Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205398.roa
File: AS205398.roa (raw, json)
Hash identifier: ObZp1OueYH+QTBZNhRFIe1s2DvMrcBG0GUge4KbOALI=
Subject key identifier: FC:AF:40:7D:68:E1:6F:2C:B8:8B:56:7C:6C:1E:68:B3:30:26:CD:2E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 08AD3211FF0180D65B0AFBA728910392FCB55D48
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205398.roa
Signing time: Fri 25 Jul 2025 08:07:44 +0000
ROA not before: Fri 25 Jul 2025 08:02:44 +0000
ROA not after: Fri 24 Jul 2026 08:07:44 +0000
asID: 205398
IP address blocks: 2a0f:85c1:260::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ad:32:11:ff:01:80:d6:5b:0a:fb:a7:28:91:03:92:fc:b5:5d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:44 2025 GMT
Not After : Jul 24 08:07:44 2026 GMT
Subject: CN=FCAF407D68E16F2CB88B567C6C1E68B33026CD2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:aa:e0:61:64:55:f2:2d:35:ea:10:9c:69:
4e:b4:d4:48:81:d2:a3:92:60:36:ef:51:5c:60:2a:
9f:1d:35:ac:9c:94:cf:45:de:38:99:cc:a2:ac:1c:
df:a8:81:14:52:6d:bb:8b:f2:db:c7:4b:46:cb:ec:
e8:ac:d0:13:08:d6:9d:5c:1f:23:ae:12:40:ba:51:
5c:6b:75:f9:7a:b6:1d:28:25:e9:c5:75:65:e0:e2:
fb:1f:bd:d3:34:a8:22:62:7e:57:1d:3a:f8:d2:65:
22:f6:8f:0b:be:88:39:e6:b6:59:69:15:17:b8:df:
68:64:18:9d:e6:95:7e:d3:6e:7d:63:0e:b3:94:35:
7c:a8:7f:21:71:3a:1b:d4:bb:a4:36:8d:3e:2a:e6:
5a:8c:a3:2b:bb:fb:48:39:e5:0d:b8:bc:00:10:0f:
62:65:53:b0:3f:3a:22:e0:43:b6:28:09:7d:a0:33:
98:b3:58:21:45:bf:e8:a6:ff:28:49:84:ec:43:dd:
9f:0f:a7:d0:2e:7e:67:ad:b1:46:91:3a:37:75:e1:
03:fd:69:7f:e2:a1:ee:d4:cf:5a:0a:cb:77:9c:d4:
2f:ee:a4:12:b7:1e:20:d9:54:b1:34:8d:97:b4:4e:
cb:d6:d2:09:4d:ee:9c:93:ab:98:b3:be:af:86:e7:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AF:40:7D:68:E1:6F:2C:B8:8B:56:7C:6C:1E:68:B3:30:26:CD:2E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:260::/44
Signature Algorithm: sha256WithRSAEncryption
bf:0f:c9:8f:e5:7c:eb:f8:2e:d7:7a:f6:53:7f:88:96:cf:be:
78:d3:d8:e3:dc:f1:d9:d4:77:1a:e7:15:4b:a5:54:55:8a:df:
8c:8d:ce:ba:01:cc:e4:77:94:98:6f:70:45:3b:1e:20:66:72:
a0:49:de:47:06:0c:e2:1c:50:f0:df:28:8b:fd:29:24:a3:fd:
ca:bc:a0:92:b1:ae:66:69:0d:ac:7c:19:7c:0b:08:cb:a3:b5:
7b:af:f0:75:18:12:93:3b:e6:6b:e9:47:c0:f5:6a:78:9c:82:
5b:cc:7d:9b:4a:16:e2:90:10:b7:93:de:d8:c8:60:2b:00:f5:
4b:12:0f:00:e8:ba:1c:8a:7c:37:fc:8f:1e:5a:08:c8:d2:c4:
d9:08:9d:cd:7e:9f:46:fd:18:13:3d:76:62:a0:b9:13:8c:f1:
bf:b5:9a:5b:65:2a:60:82:88:20:c6:f6:4c:03:3f:60:a1:61:
d7:7e:f0:af:26:bb:6c:a4:f8:18:b5:32:1c:03:9f:94:44:76:
76:b7:52:7f:f1:a8:c7:80:d2:8f:40:15:11:26:ee:a5:c4:dc:
ec:8c:83:3d:76:25:10:b5:b8:a9:88:c5:88:2e:98:3a:02:6f:
30:db:74:72:68:db:44:67:87:e2:53:b0:97:ff:0e:1c:de:0c:
69:30:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:40:23 2025 by rpki-client