Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205779.roa
File: AS205779.roa (raw, json)
Hash identifier: TdVdvHRdribZ7IEsg64ZHINzBnElsPWlck8Hb4RbZJ0=
Subject key identifier: 9D:62:6B:E0:99:FC:92:D5:7E:71:EE:97:8F:89:BB:70:DD:C0:F6:1E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4AB5E84FB574FE8527768A5355E7B98E1F50DE7B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205779.roa
Signing time: Mon 18 Aug 2025 20:53:15 +0000
ROA not before: Mon 18 Aug 2025 20:48:15 +0000
ROA not after: Mon 17 Aug 2026 20:53:15 +0000
asID: 205779
IP address blocks: 2a0f:85c1:ce1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b5:e8:4f:b5:74:fe:85:27:76:8a:53:55:e7:b9:8e:1f:50:de:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 20:48:15 2025 GMT
Not After : Aug 17 20:53:15 2026 GMT
Subject: CN=9D626BE099FC92D57E71EE978F89BB70DDC0F61E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:e9:cf:9e:b2:64:39:ab:61:13:5c:46:40:
b4:ca:a6:9d:d4:6f:de:6d:70:61:ca:31:f4:4b:a8:
66:0c:5c:b1:5a:fd:e2:fd:ae:8a:87:3d:fe:e1:20:
28:1d:ca:3f:11:a9:37:75:90:8e:f2:c1:8e:eb:9d:
72:85:f5:42:8d:27:8b:0f:9e:23:3f:cf:cc:a1:5d:
49:c5:99:3d:87:71:3a:c4:4c:42:ad:c7:20:55:43:
ae:9d:0b:a3:96:d5:07:e7:d3:69:7e:c5:ab:6b:b5:
af:ce:69:1f:7e:ca:89:38:f2:b3:1f:5f:f6:2e:7c:
54:17:59:2a:9e:67:39:f9:19:1c:13:07:b5:6b:b8:
e3:73:10:ec:52:a0:7c:76:56:24:66:b5:0e:1d:61:
e9:57:65:a7:a6:d3:d4:db:67:df:31:20:05:d5:72:
20:b3:24:e3:37:46:96:ea:8e:e9:0d:e5:b3:c0:98:
54:d2:c3:b2:61:c1:b2:6c:20:83:70:72:e0:38:03:
1f:31:ba:45:70:02:aa:d0:52:46:b9:e9:c3:e6:b8:
9e:f7:cf:71:80:b2:80:f5:e6:4d:d5:48:fc:63:ee:
61:36:af:cb:47:24:f8:31:83:70:2d:f4:9b:15:4c:
5c:02:1d:8b:93:f7:c8:64:08:4d:0a:1e:a0:2e:ad:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:62:6B:E0:99:FC:92:D5:7E:71:EE:97:8F:89:BB:70:DD:C0:F6:1E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205779.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ce1::/48
Signature Algorithm: sha256WithRSAEncryption
36:fc:9d:e8:42:a7:75:7a:dd:12:e2:32:09:9d:32:68:dc:82:
49:fb:81:bb:a6:cf:ed:29:01:54:83:4b:33:6c:71:5f:e8:e7:
7e:91:bf:ae:3a:6c:4e:4a:7f:e6:a5:60:91:da:0f:c3:e0:5c:
8c:12:68:8b:65:50:ac:b8:a0:40:9f:0b:4f:df:7a:9f:8c:d2:
94:89:0f:e5:4f:43:13:eb:90:c2:f4:08:5e:ff:54:24:63:ce:
f1:2f:65:4d:53:c1:47:ac:01:fb:dd:d4:a5:b2:aa:3f:e9:16:
59:8c:cf:aa:b0:fd:83:d4:d1:fd:7a:dd:b7:52:56:05:6f:b3:
86:73:68:2f:c8:8a:d0:09:6c:3a:7d:57:36:bf:7f:4b:fe:95:
5f:8d:c4:bc:58:e3:14:95:ef:d5:3b:bb:1c:2f:3e:19:b6:e3:
95:59:68:a9:42:ad:25:7d:66:62:37:2d:f7:1b:3d:e4:34:20:
96:11:b3:b9:33:1c:7f:90:b4:3a:ca:8c:c8:23:9d:4d:11:32:
90:a8:31:69:74:e9:2b:6d:ab:37:a7:07:c9:bb:4c:38:f1:f6:
88:a1:d1:2b:95:5b:e4:ad:7a:8a:cb:4f:67:39:a8:32:af:dd:
dd:e2:6f:2b:9c:14:80:ce:f0:61:88:2d:3c:ad:49:66:09:5f:
73:39:3d:20
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUSrXoT7V0/oUndopTVee5jh9Q3nswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA4MTgyMDQ4MTVaFw0yNjA4MTcyMDUzMTVaMDMxMTAvBgNV
BAMTKDlENjI2QkUwOTlGQzkyRDU3RTcxRUU5NzhGODlCQjcwRERDMEY2MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqh+nPnrJkOathE1xGQLTKpp3U
b95tcGHKMfRLqGYMXLFa/eL9roqHPf7hICgdyj8RqTd1kI7ywY7rnXKF9UKNJ4sP
niM/z8yhXUnFmT2HcTrETEKtxyBVQ66dC6OW1Qfn02l+xatrta/OaR9+yok48rMf
X/YufFQXWSqeZzn5GRwTB7VruONzEOxSoHx2ViRmtQ4dYelXZaem09TbZ98xIAXV
ciCzJOM3RpbqjukN5bPAmFTSw7JhwbJsIINwcuA4Ax8xukVwAqrQUka56cPmuJ73
z3GAsoD15k3VSPxj7mE2r8tHJPgxg3At9JsVTFwCHYuT98hkCE0KHqAurf7tAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUnWJr4Jn8ktV+ce6Xj4m7cN3A9h4wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA1Nzc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQzhMA0GCSqGSIb3DQEBCwUAA4IBAQA2/J3oQqd1et0S4jIJnTJo3IJJ+4G7ps/t
KQFUg0szbHFf6Od+kb+uOmxOSn/mpWCR2g/D4FyMEmiLZVCsuKBAnwtP33qfjNKU
iQ/lT0MT65DC9Ahe/1QkY87xL2VNU8FHrAH73dSlsqo/6RZZjM+qsP2D1NH9et23
UlYFb7OGc2gvyIrQCWw6fVc2v39L/pVfjcS8WOMUle/VO7scLz4ZtuOVWWipQq0l
fWZiNy33Gz3kNCCWEbO5Mxx/kLQ6yozII51NETKQqDFpdOkrbas3pwfJu0w48faI
odErlVvkrXqKy09nOagyr93d4m8rnBSAzvBhiC08rUlmCV9zOT0g
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:18 2025 by rpki-client