Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205991.roa
File: AS205991.roa (raw, json)
Hash identifier: igXBiaJIAeaUzc3dq9J1VgL3dzPEIv4v3KH+GvPHlhI=
Subject key identifier: 99:1F:64:0F:45:C3:86:9D:83:48:FD:CF:4B:22:53:39:17:01:05:85
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3FCA1F3C25466536E13E2CDED928DE194EADD5C9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205991.roa
Signing time: Tue 27 Jan 2026 16:09:17 +0000
ROA not before: Tue 27 Jan 2026 16:04:17 +0000
ROA not after: Tue 26 Jan 2027 16:09:17 +0000
asID: 205991
IP address blocks: 2a0f:85c1:cd9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ca:1f:3c:25:46:65:36:e1:3e:2c:de:d9:28:de:19:4e:ad:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jan 27 16:04:17 2026 GMT
Not After : Jan 26 16:09:17 2027 GMT
Subject: CN=991F640F45C3869D8348FDCF4B22533917010585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:8a:fb:0d:01:37:a4:04:66:57:a3:06:f4:
5f:93:bc:54:a4:a3:10:03:cd:19:2b:2b:e8:6c:63:
e1:2b:4e:67:8f:83:87:18:57:89:78:07:6a:fc:2b:
d1:94:7a:af:b7:8c:b1:f0:45:15:b9:f7:7a:08:06:
5f:3b:a8:78:bc:ca:31:c8:3f:c0:af:86:d4:a7:60:
bf:1a:bc:b3:fe:42:41:8b:12:19:51:2e:c1:11:6b:
63:1b:17:2d:c3:f3:dc:61:ca:c5:a1:53:be:d5:16:
25:57:b8:6b:54:82:10:84:97:c0:fd:2b:39:9a:12:
b8:d8:4f:b0:46:21:1d:1f:4d:70:3d:6d:65:f3:e2:
4a:33:ba:a8:74:51:e5:98:91:c1:43:a7:b7:fd:28:
7e:c5:d1:12:d1:89:8c:e1:b5:8c:1a:0b:2a:ef:39:
69:03:1e:74:1c:f6:96:81:3d:cb:a0:d3:f5:84:84:
fd:6b:03:a7:64:0f:23:7b:f9:15:54:9c:aa:12:57:
ad:5b:9a:7a:85:d2:ef:35:50:9a:1b:dc:d6:cd:7f:
85:ef:6d:81:d2:48:83:f4:06:56:0b:a1:b3:ef:4e:
e6:96:1e:16:e6:59:0b:08:eb:07:9e:f5:d8:76:f3:
f0:a3:d2:39:53:33:ce:ab:3b:2f:f1:b6:ef:31:6f:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1F:64:0F:45:C3:86:9D:83:48:FD:CF:4B:22:53:39:17:01:05:85
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205991.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cd9::/48
Signature Algorithm: sha256WithRSAEncryption
5a:8b:40:cc:cd:6e:42:10:69:fd:57:c3:14:bd:70:1f:50:fc:
48:4e:0c:9f:02:37:24:99:27:e5:d2:c0:f2:7c:4d:c7:fc:8a:
82:9a:e5:10:28:e7:72:f8:cf:60:a9:0b:d2:77:3f:61:50:dc:
f9:1e:12:42:48:d0:55:31:a4:76:d0:d0:80:ec:3b:79:78:16:
82:24:6b:a6:ea:1e:3c:83:7e:02:f8:4e:9b:a1:45:45:46:3e:
dd:a8:fe:90:11:2d:f3:6f:75:61:38:85:aa:0a:d3:37:80:ff:
6d:16:44:eb:7e:23:a1:6e:b5:6f:04:05:f8:b5:14:a2:73:17:
3e:b0:82:43:58:58:48:6a:6b:b3:3c:b4:91:dc:b6:46:62:d2:
3e:f7:e9:a8:ac:65:88:dd:34:ab:26:18:e3:76:ba:f8:3a:2a:
9b:df:e9:ca:cb:c2:ce:93:60:99:98:5c:60:47:43:10:1d:7b:
dc:da:a4:ea:65:5d:2d:75:31:a2:72:09:8f:52:74:d4:8e:b7:
b8:ff:3f:7e:64:f7:46:8c:5f:e1:d6:f1:5e:01:00:19:dd:9b:
0b:3a:69:da:81:31:b8:e2:bc:9d:ae:d6:e8:dd:b1:af:4c:d9:
f4:a0:05:f1:28:8c:4c:44:10:41:bf:96:49:cb:ac:eb:79:7d:
a3:2f:0c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:46:58 2026 by rpki-client