Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205271.roa
File: AS205271.roa (raw, json)
Hash identifier: hy6/GbBH9gbCq66lRvbGgRzvMOYALvSgYh3WTJ3pUlU=
Subject key identifier: 7A:64:B0:2D:F8:58:4A:48:22:E0:89:26:EC:0B:FB:C7:B9:C4:C8:F6
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 75E86BFC5947946C285CC1BA274E9AE71978428C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205271.roa
Signing time: Wed 22 Jul 2026 12:27:36 +0000
ROA not before: Wed 22 Jul 2026 12:22:36 +0000
ROA not after: Wed 21 Jul 2027 12:27:36 +0000
asID: 205271
IP address blocks: 2a14:7580:fff9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e8:6b:fc:59:47:94:6c:28:5c:c1:ba:27:4e:9a:e7:19:78:42:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 22 12:22:36 2026 GMT
Not After : Jul 21 12:27:36 2027 GMT
Subject: CN=7A64B02DF8584A4822E08926EC0BFBC7B9C4C8F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:b4:d1:a2:8f:71:dc:1e:f2:db:96:63:34:
41:a4:c3:6e:96:46:f6:30:89:c9:9a:20:0e:56:e7:
86:96:11:c4:28:c7:b0:63:9f:83:49:b4:da:65:12:
f9:17:6e:87:82:2f:e1:c9:9f:a6:b9:ab:45:96:f7:
2d:b0:c4:56:e6:83:0c:0b:29:0c:1f:4e:1d:e5:ea:
4a:c1:7c:ba:42:8d:df:d4:2a:04:20:04:30:61:5a:
2e:c6:da:69:cc:0e:a9:b0:29:ab:2f:e3:87:82:b7:
8d:59:bd:c4:4b:b7:7a:ee:7f:d7:72:ab:d8:58:c5:
48:2b:75:94:8f:04:df:9d:83:64:1c:bc:98:5d:fa:
fc:2f:74:67:f5:fc:0f:cd:d4:1d:a2:ff:a3:04:19:
13:de:8f:4b:fe:2b:36:47:8b:40:c7:aa:4b:c3:68:
3b:d6:76:ca:51:be:1b:9c:84:d8:33:c9:b5:3b:fc:
52:f9:4d:4c:d8:57:4f:72:5b:c8:3b:8b:27:b3:ef:
a9:d1:d9:db:57:ee:d9:51:53:be:c5:fa:05:0b:63:
e2:61:97:7b:94:71:6e:cf:2a:e7:92:a8:30:84:c5:
dc:09:89:b1:a2:26:aa:37:fe:bc:27:36:4b:c7:98:
2d:e2:1e:a8:7d:f1:9e:c6:ad:75:88:6b:0c:45:7c:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:64:B0:2D:F8:58:4A:48:22:E0:89:26:EC:0B:FB:C7:B9:C4:C8:F6
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205271.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff9::/48
Signature Algorithm: sha256WithRSAEncryption
35:46:b8:cd:3e:40:f7:b7:7f:07:ce:40:ed:43:ff:66:ee:3e:
93:94:d5:44:90:d5:cd:f8:16:b5:46:94:bd:7b:06:5e:45:f8:
f3:41:d5:75:78:1b:0f:a4:f6:ba:54:50:31:fa:03:ee:54:98:
11:49:f2:22:ea:8d:37:bf:8d:c4:82:a0:11:42:8b:74:6f:aa:
3b:22:cc:1f:cc:36:8f:43:16:db:2b:1e:e2:3a:73:38:b1:7e:
4d:a1:48:be:25:9d:58:c3:e3:eb:57:40:1b:c2:a8:9c:04:47:
00:ed:16:47:2e:74:5d:d8:29:47:1e:ea:53:fd:dd:56:a3:d2:
a7:a4:11:02:af:a2:ff:b6:91:6b:a2:78:75:93:fe:1e:60:ce:
15:ab:a4:96:95:c1:7b:d7:83:a0:14:e4:0c:92:c9:cb:48:02:
8c:3b:db:f6:22:8e:f2:3b:01:81:a1:db:d7:c4:c5:a9:28:f6:
cc:ab:9d:f8:6b:67:e6:1e:8b:28:89:6e:db:6f:cb:03:67:8f:
67:44:d8:20:75:d4:9b:ea:7d:3c:99:c0:31:c4:36:21:f9:34:
ea:e8:c2:8b:c1:5d:d4:6e:21:4d:4d:c6:dc:e5:e9:66:32:20:
95:fd:e6:30:8f:64:a4:be:f2:0c:7f:54:84:8e:4c:78:f4:88:
fb:15:24:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:42:07 2026 by rpki-client