Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204944.roa
File: AS204944.roa (raw, json)
Hash identifier: TDhHJLq0ovlYAaY85QcA8oh7w/gDTtgm5rc7Au0gS5M=
Subject key identifier: 90:B8:E3:E0:1E:4E:46:3E:44:CE:57:43:54:30:D2:CF:91:B1:8E:7B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 41EE949F12AC1D8BD39B70435835CA8E7FA9C74C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204944.roa
Signing time: Tue 15 Sep 2026 21:09:10 +0000
ROA not before: Tue 15 Sep 2026 21:04:10 +0000
ROA not after: Tue 14 Sep 2027 21:09:10 +0000
asID: 204944
IP address blocks: 2a0f:85c1:d6f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ee:94:9f:12:ac:1d:8b:d3:9b:70:43:58:35:ca:8e:7f:a9:c7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 15 21:04:10 2026 GMT
Not After : Sep 14 21:09:10 2027 GMT
Subject: CN=90B8E3E01E4E463E44CE57435430D2CF91B18E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:95:5f:82:28:4b:d6:03:10:2a:c1:fa:30:
28:c9:27:d2:0e:a5:7e:6a:34:0f:f1:f0:c9:60:fc:
10:46:6b:f5:15:32:dc:a6:36:7c:19:00:1f:1d:b9:
fc:ce:43:99:97:48:84:2c:0c:38:3e:8f:25:22:be:
38:c0:21:79:3c:82:91:c5:eb:94:d0:d7:75:49:f7:
ff:0c:12:a9:a5:80:da:73:99:e2:97:f9:6b:83:31:
44:5d:1f:fe:fd:aa:0a:b7:20:e2:7a:55:b9:fd:f8:
ff:53:09:7d:62:80:0b:ef:a4:1c:a9:a0:a5:d2:ee:
0c:94:70:ca:3b:29:df:34:0e:c5:b9:cf:5f:d8:e4:
6c:87:78:f3:fa:45:2b:1e:69:79:60:25:a7:c6:f1:
20:88:3e:20:7a:8c:ed:be:7f:dd:a1:d9:1c:b4:3f:
97:5e:e5:48:e7:f5:0c:d6:ac:32:4b:8d:1c:fc:f8:
2e:8a:11:a4:8b:db:bc:1b:3e:64:8d:1b:f3:49:08:
2c:cd:95:86:a8:cd:1e:77:c1:96:7f:a6:59:96:f5:
7e:6e:78:a7:74:78:34:25:ae:b2:1f:3f:b1:7d:9b:
fc:7b:8d:a9:17:ae:eb:fe:b9:97:52:9e:5b:fb:24:
d0:de:69:85:10:9e:56:70:a3:46:1a:17:04:a5:00:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B8:E3:E0:1E:4E:46:3E:44:CE:57:43:54:30:D2:CF:91:B1:8E:7B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204944.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d6f::/48
Signature Algorithm: sha256WithRSAEncryption
5f:14:43:ba:1f:bc:5e:9c:32:b6:11:b0:a3:1a:ae:38:af:72:
2e:01:1a:34:0d:b9:7a:ce:5c:2a:8b:28:e4:42:28:2d:19:b0:
f2:1c:e4:90:de:40:91:17:b3:66:da:fb:93:6c:ca:fd:eb:f5:
f0:35:8e:7b:45:0b:1a:3a:30:3a:c9:f0:14:34:12:0b:2f:6b:
db:59:e7:77:92:12:a8:52:d8:85:77:ce:c8:fb:7e:c3:29:82:
5f:71:53:c2:06:5e:60:47:cc:93:e7:60:0d:ae:80:85:07:3e:
a9:e2:6e:ac:39:de:99:17:0e:bb:58:cd:58:6c:9b:3c:24:d3:
a5:91:3d:5d:fb:7b:36:f7:fe:68:92:69:03:81:ee:54:11:5e:
29:c2:5f:a5:0f:69:f2:1a:74:ac:3d:a6:1f:29:73:f8:0c:77:
fe:91:d8:00:ba:69:e6:bc:a4:f9:d6:af:45:5d:e9:49:58:cd:
3e:e4:7a:68:f5:3a:cb:73:4a:32:88:2b:49:60:81:93:84:20:
f6:80:3b:87:fd:91:09:d9:b3:64:07:1f:8c:da:2c:ae:b0:30:
87:64:ba:58:39:42:d1:4e:2c:9d:ba:fe:84:53:f5:78:4a:16:
01:71:3a:75:a0:05:c7:21:89:59:17:78:6a:7c:89:bd:1b:30:
4a:77:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:46:51 2026 by rpki-client