Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204902.roa
File: AS204902.roa (raw, json)
Hash identifier: y3TgRShLlZJo9g6UgsCnHEXqBEb8kUtFrzQmUjCJ1Eg=
Subject key identifier: 0A:14:EA:C6:B7:89:32:97:40:CB:A3:D5:6D:00:1C:3F:AD:0F:D3:D6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 68FB444A0BEDCF60821F348F5E59E312B3B26C9A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204902.roa
Signing time: Fri 25 Jul 2025 08:07:38 +0000
ROA not before: Fri 25 Jul 2025 08:02:38 +0000
ROA not after: Fri 24 Jul 2026 08:07:38 +0000
asID: 204902
IP address blocks: 2a0f:85c1:900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:fb:44:4a:0b:ed:cf:60:82:1f:34:8f:5e:59:e3:12:b3:b2:6c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:38 2025 GMT
Not After : Jul 24 08:07:38 2026 GMT
Subject: CN=0A14EAC6B789329740CBA3D56D001C3FAD0FD3D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:79:ad:4d:af:03:c4:9b:93:b8:87:c1:97:
ba:42:65:6d:a1:9d:ae:4c:71:07:d1:dc:8b:3f:da:
e3:04:92:e8:a5:77:97:ed:09:c8:f3:2e:d7:8a:3d:
9b:54:53:ca:b6:28:b1:5c:2a:55:f2:fe:c1:ab:fe:
5b:a6:53:75:f5:6d:c9:9e:f8:54:6d:13:d4:e8:09:
93:15:ac:80:8c:8e:d4:e0:ff:2e:72:6d:d8:0a:63:
17:72:5d:74:eb:24:51:78:7b:71:ba:0e:97:c6:82:
b9:c1:17:06:62:ba:a8:e4:1b:2a:99:81:60:3c:8e:
a5:a0:90:2d:de:ff:c1:e5:26:0b:77:41:6c:10:2c:
8c:dc:14:65:20:e0:67:96:92:22:12:2b:dc:a2:f9:
4d:73:c8:48:aa:db:96:48:30:9f:fd:e7:a2:9c:1a:
ae:17:33:5d:68:9f:b8:d7:8f:4c:ad:c8:6c:76:ac:
e8:45:cd:b4:90:9a:3d:24:66:d1:2c:00:4c:7a:47:
26:d9:40:10:2a:b0:36:86:82:8c:91:13:93:b5:34:
e3:b0:3c:32:97:7e:53:b0:3d:81:ae:c1:c4:e7:9e:
52:fd:f4:1c:86:69:a5:ee:64:e7:86:f8:a4:b6:07:
f8:3d:c0:86:c9:83:62:0c:b4:85:e6:84:4e:48:98:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:14:EA:C6:B7:89:32:97:40:CB:A3:D5:6D:00:1C:3F:AD:0F:D3:D6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:900::/40
Signature Algorithm: sha256WithRSAEncryption
02:6c:0a:eb:a4:05:be:d0:b0:9a:4c:2c:2c:0c:74:a6:4e:71:
71:85:57:c6:3c:52:6d:0a:6c:a4:3d:de:6e:17:91:00:07:28:
a9:f6:4a:88:7a:5b:0f:d8:3d:8b:f9:50:a9:cb:34:a4:ec:94:
36:5c:17:86:f9:e5:07:a7:43:85:70:f2:a1:cf:a5:11:6a:7a:
8e:69:10:42:69:20:eb:ab:40:26:7c:2d:a7:2b:99:2e:8c:e5:
cb:cf:75:2b:ea:b1:60:ba:d5:50:70:5f:19:5b:d5:19:de:c5:
4f:d1:7e:df:f5:fd:fe:b1:c4:8f:e8:61:f5:bf:c3:b4:5e:b4:
ef:c6:2a:e8:fc:ef:9c:b9:94:19:9d:a0:0c:3c:73:8e:97:b6:
1c:e3:af:cd:de:fe:01:ab:f9:1c:68:bf:4c:5f:46:09:5e:7e:
98:43:a5:bc:72:7e:fb:20:a6:c9:da:f8:ea:41:70:d5:db:15:
15:f9:e1:86:1c:f9:fe:51:5a:b8:ff:98:66:a1:7c:c1:19:c9:
c7:3d:7c:ba:2e:ae:9c:8b:f3:57:ed:3f:c7:23:c9:3a:e8:3f:
ce:49:be:07:c9:82:e8:03:7a:e2:5b:ef:c7:5a:e5:22:30:70:
cd:ff:c8:87:35:e6:98:91:63:fa:8b:64:4b:77:ae:c7:3c:5b:
e6:98:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:45 2025 by rpki-client