Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204580.roa
File: AS204580.roa (raw, json)
Hash identifier: zf0oZovMK0jg60pwg8AwK0cJnjurT4SDOjuBJL3BSHM=
Subject key identifier: F8:54:08:AE:EB:30:DC:A2:74:D0:AF:49:F2:D0:80:DF:35:69:C0:52
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 46948173444243B85380CCB426130FBC4444F4F2
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204580.roa
Signing time: Wed 29 Oct 2025 03:42:21 +0000
ROA not before: Wed 29 Oct 2025 03:37:21 +0000
ROA not after: Wed 28 Oct 2026 03:42:21 +0000
asID: 204580
IP address blocks: 2a0f:85c1:d95::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:94:81:73:44:42:43:b8:53:80:cc:b4:26:13:0f:bc:44:44:f4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 29 03:37:21 2025 GMT
Not After : Oct 28 03:42:21 2026 GMT
Subject: CN=F85408AEEB30DCA274D0AF49F2D080DF3569C052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a4:09:39:04:be:f3:f4:2c:f4:6e:b1:19:e1:
05:46:4b:8e:9e:e0:8f:ac:fe:5c:c1:e1:f0:db:2b:
17:06:c9:b5:21:b4:98:a9:94:c7:62:27:ab:21:eb:
be:62:d2:ad:be:92:54:f7:9e:5d:b8:6a:e7:b3:19:
cc:56:2f:59:63:27:4f:a0:35:ca:a4:db:32:d5:e3:
29:3b:bd:f1:7e:bb:b3:76:45:87:8d:db:31:ea:e3:
b4:6d:cf:39:75:c2:ec:1f:12:88:3a:da:db:02:86:
3c:fb:19:29:54:71:9e:82:6d:37:2b:f7:31:aa:1d:
58:60:69:61:16:63:38:bb:99:f6:50:24:7c:e3:75:
db:2e:ab:e8:7c:c9:ed:27:f2:49:b8:3e:2a:e7:43:
e2:3a:d3:14:66:0e:e2:87:1f:59:70:4f:47:0c:2a:
ed:3b:11:af:f7:22:b8:68:91:2b:4b:1d:55:8e:a1:
46:f6:e2:d2:62:bf:4f:71:e2:cf:b7:9a:a9:f9:6f:
08:f4:4f:97:a6:fe:54:78:58:d1:86:42:77:52:0f:
ba:3c:08:aa:74:ee:9e:e3:f8:e6:d2:41:c4:ee:e6:
2c:b6:e6:53:d2:08:df:2b:29:8b:cb:0c:9d:b7:0e:
6e:ed:74:c1:23:53:fe:49:c9:1d:25:92:36:05:bd:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:54:08:AE:EB:30:DC:A2:74:D0:AF:49:F2:D0:80:DF:35:69:C0:52
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204580.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d95::/48
Signature Algorithm: sha256WithRSAEncryption
b2:db:3d:dc:8e:38:69:e2:56:3b:55:f3:a5:6f:f7:36:6c:94:
04:ca:3b:48:9e:c7:f8:c1:21:af:73:3d:e1:28:1d:fa:fa:d4:
f3:40:c0:e4:fb:c9:58:3d:10:5a:14:6d:a4:f9:df:1e:da:20:
11:4d:dd:c4:e9:59:85:93:1c:44:31:1e:71:91:f1:87:e3:2f:
d2:8a:5c:52:48:0d:4e:73:5b:64:d1:ba:0b:53:3a:4a:27:a3:
a8:8c:c7:c7:89:e6:74:5d:d9:25:25:92:64:67:72:77:d5:bf:
d4:78:1b:6e:ae:ff:94:e0:a3:2e:f5:7f:3a:41:f7:c9:2e:b8:
24:4e:48:31:1b:f2:28:02:a3:89:08:0e:69:aa:42:36:12:49:
b0:2d:1d:0c:d4:d7:8b:ec:3a:3e:76:42:31:e7:5f:ae:e6:de:
aa:1e:f7:ac:d4:0a:61:d7:f3:ad:e8:7f:54:65:80:4b:51:6d:
f1:9a:6d:f5:a1:a9:48:8c:c6:c4:f0:30:3c:1a:d6:68:f7:39:
a3:a1:01:f0:8b:34:27:35:d0:93:77:ec:98:b7:68:fc:8e:65:
ea:a6:8f:c6:24:dc:16:c3:e5:23:9d:24:a3:42:7c:63:09:f0:
c1:69:fc:3a:5e:4d:be:1c:09:89:5c:af:a6:15:e8:b2:a5:ce:
7b:ca:ec:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:18:34 2025 by rpki-client