Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204291.roa
File: AS204291.roa (raw, json)
Hash identifier: ROBiQqG290A7gI2qePMWqG8UDt/M3bJk21HRrpM1nnI=
Subject key identifier: 50:DD:D6:B0:5D:59:54:15:3C:6C:4F:62:49:00:7D:55:4F:48:D9:F2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 626E2D4E22D8D4A82E12E90A2973203609465D02
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204291.roa
Signing time: Fri 24 Jul 2026 12:49:14 +0000
ROA not before: Fri 24 Jul 2026 12:44:14 +0000
ROA not after: Fri 23 Jul 2027 12:49:14 +0000
asID: 204291
IP address blocks: 2a13:9500:ca::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6e:2d:4e:22:d8:d4:a8:2e:12:e9:0a:29:73:20:36:09:46:5d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 24 12:44:14 2026 GMT
Not After : Jul 23 12:49:14 2027 GMT
Subject: CN=50DDD6B05D5954153C6C4F6249007D554F48D9F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:32:cd:5d:f4:a6:f4:d2:4b:40:ea:0d:af:
f9:f8:58:73:e0:65:b6:2d:27:2d:4d:48:63:3f:94:
66:84:2f:0b:a9:fb:63:cb:48:16:9e:d4:07:c7:0f:
f8:f1:9c:af:5e:a2:fc:1a:46:d3:c1:3c:7a:54:6c:
38:d0:d7:80:17:35:53:7d:a0:04:c7:19:4e:e5:f8:
7e:67:ed:84:d5:d8:81:34:05:14:21:06:ad:02:ec:
49:db:44:7a:e8:1e:38:0f:e0:19:c6:63:17:0f:83:
d7:4d:ad:02:04:7e:a3:c6:6c:4d:8f:75:96:e2:04:
29:61:51:91:20:ef:9a:6d:40:e8:c4:24:a8:d7:88:
e0:83:20:94:6f:8b:8c:20:23:ec:51:a9:09:08:3a:
02:f3:58:1c:45:c4:28:4c:75:6b:5a:da:88:33:d5:
30:2a:a1:ab:7c:eb:2e:3c:08:f5:eb:01:34:61:b1:
72:b9:bc:c6:20:74:ef:bf:12:dc:85:e7:9b:68:ef:
a5:f5:2d:b4:be:5f:ce:de:cc:84:ce:c4:1f:ec:f5:
93:22:ac:04:1a:7e:be:bf:92:91:44:df:e6:e3:06:
07:fa:e9:12:4b:ba:51:d9:f9:9a:d7:b6:64:3e:bc:
f3:7f:3e:7e:d6:42:73:27:35:16:31:cb:28:8f:a7:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DD:D6:B0:5D:59:54:15:3C:6C:4F:62:49:00:7D:55:4F:48:D9:F2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204291.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:ca::/48
Signature Algorithm: sha256WithRSAEncryption
15:8b:46:0b:d0:04:ac:74:99:45:a5:9d:23:f6:18:6f:34:8c:
00:61:4f:4f:48:61:2d:65:04:6c:a1:f0:5e:e4:e8:99:92:08:
9a:4f:40:2a:5e:c3:17:54:16:e1:50:59:ec:0d:75:ea:7d:fa:
7d:72:ce:e7:d9:31:ba:b7:d4:27:71:26:89:15:e7:f9:1f:ed:
3f:6c:f9:93:28:28:b9:e1:d6:37:7f:5b:86:02:9a:93:a6:31:
23:39:e2:e0:d6:66:51:5f:56:80:b4:bc:52:40:80:7b:33:b9:
d3:3d:ac:ad:22:24:50:0d:04:2c:82:19:13:b2:c8:7a:f8:41:
c9:4a:7f:4a:f2:8b:71:2f:bd:49:ea:31:d5:97:0b:ff:d4:25:
ce:cc:91:00:f2:15:a6:b3:c9:dd:d1:7d:26:fc:8a:a6:9a:9c:
09:b4:b6:c6:48:1c:f9:22:59:92:e8:5d:78:07:72:c8:20:09:
d4:97:67:ff:c1:db:09:fe:6c:90:2d:0f:54:8b:94:b0:db:11:
3b:e1:ba:54:5f:9a:d9:16:a7:c9:05:69:1e:6c:c4:da:16:ec:
1b:f3:f3:c5:bd:cc:be:65:90:32:50:48:90:42:26:f7:87:c1:
7f:ed:96:3d:27:95:27:18:7f:db:fb:50:ad:39:81:00:2c:a4:
88:f2:5d:85
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUYm4tTiLY1KguEukKKXMgNglGXQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MjQxMjQ0MTRaFw0yNzA3MjMxMjQ5MTRaMDMxMTAvBgNV
BAMTKDUwRERENkIwNUQ1OTU0MTUzQzZDNEY2MjQ5MDA3RDU1NEY0OEQ5RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsazLNXfSm9NJLQOoNr/n4WHPg
ZbYtJy1NSGM/lGaELwup+2PLSBae1AfHD/jxnK9eovwaRtPBPHpUbDjQ14AXNVN9
oATHGU7l+H5n7YTV2IE0BRQhBq0C7EnbRHroHjgP4BnGYxcPg9dNrQIEfqPGbE2P
dZbiBClhUZEg75ptQOjEJKjXiOCDIJRvi4wgI+xRqQkIOgLzWBxFxChMdWta2ogz
1TAqoat86y48CPXrATRhsXK5vMYgdO+/EtyF55to76X1LbS+X87ezITOxB/s9ZMi
rAQafr6/kpFE3+bjBgf66RJLulHZ+ZrXtmQ+vPN/Pn7WQnMnNRYxyyiPp2ebAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUUN3WsF1ZVBU8bE9iSQB9VU9I2fIwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0MjkxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AADKMA0GCSqGSIb3DQEBCwUAA4IBAQAVi0YL0ASsdJlFpZ0j9hhvNIwAYU9PSGEt
ZQRsofBe5OiZkgiaT0AqXsMXVBbhUFnsDXXqffp9cs7n2TG6t9QncSaJFef5H+0/
bPmTKCi54dY3f1uGApqTpjEjOeLg1mZRX1aAtLxSQIB7M7nTPaytIiRQDQQsghkT
ssh6+EHJSn9K8otxL71J6jHVlwv/1CXOzJEA8hWms8nd0X0m/IqmmpwJtLbGSBz5
IlmS6F14B3LIIAnUl2f/wdsJ/myQLQ9Ui5Sw2xE74bpUX5rZFqfJBWkebMTaFuwb
8/PFvcy+ZZAyUEiQQib3h8F/7ZY9J5UnGH/b+1CtOYEALKSI8l2F
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:29:48 2026 by rpki-client