Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205987.roa
File: AS205987.roa (raw, json)
Hash identifier: RWcYCtCPvxPwvTCnRRwTSg6n3o+JnNUDtlTPcPPDp4U=
Subject key identifier: 26:C2:92:7F:D2:4F:B2:4D:BD:84:BC:1B:FA:B1:7A:21:D2:4C:E6:A9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 601F506AA734CD6C26805396358DB35E38080D9A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205987.roa
Signing time: Mon 20 Jul 2026 21:08:52 +0000
ROA not before: Mon 20 Jul 2026 21:03:52 +0000
ROA not after: Mon 19 Jul 2027 21:08:52 +0000
asID: 205987
IP address blocks: 2a0f:85c1:cdb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:1f:50:6a:a7:34:cd:6c:26:80:53:96:35:8d:b3:5e:38:08:0d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:52 2026 GMT
Not After : Jul 19 21:08:52 2027 GMT
Subject: CN=26C2927FD24FB24DBD84BC1BFAB17A21D24CE6A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:c6:85:b6:0d:b6:cc:66:6c:fd:d0:a1:16:
48:fc:ad:04:40:f3:fe:ce:5d:9f:02:45:c8:bb:3b:
b1:69:70:6c:3b:0a:2e:22:91:4e:16:da:7c:44:e5:
65:cd:48:3e:9a:33:85:6e:e4:fa:7f:31:fd:f8:49:
7e:73:66:a2:c7:d5:1b:d4:43:be:94:ce:3a:3d:fb:
68:e0:c3:e5:02:46:93:07:35:46:87:7f:2a:57:bb:
8d:d2:1a:80:2e:23:e3:25:a5:3d:87:42:22:f5:47:
9f:5e:71:cf:31:50:14:a6:72:2e:a6:bb:8e:f1:9b:
70:05:86:1a:84:e1:78:38:bb:81:73:cf:9e:28:9e:
73:ab:97:d3:39:e3:6d:80:4d:81:4b:80:6a:d7:8c:
89:3a:60:7f:27:fc:3c:6d:7f:74:cd:97:12:51:50:
92:7b:80:fc:ae:f7:00:f2:84:05:1e:c4:65:83:bc:
92:c6:31:60:bd:5c:58:a7:a4:e5:b5:3c:93:5d:64:
e6:b6:f6:1e:68:a6:e1:49:ae:fe:6f:c5:a9:b0:a6:
fd:9b:2e:1b:ab:58:94:6d:b0:93:14:fd:2c:a5:86:
e1:66:ec:1a:1f:bf:58:fb:4d:da:02:89:bb:6e:a7:
da:c5:71:e9:d1:87:ed:ad:53:ca:b4:19:65:ae:ea:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C2:92:7F:D2:4F:B2:4D:BD:84:BC:1B:FA:B1:7A:21:D2:4C:E6:A9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cdb::/48
Signature Algorithm: sha256WithRSAEncryption
9f:08:b0:d4:5c:c8:5a:da:f0:d7:7c:a8:3d:1b:2e:27:a1:ac:
43:04:93:23:35:c5:ab:0a:59:68:09:8a:6a:bc:60:6c:7d:4d:
cf:cf:c1:10:3b:47:8e:3f:f0:86:fe:cf:6e:5a:c7:d6:25:ee:
4b:36:25:9f:a0:83:9c:ea:8c:b3:db:d8:ff:db:2f:df:cd:45:
dc:a0:bb:b8:86:3f:3d:dc:4e:95:13:c3:88:15:60:91:f8:ff:
be:85:23:54:f9:cc:72:17:b1:43:71:6a:fa:db:ec:19:2f:ac:
76:33:2b:aa:91:72:08:e0:40:33:30:3f:0d:36:2c:03:9c:ae:
0a:31:7b:87:21:d4:30:e4:64:db:ac:88:6e:86:d5:6e:3c:b6:
9b:87:29:bc:b0:fc:cc:41:2b:1f:07:85:9c:30:61:85:57:8f:
37:03:01:ad:0b:ad:1f:e5:1b:23:ec:36:59:0f:fa:19:95:8e:
27:26:6c:98:92:21:c3:3f:de:b9:f7:26:76:2c:77:81:41:c0:
a7:48:4c:34:75:d0:d9:dd:24:88:bf:89:37:53:bf:f6:5b:49:
7c:d4:25:a3:a2:23:c7:d3:0b:1e:6d:07:cb:e3:52:40:f5:87:
52:00:ac:62:8b:c9:e8:da:a0:e5:61:9e:ae:2f:1d:45:cf:20:
14:93:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:51 2026 by rpki-client