Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205745.roa
File: AS205745.roa (raw, json)
Hash identifier: zsVy81xnenBnijmQaX10BuZPjUFZpFI1y8Mb8ngeSbs=
Subject key identifier: 40:5F:4F:47:DC:78:4C:89:50:B2:5C:50:C7:19:2B:18:47:4A:52:82
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1366BF339067B95DDAED6636C4741B22CA694FB4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205745.roa
Signing time: Thu 12 Jun 2025 14:16:45 +0000
ROA not before: Thu 12 Jun 2025 14:11:45 +0000
ROA not after: Thu 11 Jun 2026 14:16:45 +0000
asID: 205745
IP address blocks: 2a06:2b82::/32 maxlen: 48
2a0b:8702::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:66:bf:33:90:67:b9:5d:da:ed:66:36:c4:74:1b:22:ca:69:4f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 12 14:11:45 2025 GMT
Not After : Jun 11 14:16:45 2026 GMT
Subject: CN=405F4F47DC784C8950B25C50C7192B18474A5282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:e4:5b:65:5b:fe:c0:ea:9a:21:53:89:41:
d7:1e:27:61:85:88:3c:de:be:c8:1b:17:70:77:c7:
76:33:48:4e:84:e3:eb:53:94:0a:4b:7d:a7:32:42:
45:b6:70:68:5f:18:e1:6e:43:08:f6:2d:a5:c1:ae:
cf:c0:79:16:c6:91:ea:a9:a3:c9:cb:41:eb:cf:e0:
4e:15:b8:b8:4c:44:d1:b2:aa:4b:8e:fc:7f:be:11:
86:02:12:81:92:ce:9f:b3:d7:09:75:c8:f8:cb:92:
73:21:90:04:d2:a2:e0:1b:aa:79:97:aa:e8:0d:ba:
69:b3:68:2d:1e:13:45:30:01:12:57:b1:6a:26:86:
95:01:b6:6b:f9:ee:0f:13:ae:01:c7:3e:3e:eb:3b:
b1:ec:fd:08:b5:bd:39:1e:f2:b0:6f:d1:59:29:a2:
26:78:e2:68:2f:60:15:36:2b:e5:f0:3c:c7:df:07:
c8:1d:f5:ee:78:f5:ae:95:c1:fc:3b:d1:1e:7f:56:
74:90:55:4e:0d:87:9e:62:a2:18:78:bd:74:8a:5e:
3a:14:a7:af:1b:a9:ee:89:4c:3b:d7:1e:3f:f4:dd:
9f:e8:53:41:ac:a1:08:80:d2:d1:c3:7d:66:2b:30:
5c:8f:5d:96:1e:c4:c7:e4:57:1b:a3:7c:b7:98:59:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5F:4F:47:DC:78:4C:89:50:B2:5C:50:C7:19:2B:18:47:4A:52:82
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205745.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:2b82::/32
2a0b:8702::/32
Signature Algorithm: sha256WithRSAEncryption
3f:ce:cb:57:e9:7f:34:88:2f:ec:fa:85:91:c4:e2:0d:50:38:
07:b3:e4:7c:01:9e:55:0c:dd:a6:5a:c6:48:84:55:fa:7f:76:
ab:8b:af:f1:b1:85:6c:90:68:85:df:1b:a6:24:96:9f:3f:f0:
53:8b:6d:8d:39:7c:0e:8f:0b:12:12:e7:fa:cc:5c:29:3c:c1:
e4:07:79:c0:32:00:6b:3e:d7:7d:f2:b4:4e:94:28:00:97:3d:
7b:01:64:1f:a3:e9:26:b7:b9:56:6d:b7:7a:0a:37:a2:c1:4e:
a0:9e:51:60:01:0d:e5:79:42:e3:9f:d0:28:31:0e:b3:f6:eb:
2e:c3:f9:39:49:5b:16:8a:1a:13:66:87:75:00:2c:1b:70:8e:
cc:77:67:88:c9:4a:8c:19:72:ff:fa:2d:de:f1:f4:d9:d4:da:
ac:fa:19:a8:98:67:b3:27:de:56:cb:1d:6f:31:ba:8e:ca:a0:
c5:cd:36:ec:80:dd:85:41:46:b5:cd:e4:b7:7b:50:da:46:79:
21:1f:7a:8c:10:49:dc:0e:47:10:21:34:8c:77:7f:44:5e:fc:
74:fb:5b:1e:c5:d3:91:12:2e:eb:1c:58:bf:6c:bd:a1:8d:db:
e1:c7:07:0e:99:69:bc:a6:35:d4:13:3e:88:98:e6:1e:b1:bc:
75:08:f5:7a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUE2a/M5BnuV3a7WY2xHQbIsppT7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA2MTIxNDExNDVaFw0yNjA2MTExNDE2NDVaMDMxMTAvBgNV
BAMTKDQwNUY0RjQ3REM3ODRDODk1MEIyNUM1MEM3MTkyQjE4NDc0QTUyODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXORbZVv+wOqaIVOJQdceJ2GF
iDzevsgbF3B3x3YzSE6E4+tTlApLfacyQkW2cGhfGOFuQwj2LaXBrs/AeRbGkeqp
o8nLQevP4E4VuLhMRNGyqkuO/H++EYYCEoGSzp+z1wl1yPjLknMhkATSouAbqnmX
qugNummzaC0eE0UwARJXsWomhpUBtmv57g8TrgHHPj7rO7Hs/Qi1vTke8rBv0Vkp
oiZ44mgvYBU2K+XwPMffB8gd9e549a6Vwfw70R5/VnSQVU4Nh55iohh4vXSKXjoU
p68bqe6JTDvXHj/03Z/oU0GsoQiA0tHDfWYrMFyPXZYexMfkVxujfLeYWUjnAgMB
AAGjggISMIICDjAdBgNVHQ4EFgQUQF9PR9x4TIlQslxQxxkrGEdKUoIwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA1NzQ1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgYr
ggMFACoLhwIwDQYJKoZIhvcNAQELBQADggEBAD/Oy1fpfzSIL+z6hZHE4g1QOAez
5HwBnlUM3aZaxkiEVfp/dquLr/GxhWyQaIXfG6Yklp8/8FOLbY05fA6PCxIS5/rM
XCk8weQHecAyAGs+133ytE6UKACXPXsBZB+j6Sa3uVZtt3oKN6LBTqCeUWABDeV5
QuOf0CgxDrP26y7D+TlJWxaKGhNmh3UALBtwjsx3Z4jJSowZcv/6Ld7x9NnU2qz6
GaiYZ7Mn3lbLHW8xuo7KoMXNNuyA3YVBRrXN5Ld7UNpGeSEfeowQSdwORxAhNIx3
f0Re/HT7Wx7F05ESLuscWL9svaGN2+HHBw6ZabymNdQTPoiY5h6xvHUI9Xo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:44:47 2025 by rpki-client