Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204580.roa
File: AS204580.roa (raw, json)
Hash identifier: k6ytNtdY3BdiD/8jmkvUqwTlooD3y9rvgtqm+XDBkzo=
Subject key identifier: 13:61:9D:B2:69:3E:02:DC:65:6D:FA:7D:B5:A8:DB:ED:B9:D8:BC:05
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0B0533A8A156BF5B4B4A225333CAC19CF8BB26C0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204580.roa
Signing time: Sat 25 Oct 2025 13:28:42 +0000
ROA not before: Sat 25 Oct 2025 13:23:42 +0000
ROA not after: Sat 24 Oct 2026 13:28:42 +0000
asID: 204580
IP address blocks: 82.22.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:05:33:a8:a1:56:bf:5b:4b:4a:22:53:33:ca:c1:9c:f8:bb:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 25 13:23:42 2025 GMT
Not After : Oct 24 13:28:42 2026 GMT
Subject: CN=13619DB2693E02DC656DFA7DB5A8DBEDB9D8BC05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:38:c3:e3:2d:a1:b1:08:8b:55:f0:aa:85:ab:
69:4e:c0:a7:9a:ec:3b:4f:54:90:cc:fa:07:74:bd:
7e:b9:ec:2b:72:06:ad:56:94:df:18:b7:ed:ea:90:
f6:de:f4:8b:c7:45:8b:a4:60:44:98:3c:00:84:da:
f4:87:b6:0f:c0:fe:37:38:18:40:58:13:d1:88:63:
2a:ac:33:25:9e:00:38:28:ca:06:f4:37:bd:a5:61:
87:64:c3:57:e2:50:a3:8f:10:c1:33:eb:c4:5a:f1:
6b:2d:83:5a:56:45:e1:7d:ba:9e:01:ea:32:16:11:
3d:5f:97:c0:f4:ff:32:dc:90:5c:ac:e4:f1:5c:97:
8b:29:71:8a:90:17:cf:ea:fb:91:79:62:e2:0d:a7:
fb:de:9e:a8:eb:eb:8f:ca:23:ae:54:bd:6c:d8:d0:
19:50:c1:d1:b0:b7:b0:4d:5a:67:17:1e:bf:bd:f3:
cd:ff:6c:5a:a8:9b:e0:3f:32:4c:24:54:b2:23:19:
ba:cf:16:80:e6:16:9a:43:e0:c3:cb:0d:b8:f3:ee:
d0:53:3c:b4:f7:14:fc:42:8e:f9:f0:5a:64:c4:a8:
6f:52:e2:50:e5:d9:90:58:1f:1f:f5:98:c8:d9:53:
82:dc:fb:17:e3:26:76:da:d2:32:44:f7:0a:c1:5a:
0a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:9D:B2:69:3E:02:DC:65:6D:FA:7D:B5:A8:DB:ED:B9:D8:BC:05
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204580.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.32.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5d:ad:23:3d:19:9c:40:bb:2f:43:3e:68:05:c4:96:58:73:
5a:aa:a7:a4:98:39:89:3c:15:b6:aa:2c:89:4f:68:69:ee:76:
49:34:65:5c:b3:46:b0:e5:18:59:95:ba:9b:fe:ec:5d:fa:5e:
38:a1:71:5a:0f:53:6e:8f:e6:44:19:d3:71:dc:d6:83:47:e1:
75:a1:91:84:f5:35:2a:23:2c:0f:a6:46:43:73:9a:62:8b:1b:
7f:f3:01:93:b5:56:4c:1e:7f:ec:6f:df:73:8b:5f:d7:b8:7f:
2d:d0:cb:90:b4:57:53:ce:da:b5:cf:ed:41:d3:72:16:a3:ad:
d0:39:b0:6e:9f:fc:9b:19:ca:97:21:2f:dc:a3:56:8c:68:fe:
74:56:24:3b:61:f7:40:ea:1f:fb:b9:25:dc:68:54:8f:a1:74:
0a:c0:10:32:ce:98:09:22:3c:a8:99:6c:be:03:e5:55:46:df:
24:3c:88:e7:35:5b:14:cc:90:b4:d6:64:fa:9a:ca:3e:ee:e0:
c6:79:13:ff:63:82:61:ff:88:77:2e:dd:80:50:6b:24:84:61:
47:b8:e4:a4:03:14:44:82:e0:a3:80:c7:a2:da:6d:2e:cd:3f:
3d:5e:1e:9a:3a:28:e9:0d:8c:8a:d1:f2:7b:74:ab:31:80:d0:
2d:f9:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:21:29 2025 by rpki-client