZF7APeoiuaBSDAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU3UsuYo81KJVUxmWuL3pVnH7Bse0wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA1NjQ5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQzjMA0GCSqGSIb3DQEBCwUAA4IBAQCW8pSSDvbxs+/v+UnJIfItMJ85CEVqEHxw
iwwkhqs5zjoMeBJlSgjbHW82+DDcaVKNx749pGUGiT4ll52tDkVnxVMn1MtI5smk
Af1dntFuMuQ68OdqCh4WPsVZibCgY8XQjArxkHbVg87lTRBiBX8um4/j2OrvFHTu
KZVYMtrJg5X8QbXSabhv1FJnHhCWfS7gJoH6U8VTqgwNot+oVf/tl9Oi1h3j+svu
UoYUR3Fegs1LTmrcF0Uyhsm3ohc3pvibTOxHl3tcqJUJU3kkhNEm0XHC5YkHfFP4
9AFwicDoYAxzH8aZalUSOoPKn3JjfSPbYkRR13QVBHkg7SH3dCnL
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:46 2025 by rpki-client