Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204604.roa
File: AS204604.roa (raw, json)
Hash identifier: k0JuiXiNngudvNt58dPfrWT0Ym5SWiH5uDXP29/jpeA=
Subject key identifier: 49:DD:77:39:9C:05:98:CF:12:50:6C:CF:8C:BC:60:B5:9C:A1:AB:3A
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 171DFD3DFBC4B64ACF6C2BC953B3DAA67AC48915
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204604.roa
Signing time: Wed 11 Mar 2026 17:17:07 +0000
ROA not before: Wed 11 Mar 2026 17:12:07 +0000
ROA not after: Wed 10 Mar 2027 17:17:07 +0000
asID: 204604
IP address blocks: 2a14:7584:a002::/48 maxlen: 48
2a14:7584:a003::/48 maxlen: 48
2a14:7584:a004::/48 maxlen: 48
2a14:7584:a005::/48 maxlen: 48
2a14:7584:a006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1d:fd:3d:fb:c4:b6:4a:cf:6c:2b:c9:53:b3:da:a6:7a:c4:89:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 11 17:12:07 2026 GMT
Not After : Mar 10 17:17:07 2027 GMT
Subject: CN=49DD77399C0598CF12506CCF8CBC60B59CA1AB3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:a6:b2:28:1f:4d:ef:9d:41:04:db:8b:d4:
30:0f:0b:6f:6f:2e:e7:03:3f:e8:3a:e9:02:fe:65:
0c:fa:8d:26:4f:90:86:18:44:67:20:ab:ca:72:26:
29:18:77:c7:42:28:1b:31:2f:2d:29:b3:53:63:89:
e3:46:36:10:1b:2f:f4:83:a3:20:30:a6:af:cc:db:
70:d1:dc:a5:5c:fb:0c:00:87:e7:46:34:37:6b:ab:
38:fa:16:05:12:5e:38:a1:0d:b8:4c:f5:e0:13:f0:
7c:09:86:6c:2f:3b:0b:08:b1:2c:61:72:15:f6:a9:
41:23:a4:01:4f:29:74:b7:a6:74:f1:3e:e7:13:b8:
ef:bc:e4:90:d8:06:ad:0b:f8:77:eb:9d:16:e2:60:
40:f1:9f:2a:bf:70:1b:72:22:e5:91:16:4f:b3:07:
74:20:01:ed:ba:d6:6a:73:f3:47:b9:89:60:55:2d:
ea:f5:a0:62:c4:24:26:2d:be:8a:30:76:ef:a0:3d:
9b:e2:76:7f:11:16:58:4d:17:da:16:52:8a:32:dd:
e0:64:48:dd:fe:af:3b:14:ec:87:df:21:79:0e:b4:
b2:77:ac:55:99:bc:1e:49:a9:36:cf:23:f3:a7:25:
44:7b:41:38:69:bd:08:47:35:8a:59:fd:66:be:ba:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:77:39:9C:05:98:CF:12:50:6C:CF:8C:BC:60:B5:9C:A1:AB:3A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204604.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:a002::-2a14:7584:a006:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:8a:ae:b2:94:ed:a9:70:d4:ec:74:f6:74:c1:94:6f:1b:4e:
95:f9:fb:ef:9f:c1:c9:9c:57:05:5e:6b:25:84:35:d1:34:ce:
97:9a:53:13:51:ef:c1:12:e1:45:ca:15:bb:13:ae:d8:c1:87:
be:92:a9:cd:ad:e2:24:03:31:6f:b7:bb:2b:d6:d8:d5:39:6f:
64:c2:9c:13:b0:f5:59:0f:55:5f:bd:94:5e:4a:50:39:44:88:
cf:64:9e:8a:90:39:1e:7b:0e:17:23:c0:a0:38:34:f8:b9:51:
05:53:08:06:3b:27:4c:72:f3:01:42:31:4f:f4:88:18:48:48:
d1:ac:e3:f0:3c:73:31:ea:d3:31:1d:bf:8d:08:25:c4:78:f4:
bf:37:a2:87:5e:ef:08:d3:c8:cf:8b:a8:16:b0:98:81:27:b8:
20:60:c0:bf:9d:67:95:43:6a:91:d4:37:52:95:33:e4:98:10:
84:f2:96:95:49:3e:88:45:bb:ee:a9:91:34:a4:b4:4e:5c:cd:
b3:c7:48:9d:9c:a1:4e:fc:79:98:0b:fb:5d:15:0f:31:8e:e0:
df:77:14:99:93:08:20:81:ab:e0:38:98:82:6d:60:ab:e6:7e:
e8:61:24:94:72:cc:26:c3:03:e3:c2:bd:88:51:59:a3:84:cc:
af:ad:5e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:22 2026 by rpki-client