Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205987.roa
File: AS205987.roa (raw, json)
Hash identifier: vyT0ooSk3teOdFmV1W5FG6/lSV1a8GfczrO6x7X3AeY=
Subject key identifier: E0:58:B0:3A:5A:02:A3:7F:54:C2:64:36:A4:BE:96:9D:8E:F4:F2:64
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 309C39ECA48C4FCC5E9D1F4D05AC073C3CC43EFB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205987.roa
Signing time: Mon 18 Aug 2025 20:53:29 +0000
ROA not before: Mon 18 Aug 2025 20:48:29 +0000
ROA not after: Mon 17 Aug 2026 20:53:29 +0000
asID: 205987
IP address blocks: 2a0f:85c1:cdb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9c:39:ec:a4:8c:4f:cc:5e:9d:1f:4d:05:ac:07:3c:3c:c4:3e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 20:48:29 2025 GMT
Not After : Aug 17 20:53:29 2026 GMT
Subject: CN=E058B03A5A02A37F54C26436A4BE969D8EF4F264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a4:80:ef:27:58:9d:21:09:88:58:c8:dc:92:
7f:6c:f7:14:f6:5f:81:8c:f0:c1:a7:6d:43:ce:f7:
e9:09:d1:5e:71:07:bb:ac:69:96:a6:30:ab:5a:6f:
1c:f6:80:7b:16:9e:d3:63:87:c4:7d:9d:35:68:99:
4e:60:a7:ea:fa:97:88:fb:75:d2:df:81:73:27:cb:
9e:7a:0f:7f:85:52:58:cc:e2:db:89:0e:b0:01:bb:
91:67:b1:02:44:2d:ae:cb:50:d8:79:d8:67:6e:28:
57:31:aa:49:35:6c:30:d5:3b:21:8a:10:52:ce:f4:
17:bb:55:e6:b4:db:20:09:35:da:9a:34:36:3f:6e:
67:4a:16:17:f4:ea:19:01:50:8d:79:dd:1e:f7:97:
39:c5:e9:2d:33:88:dd:6f:25:ae:97:51:2e:e7:28:
0b:b1:59:ce:ec:2d:52:00:dd:47:3f:47:b3:81:ea:
ac:a1:0b:bb:77:7e:84:33:a1:f6:39:72:cd:ed:66:
fc:ee:1f:91:c6:d0:43:7e:9a:75:3b:80:ea:fe:31:
95:ec:02:1f:0c:ce:e7:6c:85:9b:1d:7f:cc:6b:1f:
55:2c:81:1d:2b:47:a2:18:a5:8f:10:d9:ec:3a:40:
ca:34:b3:f6:49:5e:2f:15:36:02:2c:8b:6a:93:36:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:58:B0:3A:5A:02:A3:7F:54:C2:64:36:A4:BE:96:9D:8E:F4:F2:64
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cdb::/48
Signature Algorithm: sha256WithRSAEncryption
9a:31:9a:20:2f:f3:42:ae:3b:f5:b9:31:8b:7f:8a:bc:cb:11:
a2:01:ce:16:fe:d4:c8:6a:ca:0a:6e:44:11:0e:cf:fc:e5:09:
58:01:4b:f3:9c:f4:ec:e0:4d:8c:9e:4d:cf:9e:1e:92:dd:0c:
69:59:f1:f6:ea:4c:ba:ae:9a:ae:52:ea:55:59:c5:af:81:d2:
e7:28:76:b0:6c:ac:3c:41:16:be:14:6f:8d:33:23:cf:14:53:
5c:61:57:07:4a:d8:31:af:66:b3:9f:6d:24:cc:af:98:1a:e4:
5e:96:ac:bb:0b:92:4e:93:fa:3c:ca:37:f6:f5:ce:76:d9:d4:
43:a3:b4:e7:54:90:c2:f1:34:0f:1e:00:60:5c:9f:ed:55:88:
41:0c:a9:6b:6a:cb:5d:cb:0b:59:35:61:2d:e1:9a:00:65:8c:
a9:88:5c:ae:4f:e0:dc:91:f0:d1:e7:2c:0d:b8:4b:81:ec:53:
96:58:b7:dd:54:58:08:90:79:2b:8f:1c:0e:d7:d4:c5:50:a0:
ba:50:c8:30:c6:32:83:c2:2b:9c:7f:ca:27:ef:02:6b:e8:25:
61:b2:9e:b4:e6:02:ac:ab:73:d6:89:34:cb:64:0c:aa:8a:2c:
6a:4a:c1:89:a5:28:1f:94:d7:61:54:e0:05:d8:e9:1d:e2:37:
c2:1e:70:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUMJw57KSMT8xenR9NBawHPDzEPvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA4MTgyMDQ4MjlaFw0yNjA4MTcyMDUzMjlaMDMxMTAvBgNV
BAMTKEUwNThCMDNBNUEwMkEzN0Y1NEMyNjQzNkE0QkU5NjlEOEVGNEYyNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6pIDvJ1idIQmIWMjckn9s9xT2
X4GM8MGnbUPO9+kJ0V5xB7usaZamMKtabxz2gHsWntNjh8R9nTVomU5gp+r6l4j7
ddLfgXMny556D3+FUljM4tuJDrABu5FnsQJELa7LUNh52GduKFcxqkk1bDDVOyGK
EFLO9Be7Vea02yAJNdqaNDY/bmdKFhf06hkBUI153R73lznF6S0ziN1vJa6XUS7n
KAuxWc7sLVIA3Uc/R7OB6qyhC7t3foQzofY5cs3tZvzuH5HG0EN+mnU7gOr+MZXs
Ah8MzudshZsdf8xrH1UsgR0rR6IYpY8Q2ew6QMo0s/ZJXi8VNgIsi2qTNhprAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU4FiwOloCo39UwmQ2pL6WnY708mQwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA1OTg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQzbMA0GCSqGSIb3DQEBCwUAA4IBAQCaMZogL/NCrjv1uTGLf4q8yxGiAc4W/tTI
asoKbkQRDs/85QlYAUvznPTs4E2Mnk3Pnh6S3QxpWfH26ky6rpquUupVWcWvgdLn
KHawbKw8QRa+FG+NMyPPFFNcYVcHStgxr2azn20kzK+YGuRelqy7C5JOk/o8yjf2
9c522dRDo7TnVJDC8TQPHgBgXJ/tVYhBDKlrastdywtZNWEt4ZoAZYypiFyuT+Dc
kfDR5ywNuEuB7FOWWLfdVFgIkHkrjxwO19TFUKC6UMgwxjKDwiucf8on7wJr6CVh
sp605gKsq3PWiTTLZAyqiixqSsGJpSgflNdhVOAF2Okd4jfCHnBt
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:58 2025 by rpki-client