Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205298.roa
File: AS205298.roa (raw, json)
Hash identifier: rfUg3bkYj2IJ8c28a6xJwtMEQQW4Fg26B5D5elNQgcc=
Subject key identifier: D6:84:BF:89:05:E8:B9:3F:09:4E:54:00:24:83:E8:E3:6E:58:5E:A9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6D7865761C9553B87B9262DCCE45590AD3E296EE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205298.roa
Signing time: Tue 08 Sep 2026 11:09:07 +0000
ROA not before: Tue 08 Sep 2026 11:04:07 +0000
ROA not after: Tue 07 Sep 2027 11:09:07 +0000
asID: 205298
IP address blocks: 2a0f:85c1:cd0::/48 maxlen: 48
2a0f:85c1:d70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:78:65:76:1c:95:53:b8:7b:92:62:dc:ce:45:59:0a:d3:e2:96:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 8 11:04:07 2026 GMT
Not After : Sep 7 11:09:07 2027 GMT
Subject: CN=D684BF8905E8B93F094E54002483E8E36E585EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:a8:83:8f:65:c6:73:de:91:a6:2a:23:e5:
35:79:24:bc:88:58:2d:b5:a5:47:1b:76:86:94:73:
e0:d2:cf:78:a5:20:41:8c:17:dc:44:76:db:d6:a9:
0f:85:8c:02:e7:f2:a8:43:6a:4c:d4:33:09:b0:ce:
c0:48:81:9d:33:ae:f8:18:8f:4a:b4:43:a7:c8:52:
0a:12:55:f4:6e:6f:63:d2:3f:51:13:79:cc:4a:88:
97:80:d3:c9:c2:34:e6:de:90:45:70:5e:26:fb:ce:
1b:8c:e9:a5:94:d4:ae:f2:13:ce:f9:15:b1:2f:cc:
0d:e2:7d:04:2e:c8:c0:40:4e:70:f3:96:79:cb:40:
f9:7b:29:44:31:20:75:ac:16:75:e5:91:39:2a:1d:
1f:1c:ed:3e:10:2f:74:d2:e7:3b:65:60:0f:9e:f6:
31:3f:d3:f1:b4:f9:ae:f5:7e:58:3f:35:c6:42:65:
e4:61:ab:b8:b9:8b:1b:77:3c:17:46:40:e8:4c:23:
e9:49:98:13:19:cc:fe:26:eb:5a:67:78:23:59:18:
0b:88:2a:8d:c5:8d:1c:45:05:fc:6e:07:5e:6f:a7:
b7:1b:e4:df:bb:af:bb:d3:a9:ec:3a:97:b8:c9:63:
d6:a7:9b:bc:da:e1:5b:47:1f:43:14:62:62:ca:78:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:84:BF:89:05:E8:B9:3F:09:4E:54:00:24:83:E8:E3:6E:58:5E:A9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205298.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cd0::/48
2a0f:85c1:d70::/44
Signature Algorithm: sha256WithRSAEncryption
11:32:b2:ae:8c:0f:0a:ef:7f:65:f6:09:46:24:99:87:f1:30:
e4:8a:2d:f6:08:cb:8b:49:08:5c:ae:20:7c:81:fa:5e:25:39:
71:31:a9:99:08:d8:3a:dc:9d:1e:65:d3:90:c4:33:48:4c:25:
9c:a0:bf:e4:94:66:92:3e:8d:96:61:1a:23:a6:8c:90:ad:00:
0c:cc:b2:9a:76:de:93:55:76:68:a7:be:69:cc:f0:cc:e3:b9:
a2:6b:e2:90:66:ec:f8:5e:f6:cb:c5:07:e7:8c:4b:02:77:70:
65:ea:a3:db:f7:9b:a1:16:2b:f9:c6:67:d3:ca:8c:69:0d:ee:
5d:e2:df:1b:cb:b8:9f:5d:cd:9f:b8:62:6d:5a:c5:a2:e3:bb:
a4:55:fc:c7:04:a9:ee:f0:53:19:58:80:b9:75:5c:c7:b9:c9:
d6:05:d4:db:b5:d9:81:88:88:98:f0:e3:41:81:b5:e3:02:7e:
7e:0a:c1:d7:cb:5b:3d:ac:d4:27:aa:95:99:a1:ac:69:fe:4a:
10:61:a2:4c:18:2d:54:a0:e5:d9:4b:e0:46:3f:24:ef:f7:51:
b8:99:6f:ce:0c:15:a8:2a:1c:87:a3:a4:d9:ec:60:d4:98:db:
12:e9:7f:2b:45:47:62:32:9f:7e:87:e2:7c:91:6e:e6:30:f1:
63:83:53:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:28:51 2026 by rpki-client