Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205021.roa
File: AS205021.roa (raw, json)
Hash identifier: bN06QF3mk4Jq/TRGgz4+UyTiAIIQBb4HVWZXJTIlrK4=
Subject key identifier: 79:1F:C4:B7:9B:8A:A5:52:C2:41:B7:27:D1:AE:5B:4B:B2:7B:89:16
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0709E737D42CE0E9E0A75DC254EB7B98BA625060
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205021.roa
Signing time: Tue 03 Nov 2026 17:49:39 +0000
ROA not before: Tue 03 Nov 2026 17:44:39 +0000
ROA not after: Tue 02 Nov 2027 17:49:39 +0000
asID: 205021
IP address blocks: 2a13:9500:10f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:09:e7:37:d4:2c:e0:e9:e0:a7:5d:c2:54:eb:7b:98:ba:62:50:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 3 17:44:39 2026 GMT
Not After : Nov 2 17:49:39 2027 GMT
Subject: CN=791FC4B79B8AA552C241B727D1AE5B4BB27B8916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:32:ad:f5:3b:84:5b:a0:af:4e:ed:f0:85:
be:31:20:fb:f9:77:67:2f:3f:de:82:3b:bb:ef:ff:
4e:dc:86:8b:19:f6:ab:ef:31:ee:c1:6e:a7:fa:34:
5c:8d:e6:2c:c0:96:2f:10:55:a2:af:c9:26:9a:fe:
49:53:e0:8c:10:76:8b:e8:5e:ed:68:53:c9:b9:69:
30:71:e7:95:d5:e5:42:21:cf:38:be:f5:99:d4:a1:
a8:08:46:8a:aa:6d:b1:48:b1:b5:46:e5:e0:9a:3d:
56:1d:d1:3a:a1:ec:a5:df:42:27:83:d7:1a:17:07:
78:13:2d:e6:5d:af:67:7e:9f:5c:a3:fc:0e:cb:3e:
59:e2:43:c1:6f:db:7f:b4:13:b2:aa:4b:af:d2:3c:
f8:6b:a6:14:27:d5:a7:4f:80:64:06:25:13:14:3c:
68:43:25:ae:9e:29:17:1a:f3:c3:47:f7:00:22:37:
d1:29:9f:e6:7a:6d:d9:68:2d:93:25:92:f2:88:41:
5c:b1:6e:35:43:c7:a3:9e:2e:3d:08:0c:01:26:b7:
e2:3a:28:42:8a:ef:18:2c:d1:b8:e8:dd:28:9b:1a:
77:09:67:ef:eb:be:e6:c2:70:75:a1:ae:05:0e:af:
32:79:f8:92:6d:71:82:cf:d6:3f:d3:86:9c:83:a0:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1F:C4:B7:9B:8A:A5:52:C2:41:B7:27:D1:AE:5B:4B:B2:7B:89:16
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205021.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:10f::/48
Signature Algorithm: sha256WithRSAEncryption
9c:92:07:8d:12:49:2c:b4:da:eb:6e:6f:57:ba:03:8c:b4:c5:
fb:c8:89:07:79:06:26:04:0f:2c:b4:c6:38:36:5a:fe:13:07:
89:9b:86:4c:40:ff:40:d3:c7:e7:45:77:3d:7f:aa:98:40:cc:
df:a6:76:7d:fd:54:9b:4a:13:d6:83:e9:1e:d7:e4:eb:e8:66:
59:3e:4c:47:69:f4:03:1c:09:e5:2f:eb:3f:27:71:d1:46:f3:
f4:ca:2d:23:3a:dd:25:b0:6d:fd:e4:86:6a:fa:af:c7:25:7a:
2f:c4:a8:6c:31:5b:73:03:0a:e3:b8:c2:bf:fc:ed:3e:51:55:
72:20:94:29:6d:07:4b:22:c5:ae:d8:3a:d3:16:2d:ec:d4:cf:
42:d2:19:7b:cf:1f:11:61:12:c4:ed:8d:6b:61:4b:59:57:f4:
05:0b:91:08:75:96:b7:30:11:2e:e7:77:17:7c:26:e0:09:10:
3e:83:ca:9e:b5:b8:b0:c9:03:61:15:c8:fb:b6:dd:1e:9f:3e:
2c:79:3e:f4:53:4b:4a:28:68:68:a2:da:e1:3a:78:f6:97:8e:
5c:43:99:82:fc:06:1a:67:0b:b7:92:4a:0f:62:f1:bb:cf:35:
09:3a:03:96:18:11:da:c7:51:c1:c5:3c:c7:6d:41:ff:fd:dc:
60:08:17:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:21:23 2026 by rpki-client