Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS204446.roa
File: AS204446.roa (raw, json)
Hash identifier: kP4Zu6awKLVx4oBPQUDvGqa400ZHKf7UGBGAoqsCmD4=
Subject key identifier: 42:AD:FD:54:ED:27:05:C0:80:A5:A3:5F:DB:90:CF:C8:14:A4:EA:03
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 1206746DD00BC348768FDE158DFC140F8E988D47
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS204446.roa
Signing time: Wed 04 Nov 2026 20:32:51 +0000
ROA not before: Wed 04 Nov 2026 20:27:51 +0000
ROA not after: Wed 03 Nov 2027 20:32:51 +0000
asID: 204446
IP address blocks: 2a0e:8f02:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:06:74:6d:d0:0b:c3:48:76:8f:de:15:8d:fc:14:0f:8e:98:8d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:51 2026 GMT
Not After : Nov 3 20:32:51 2027 GMT
Subject: CN=42ADFD54ED2705C080A5A35FDB90CFC814A4EA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:55:fb:ab:dd:9c:ba:d0:d9:54:5c:b3:5f:
21:c2:8f:99:21:ee:73:5a:06:67:bd:b0:61:30:1e:
99:d3:51:dd:30:2a:25:52:be:9a:23:05:0a:41:3c:
1c:3b:e5:fe:35:cb:6a:bc:cb:22:fc:ef:db:5f:69:
6e:d9:bb:fc:0d:a9:aa:24:5b:49:fa:6c:b3:ed:34:
79:a5:6a:ae:91:e6:05:f7:46:c7:3f:92:94:f1:ac:
c1:09:a3:0b:f1:71:71:aa:91:28:65:8f:cf:66:22:
2a:aa:b7:09:16:6b:3c:c0:d7:20:a3:8c:4a:6e:fc:
2a:41:a5:2a:86:ca:eb:a8:50:9d:9e:15:52:60:c3:
0c:4c:f9:8d:37:ad:5a:f9:f6:9c:28:79:7c:85:16:
2f:55:13:61:15:29:53:91:6a:1c:bb:6b:4e:1a:d0:
ab:64:fa:bf:af:af:9f:a9:35:24:3b:cb:34:42:6c:
68:fc:75:bb:b8:66:ff:8b:02:3f:8c:90:89:cc:94:
1c:80:31:d3:ab:8c:df:f1:3e:bc:3c:d8:01:66:76:
b6:34:19:4c:8f:9e:50:1d:b5:d5:39:47:ff:99:c8:
4a:9e:37:73:07:43:c9:43:29:18:82:70:9f:31:bb:
20:ce:4b:3c:07:fe:d6:10:03:a7:a5:b5:20:a1:2a:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AD:FD:54:ED:27:05:C0:80:A5:A3:5F:DB:90:CF:C8:14:A4:EA:03
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS204446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:1000::/40
Signature Algorithm: sha256WithRSAEncryption
3d:38:ff:ac:fb:92:de:ea:07:7b:79:1f:46:83:d0:95:f4:86:
94:b3:f5:bf:44:fc:e2:fb:85:a8:0d:ca:84:07:6e:58:81:19:
91:59:1d:8c:4a:e9:9f:a0:45:03:57:34:a5:41:90:a2:2b:09:
a4:31:90:56:a9:2c:d1:e0:36:7b:fe:3e:a4:d5:1d:b8:e3:d2:
f9:5b:16:e0:82:c6:62:45:d5:e6:e3:c7:20:00:cc:d9:32:48:
a7:2c:d2:6d:25:72:d7:2f:9c:3c:54:53:d4:f4:a8:3e:51:24:
3f:2c:12:be:77:9b:11:fb:56:77:25:2e:50:19:5f:b4:62:54:
60:e7:49:1c:4a:7f:60:b6:38:46:92:1a:71:56:1d:ff:55:56:
bb:77:1c:90:9b:1d:e9:ee:d2:ae:cf:90:26:3e:73:e0:ad:9a:
f3:67:00:aa:44:42:82:7b:4f:9b:5b:73:8d:89:52:1a:c5:5d:
56:5b:f6:59:3d:46:bf:6d:cc:d2:8c:1c:25:99:65:43:47:2f:
9f:0a:a9:7b:18:01:72:0c:ff:55:46:04:ba:37:b6:68:ce:aa:
a2:1d:55:9a:69:cd:78:de:f9:ff:6a:c9:22:bf:01:d8:0b:a0:
7b:b2:ba:b3:d2:05:47:c4:be:c7:f7:88:c6:7f:13:84:de:47:
6f:ad:da:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUEgZ0bdALw0h2j94VjfwUD46YjUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NTFaFw0yNzExMDMyMDMyNTFaMDMxMTAvBgNV
BAMTKDQyQURGRDU0RUQyNzA1QzA4MEE1QTM1RkRCOTBDRkM4MTRBNEVBMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDikFX7q92cutDZVFyzXyHCj5kh
7nNaBme9sGEwHpnTUd0wKiVSvpojBQpBPBw75f41y2q8yyL879tfaW7Zu/wNqaok
W0n6bLPtNHmlaq6R5gX3Rsc/kpTxrMEJowvxcXGqkShlj89mIiqqtwkWazzA1yCj
jEpu/CpBpSqGyuuoUJ2eFVJgwwxM+Y03rVr59pwoeXyFFi9VE2EVKVORahy7a04a
0Ktk+r+vr5+pNSQ7yzRCbGj8dbu4Zv+LAj+MkInMlByAMdOrjN/xPrw82AFmdrY0
GUyPnlAdtdU5R/+ZyEqeN3MHQ8lDKRiCcJ8xuyDOSzwH/tYQA6eltSChKpwJAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUQq39VO0nBcCApaNf25DPyBSk6gMwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIwNDQ0Ni5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoO
jwIQMA0GCSqGSIb3DQEBCwUAA4IBAQA9OP+s+5Le6gd7eR9Gg9CV9IaUs/W/RPzi
+4WoDcqEB25YgRmRWR2MSumfoEUDVzSlQZCiKwmkMZBWqSzR4DZ7/j6k1R2449L5
WxbggsZiRdXm48cgAMzZMkinLNJtJXLXL5w8VFPU9Kg+USQ/LBK+d5sR+1Z3JS5Q
GV+0YlRg50kcSn9gtjhGkhpxVh3/VVa7dxyQmx3p7tKuz5AmPnPgrZrzZwCqREKC
e0+bW3ONiVIaxV1WW/ZZPUa/bczSjBwlmWVDRy+fCql7GAFyDP9VRgS6N7Zozqqi
HVWaac143vn/askivwHYC6B7srqz0gVHxL7H94jGfxOE3kdvrdpX
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:10 2026 by rpki-client