Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205369.roa
File: AS205369.roa (raw, json)
Hash identifier: IaaL8yk1RdnPBndJjOC7b0YTCU+DgMf1VAaIrgBw8K4=
Subject key identifier: 75:3A:73:16:B1:62:81:61:90:43:26:6E:03:4E:C9:5E:85:14:81:0B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1248323755C8869A2470696E930AA531FA19C63B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205369.roa
Signing time: Tue 19 Aug 2025 10:20:07 +0000
ROA not before: Tue 19 Aug 2025 10:15:07 +0000
ROA not after: Tue 18 Aug 2026 10:20:07 +0000
asID: 205369
IP address blocks: 2a14:7581:ffb::/48 maxlen: 48
2a14:7583:f200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:48:32:37:55:c8:86:9a:24:70:69:6e:93:0a:a5:31:fa:19:c6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 19 10:15:07 2025 GMT
Not After : Aug 18 10:20:07 2026 GMT
Subject: CN=753A7316B16281619043266E034EC95E8514810B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:b5:60:93:37:9f:6b:b5:a6:a8:1b:cb:68:
86:f9:07:17:86:bf:e2:91:85:db:b1:73:a4:26:dd:
2b:71:89:77:88:63:6a:5f:e0:90:ed:50:e2:e6:02:
81:0e:ce:96:34:e2:1b:cf:3a:05:c0:15:97:e5:76:
8d:7a:a7:fb:62:ef:d9:18:bc:92:aa:86:72:c1:f2:
1b:d1:c5:9e:df:e4:c2:a7:0f:a5:d6:54:2e:8b:4e:
2e:ea:05:d7:a2:35:4c:d9:83:bb:a3:5d:2d:f2:a8:
b9:dc:f6:9e:41:a0:82:3a:63:a6:a5:67:34:ed:9a:
6e:84:40:e6:dc:7d:b7:41:65:26:b9:d8:16:11:67:
4d:73:c5:8a:bd:35:a1:9f:1c:74:57:c3:79:3e:64:
fe:6b:48:6d:bf:b4:dd:29:6c:b2:5d:a9:72:6c:d9:
e2:7c:45:77:5d:8c:07:31:94:82:9b:c3:b8:cf:5b:
a6:34:91:b3:7d:f8:b5:11:46:48:f7:c4:bf:44:b6:
4d:ed:60:33:ba:51:81:e2:eb:c1:95:b2:d6:1e:36:
f5:00:da:9a:b7:a9:9c:2b:93:f2:04:48:31:1c:c5:
20:53:00:03:9c:21:81:9e:23:bf:a2:12:43:d2:eb:
99:61:41:24:0f:eb:a3:69:7c:e9:d7:45:82:21:66:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:73:16:B1:62:81:61:90:43:26:6E:03:4E:C9:5E:85:14:81:0B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ffb::/48
2a14:7583:f200::/40
Signature Algorithm: sha256WithRSAEncryption
00:91:cf:7e:6e:d6:06:89:1d:8d:fe:69:85:13:93:7c:1f:6e:
30:7a:08:fb:4d:00:45:f6:37:33:e5:74:f6:3f:92:26:f1:2e:
d2:c6:ba:11:f5:54:f4:3d:19:fa:a5:13:8e:eb:18:21:76:cb:
26:64:e2:6c:82:db:1e:b0:67:fa:22:6f:53:bb:ce:b8:b3:d7:
64:09:82:b0:a4:8c:3e:d9:73:4d:e3:31:b2:5d:54:ff:e3:22:
26:98:1a:d1:01:79:52:1d:6b:3e:96:32:9a:ff:50:8d:60:e5:
8a:ac:a9:75:54:9a:82:ee:a9:6d:5f:3e:e4:5f:20:98:2f:de:
11:ef:42:fd:54:4b:00:b8:b0:08:72:b6:28:f4:8a:b3:28:3f:
22:94:1d:48:f8:68:6d:9b:cd:83:0d:06:3e:e3:73:e4:0c:dc:
cc:a7:75:e1:82:c0:60:ef:18:b8:a2:3b:fe:3d:b5:03:d6:20:
ec:40:99:d3:f0:dc:a0:0a:e0:69:04:b2:63:f9:44:36:11:24:
53:75:30:51:b7:09:d6:2e:91:26:f4:03:03:de:96:4d:36:34:
f2:83:60:80:97:5d:73:c9:ac:63:1b:49:84:d2:40:5e:92:7d:
29:b8:ed:53:28:cd:17:04:26:77:2d:b1:a0:eb:d8:ca:d0:75:
b1:91:73:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:17 2025 by rpki-client