Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205163.roa
File: AS205163.roa (raw, json)
Hash identifier: lttSCALAUe0LelP+5haVdLo4oEpIa+Oa3+RBBPHpnm0=
Subject key identifier: 6E:C6:E3:43:32:E2:03:91:F5:B9:B9:6D:80:A5:23:51:3A:80:E7:95
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 244E2DA0FCE1FAE11179E99EA2A648DA6D77E8D0
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205163.roa
Signing time: Tue 15 Sep 2026 21:09:10 +0000
ROA not before: Tue 15 Sep 2026 21:04:10 +0000
ROA not after: Tue 14 Sep 2027 21:09:10 +0000
asID: 205163
IP address blocks: 2a0f:85c1:d6e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4e:2d:a0:fc:e1:fa:e1:11:79:e9:9e:a2:a6:48:da:6d:77:e8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 15 21:04:10 2026 GMT
Not After : Sep 14 21:09:10 2027 GMT
Subject: CN=6EC6E34332E20391F5B9B96D80A523513A80E795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:82:80:97:0b:45:af:30:73:3b:d2:88:74:
ab:92:d4:01:1d:57:08:4f:73:7b:ef:f5:1c:cd:87:
12:54:b8:07:a5:e5:de:26:36:4e:a3:4f:54:d5:e9:
fc:14:dd:9e:ec:34:6b:b0:0e:a2:a0:87:ee:79:92:
d6:67:4b:ee:b4:15:38:79:44:98:23:d2:bc:f1:55:
f6:9b:59:ee:83:55:69:4d:8a:93:25:d3:ea:29:80:
14:c8:1d:ad:df:2d:65:bf:d3:cf:13:4f:74:73:cc:
0b:3f:b5:30:9e:95:fb:4f:da:bb:7e:b6:14:f4:f2:
f6:c3:73:da:8d:51:95:e7:bb:05:61:fa:ba:54:e8:
3d:5f:ff:44:b9:56:0a:0a:53:18:12:26:0b:49:e5:
66:2e:94:57:55:4f:60:9a:0c:e7:c7:c6:f2:fc:47:
80:44:50:52:f3:ed:42:76:3f:bd:f1:61:13:de:f0:
0a:dc:5b:41:51:dc:ef:2b:31:eb:eb:57:90:74:12:
9b:a4:73:7e:90:15:fa:19:0b:f1:ea:e3:55:22:79:
ec:b3:d9:d0:eb:41:9b:68:fa:34:b6:85:c8:5d:97:
0c:85:fa:13:6e:50:b8:bd:bb:df:fe:ce:08:b9:35:
72:08:cb:78:37:04:81:e8:25:90:13:1f:0e:b5:e3:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C6:E3:43:32:E2:03:91:F5:B9:B9:6D:80:A5:23:51:3A:80:E7:95
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205163.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d6e::/48
Signature Algorithm: sha256WithRSAEncryption
59:8c:e8:6e:4e:ce:f1:40:65:6a:a6:8d:76:17:e3:91:9f:5f:
2d:c3:1e:48:b8:b8:ea:57:12:bf:89:36:4d:34:07:a9:df:1b:
d1:44:00:88:fc:68:f0:5b:b4:8c:11:d3:c9:ca:2c:61:83:ea:
7b:c0:cf:99:32:14:0a:49:df:06:10:f5:27:ce:42:7d:55:42:
98:07:ec:7d:8b:46:88:dd:da:db:ea:91:61:8a:f8:33:f5:af:
62:b3:5c:7b:ec:1b:1b:0d:1c:28:98:ff:9e:90:b8:e1:8f:8b:
66:04:02:ce:61:25:0d:75:5b:2d:0c:ff:fe:7f:b5:d1:88:4e:
55:00:06:c5:73:b3:bf:d4:38:c0:ba:0a:71:66:03:65:6b:ee:
c4:31:0d:9b:79:94:dc:6b:79:21:d5:be:90:2e:6f:53:6b:ba:
c1:06:6a:4a:1d:69:d4:f3:08:b4:71:32:3e:64:62:56:f7:05:
e9:fd:3f:5b:f6:94:69:f7:ec:e7:50:d5:c2:76:e1:35:25:9e:
72:cf:26:47:17:60:14:13:10:74:de:25:39:78:f0:44:65:a7:
4a:57:8b:77:5e:4c:86:d5:92:eb:0e:c9:00:69:23:f0:af:1e:
c1:dd:3c:7e:ec:fb:ea:e5:77:81:4a:8f:a2:16:26:e0:09:0f:
37:bb:3d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:22:20 2026 by rpki-client