Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204353.roa
File: AS204353.roa (raw, json)
Hash identifier: Opw17C7nSaknZ8XDDjv4ghqEz3skYYlsHdcZfG2//fA=
Subject key identifier: 83:C8:E4:55:0B:57:B3:2D:6E:47:10:FB:6A:8E:B7:87:92:38:E2:39
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1392BBC8C36F1D8CA8181EFD19B8814F0EA57B0B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204353.roa
Signing time: Mon 27 Oct 2025 14:25:37 +0000
ROA not before: Mon 27 Oct 2025 14:20:37 +0000
ROA not after: Mon 26 Oct 2026 14:25:37 +0000
asID: 204353
IP address blocks: 2a14:7580:fffb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 13:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:92:bb:c8:c3:6f:1d:8c:a8:18:1e:fd:19:b8:81:4f:0e:a5:7b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 27 14:20:37 2025 GMT
Not After : Oct 26 14:25:37 2026 GMT
Subject: CN=83C8E4550B57B32D6E4710FB6A8EB7879238E239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:de:90:1f:4b:ae:01:96:9b:82:c1:30:ed:
2a:d8:be:79:5c:ca:8a:e0:33:9a:3c:31:3a:4e:ba:
40:10:2c:9f:2b:67:ad:83:cb:12:08:08:5b:75:37:
62:ba:19:83:5a:99:91:9b:df:9e:72:35:65:8a:74:
e9:9e:8c:81:6f:a7:e2:95:9f:5e:a6:97:59:ae:dc:
5a:dd:f2:ef:ae:af:dd:17:65:12:c7:a8:06:57:8f:
94:75:ed:72:39:10:50:c6:64:14:c8:41:24:23:f5:
54:9f:29:17:10:5f:7f:9c:e8:fb:91:59:11:2d:e9:
af:87:04:76:30:71:ea:b6:c0:c8:e2:de:7d:f0:c2:
0d:c8:d0:10:60:e3:11:5f:72:aa:08:dc:ff:81:40:
b4:12:58:a7:2c:ed:f4:0b:ab:d0:98:e0:9c:5e:bc:
3c:3d:50:41:5e:85:31:18:df:d9:c7:d5:65:74:17:
60:74:96:b4:81:36:45:6c:1a:38:ac:1e:44:6d:63:
74:16:fd:bf:01:a7:91:c9:50:6e:c4:52:c8:35:1e:
9a:c3:1c:96:2c:17:3e:a8:67:55:96:c8:ae:98:05:
6b:21:27:0f:a9:1d:2c:8d:ef:a6:f3:0c:4c:3b:d3:
c4:c4:65:30:a7:ec:8d:67:2d:62:af:8d:34:df:cf:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:E4:55:0B:57:B3:2D:6E:47:10:FB:6A:8E:B7:87:92:38:E2:39
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204353.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fffb::/48
Signature Algorithm: sha256WithRSAEncryption
40:e7:be:d0:31:61:a8:18:cd:58:2e:23:1b:2b:22:b1:71:74:
60:bc:e0:07:61:bb:4c:76:3f:d4:58:2a:da:b7:3f:70:83:86:
f7:89:36:f8:e7:12:19:b1:bf:49:68:c2:60:16:7d:02:70:7e:
3f:27:93:f8:20:bb:2a:1d:13:88:7f:5a:2b:a7:70:43:bd:02:
2e:81:d7:7a:74:d0:f3:f4:3a:1c:6e:fc:52:42:ea:00:de:98:
6e:60:0e:25:fc:e1:04:09:65:2a:24:22:5d:6c:6b:06:ef:80:
57:11:b3:4a:c9:87:cb:c7:ec:17:cd:f8:45:77:d8:e1:bc:e8:
aa:63:e7:97:7b:55:52:35:a3:bf:1a:de:d6:12:ed:b3:8d:10:
b9:9d:ce:86:1c:f8:72:54:0a:43:35:d7:d5:24:8a:9b:1b:4f:
6d:58:13:53:9e:60:71:cc:3f:e8:59:cf:e0:2b:7b:95:d4:28:
fd:06:1b:a1:ae:23:55:cc:b5:ca:cf:03:d5:6c:1b:1a:5e:15:
45:73:52:ef:7a:c3:59:50:17:8c:83:c8:7e:cb:1e:99:c4:39:
47:34:63:72:19:ef:01:fe:73:9e:a9:78:76:70:09:3d:e3:55:
d2:93:cb:cb:a6:f7:08:f6:e9:b1:a6:4f:31:9f:19:d1:1c:7f:
22:a2:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:44:17 2025 by rpki-client