Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204150.roa
File: AS204150.roa (raw, json)
Hash identifier: DnMLY8KkPdYW9O7dp5hwizWuPud2GVMVsclsyhCBCfg=
Subject key identifier: 1B:DD:AE:27:73:E3:2B:29:65:1F:2E:FA:A2:1B:A0:00:40:1E:03:3B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4187DEFBBE9286E98CC11E9623957A4A5706A1A4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204150.roa
Signing time: Sat 24 Oct 2026 01:49:38 +0000
ROA not before: Sat 24 Oct 2026 01:44:38 +0000
ROA not after: Sat 23 Oct 2027 01:49:38 +0000
asID: 204150
IP address blocks: 2a14:7580:fff0::/48 maxlen: 48
2a14:7583:fe00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:87:de:fb:be:92:86:e9:8c:c1:1e:96:23:95:7a:4a:57:06:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 24 01:44:38 2026 GMT
Not After : Oct 23 01:49:38 2027 GMT
Subject: CN=1BDDAE2773E32B29651F2EFAA21BA000401E033B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:cf:b4:a8:4b:46:a1:d8:8d:3e:b3:54:9d:
ed:5b:98:da:10:cb:0a:c6:b6:ce:ef:4f:76:5f:4a:
38:23:7d:03:b9:24:52:b1:c3:d7:c8:b9:3b:63:f4:
e5:a2:32:77:c0:cd:da:f9:01:63:80:30:1b:7e:01:
54:72:48:72:1e:60:0c:92:16:84:83:f8:89:0d:5b:
3d:63:ca:eb:91:ff:93:f4:d4:e1:8f:9a:bc:77:5a:
bb:ca:63:5a:12:eb:4d:30:57:e4:56:c2:38:19:17:
2f:3d:39:08:eb:af:97:b6:33:4e:e2:e3:62:be:56:
dc:de:e5:20:17:0a:73:db:2d:7c:89:89:65:1c:2c:
f4:41:48:ab:66:bd:8f:88:23:8c:8e:b6:b4:14:09:
fc:1a:95:07:89:21:bc:84:7a:22:d2:17:3e:53:a4:
d1:b0:74:2f:18:90:94:2e:60:a3:cb:c7:f9:83:4e:
18:18:6e:33:83:42:2b:63:a1:4f:85:1d:2d:b9:ff:
59:dd:ea:b5:89:68:20:5e:3e:51:af:72:99:75:32:
03:f6:29:8a:3d:e0:b6:e2:09:b9:0d:cd:cf:b0:4d:
d8:1d:2f:5c:25:dc:a3:0b:d4:d5:ea:8e:0c:fc:cd:
17:7c:2e:5d:85:ef:57:21:5f:e0:2a:0a:51:3d:e4:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DD:AE:27:73:E3:2B:29:65:1F:2E:FA:A2:1B:A0:00:40:1E:03:3B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff0::/48
2a14:7583:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
60:37:03:cf:af:11:0f:9e:71:69:8f:72:7f:85:0c:67:81:25:
14:a0:20:f0:61:7c:63:fe:87:2e:e7:98:27:f0:e6:07:b3:8f:
83:b4:fd:74:fe:af:11:ef:d9:3e:dc:78:8f:9b:b2:9b:19:76:
e8:4a:e1:d4:17:51:36:d4:c7:70:b6:4a:c7:4c:c7:22:45:0a:
88:9c:72:d7:ba:2d:23:41:97:19:b8:0b:49:bc:c5:50:f8:23:
0a:e5:73:f8:7d:76:88:bf:cf:6e:47:a2:21:2c:29:7f:3e:46:
f6:8b:97:18:07:cc:28:e9:47:76:c0:5f:e8:f5:9a:2b:e0:16:
04:34:7f:ee:fe:c3:88:34:e8:3b:9e:d2:1d:26:41:29:06:1a:
a4:85:ba:17:bb:39:df:7b:29:76:f4:f4:69:43:1b:ff:46:15:
ee:d6:df:3f:88:4f:dd:1e:e6:bf:b8:6c:05:7b:af:b8:4f:21:
7b:77:5e:d4:ad:bd:48:d5:c1:b8:33:fe:b7:7d:5a:ab:76:20:
02:62:c6:a5:be:7f:e9:83:ed:23:b1:83:c4:14:8c:5a:b9:6f:
b8:93:cf:6e:29:58:65:03:06:16:49:a2:2a:6e:59:e8:b6:72:
77:e1:28:c5:40:94:f0:84:5e:c2:7a:3d:68:81:be:76:1a:c7:
5f:46:c4:ca
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUQYfe+76ShumMwR6WI5V6SlcGoaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjEwMjQwMTQ0MzhaFw0yNzEwMjMwMTQ5MzhaMDMxMTAvBgNV
BAMTKDFCRERBRTI3NzNFMzJCMjk2NTFGMkVGQUEyMUJBMDAwNDAxRTAzM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aM+0qEtGodiNPrNUne1bmNoQ
ywrGts7vT3ZfSjgjfQO5JFKxw9fIuTtj9OWiMnfAzdr5AWOAMBt+AVRySHIeYAyS
FoSD+IkNWz1jyuuR/5P01OGPmrx3WrvKY1oS600wV+RWwjgZFy89OQjrr5e2M07i
42K+Vtze5SAXCnPbLXyJiWUcLPRBSKtmvY+II4yOtrQUCfwalQeJIbyEeiLSFz5T
pNGwdC8YkJQuYKPLx/mDThgYbjODQitjoU+FHS25/1nd6rWJaCBePlGvcpl1MgP2
KYo94LbiCbkNzc+wTdgdL1wl3KML1NXqjgz8zRd8Ll2F71chX+AqClE95IhdAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUG92uJ3PjKyllHy76ohugAEAeAzswHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA0MTUwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKhR1
gP/wAwYAKhR1g/4wDQYJKoZIhvcNAQELBQADggEBAGA3A8+vEQ+ecWmPcn+FDGeB
JRSgIPBhfGP+hy7nmCfw5gezj4O0/XT+rxHv2T7ceI+bspsZduhK4dQXUTbUx3C2
SsdMxyJFCoiccte6LSNBlxm4C0m8xVD4Iwrlc/h9doi/z25HoiEsKX8+RvaLlxgH
zCjpR3bAX+j1mivgFgQ0f+7+w4g06Due0h0mQSkGGqSFuhe7Od97KXb09GlDG/9G
Fe7W3z+IT90e5r+4bAV7r7hPIXt3XtStvUjVwbgz/rd9Wqt2IAJixqW+f+mD7SOx
g8QUjFq5b7iTz24pWGUDBhZJoipuWei2cnfhKMVAlPCEXsJ6PWiBvnYax19GxMo=
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:20:25 2026 by rpki-client