Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204985.roa
File: AS204985.roa (raw, json)
Hash identifier: 2TfPSd1LvUAJ63CMh9YQGd5FeCmvEpX75zmNeTvWiYY=
Subject key identifier: A9:BF:88:70:CD:1E:50:C8:48:8B:B0:0D:E1:99:C9:70:17:46:9A:40
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 384B3245BC9E59E19D1A1DBDAE00AAFADAD2D514
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204985.roa
Signing time: Tue 08 Sep 2026 11:09:07 +0000
ROA not before: Tue 08 Sep 2026 11:04:07 +0000
ROA not after: Tue 07 Sep 2027 11:09:07 +0000
asID: 204985
IP address blocks: 2a0f:85c1:d38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:4b:32:45:bc:9e:59:e1:9d:1a:1d:bd:ae:00:aa:fa:da:d2:d5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 8 11:04:07 2026 GMT
Not After : Sep 7 11:09:07 2027 GMT
Subject: CN=A9BF8870CD1E50C8488BB00DE199C97017469A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:0d:f6:13:f7:eb:c2:ff:1d:4f:ce:8b:6a:
5e:e9:ca:e1:48:20:b9:a4:d6:ba:ac:67:1c:34:4e:
06:79:af:bf:9f:53:27:b1:42:e1:5e:3c:96:b9:22:
1e:c5:49:c0:c2:f9:80:e3:e1:af:82:a7:00:ea:89:
90:d6:2d:16:3e:f3:56:e9:70:7d:8b:0e:ae:75:d7:
96:f3:59:31:77:91:01:6b:00:e3:fd:fb:00:3b:da:
81:5b:c5:69:2f:be:8e:d3:b9:22:a8:d0:8f:fc:fd:
9b:9f:29:a0:45:b7:c7:57:ef:0c:93:dc:26:83:b8:
e7:ad:7e:2f:16:b3:aa:c1:54:bc:75:ef:fd:33:a5:
6c:2e:6e:c7:ad:b0:87:10:d4:58:e6:9f:89:a7:11:
8c:33:62:81:fe:8b:ba:37:3d:d8:6d:01:4a:d3:44:
6c:e5:9f:4f:36:24:c3:a9:80:60:ea:90:77:18:3a:
35:df:0d:d7:7b:2d:8f:54:52:09:77:44:cc:e8:b3:
42:95:d2:84:0c:4c:54:17:31:51:6b:3b:8b:1d:43:
93:77:8b:ef:85:77:b1:d6:39:b0:d2:05:68:95:6a:
ea:9b:92:4c:6a:8c:98:34:84:43:80:7c:3b:da:c3:
65:3b:63:93:07:32:29:56:1f:8a:f4:15:96:d2:24:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BF:88:70:CD:1E:50:C8:48:8B:B0:0D:E1:99:C9:70:17:46:9A:40
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204985.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d38::/48
Signature Algorithm: sha256WithRSAEncryption
78:24:18:58:16:82:35:24:4b:6f:65:2f:92:ec:15:80:f3:12:
3b:d3:e8:d1:b9:c4:19:bd:e7:d1:16:d5:43:e7:d9:62:c5:ac:
a9:41:1a:8c:0f:31:35:ba:b8:a2:ff:06:97:36:ce:91:60:1b:
b6:55:83:7a:c4:ef:a5:68:31:c1:04:6a:ea:f5:35:b3:27:76:
0e:fc:d0:ae:4b:42:42:29:6d:2e:fd:0d:25:29:40:6c:1f:27:
09:6a:11:09:93:b0:90:99:af:fa:ba:29:83:6a:e4:31:42:dc:
e1:4a:78:43:5c:c2:6f:0a:5d:25:46:7f:f5:7e:7a:1b:70:ad:
f8:95:23:d1:9f:99:74:9d:5d:ab:74:11:55:6f:04:42:7e:01:
bb:6d:d3:fb:61:3a:9f:ff:79:eb:24:67:91:c3:c2:dc:74:73:
f4:dc:6b:77:67:8e:de:2c:07:f6:4e:e7:78:72:16:ae:69:e7:
31:a7:09:4a:6d:cb:8a:b2:6c:6c:f9:00:c0:85:1d:7c:e7:8a:
e9:c4:84:9c:0b:b3:e2:d4:c6:d1:04:51:52:3c:7b:ee:81:ce:
bc:9f:ae:6c:b1:51:b4:f8:4d:b5:36:5c:01:5e:e3:1e:06:24:
d0:c7:be:8c:a8:58:93:a4:79:64:ed:d5:81:ef:77:ef:3f:df:
50:94:b8:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUOEsyRbyeWeGdGh29rgCq+trS1RQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA5MDgxMTA0MDdaFw0yNzA5MDcxMTA5MDdaMDMxMTAvBgNV
BAMTKEE5QkY4ODcwQ0QxRTUwQzg0ODhCQjAwREUxOTlDOTcwMTc0NjlBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7Q32E/frwv8dT86Lal7pyuFI
ILmk1rqsZxw0TgZ5r7+fUyexQuFePJa5Ih7FScDC+YDj4a+CpwDqiZDWLRY+81bp
cH2LDq5115bzWTF3kQFrAOP9+wA72oFbxWkvvo7TuSKo0I/8/ZufKaBFt8dX7wyT
3CaDuOetfi8Ws6rBVLx17/0zpWwubsetsIcQ1Fjmn4mnEYwzYoH+i7o3PdhtAUrT
RGzln082JMOpgGDqkHcYOjXfDdd7LY9UUgl3RMzos0KV0oQMTFQXMVFrO4sdQ5N3
i++Fd7HWObDSBWiVauqbkkxqjJg0hEOAfDvaw2U7Y5MHMilWH4r0FZbSJLr1AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUqb+IcM0eUMhIi7AN4ZnJcBdGmkAwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA0OTg1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQ04MA0GCSqGSIb3DQEBCwUAA4IBAQB4JBhYFoI1JEtvZS+S7BWA8xI70+jRucQZ
vefRFtVD59lixaypQRqMDzE1urii/waXNs6RYBu2VYN6xO+laDHBBGrq9TWzJ3YO
/NCuS0JCKW0u/Q0lKUBsHycJahEJk7CQma/6uimDauQxQtzhSnhDXMJvCl0lRn/1
fnobcK34lSPRn5l0nV2rdBFVbwRCfgG7bdP7YTqf/3nrJGeRw8LcdHP03Gt3Z47e
LAf2Tud4chauaecxpwlKbcuKsmxs+QDAhR1854rpxIScC7Pi1MbRBFFSPHvugc68
n65ssVG0+E21NlwBXuMeBiTQx76MqFiTpHlk7dWB73fvP99QlLj6
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:19:28 2026 by rpki-client