Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204464.roa
File: AS204464.roa (raw, json)
Hash identifier: gBNVKdTfJPpu5/UjLV5mb+neljfrOwGTWqlPAjySXm4=
Subject key identifier: C1:F1:DC:0C:5E:33:2E:F5:B0:3C:DF:28:06:E8:F8:E3:BC:03:EF:EB
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 658E65E192D0F96976B3DE54EB5011D033FB8225
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204464.roa
Signing time: Fri 28 Aug 2026 07:00:14 +0000
ROA not before: Fri 28 Aug 2026 06:55:14 +0000
ROA not after: Fri 27 Aug 2027 07:00:14 +0000
asID: 204464
IP address blocks: 2a14:7580:ec00::/40 maxlen: 40
2a14:7580:ec00::/40 maxlen: 48
2a14:7581:5000::/40 maxlen: 40
2a14:7581:5100::/40 maxlen: 40
2a14:7581:5200::/40 maxlen: 40
2a14:7581:5300::/40 maxlen: 40
2a14:7581:5400::/40 maxlen: 40
2a14:7581:5500::/40 maxlen: 40
2a14:7581:5600::/40 maxlen: 40
2a14:7581:5700::/40 maxlen: 40
2a14:7583:e800::/40 maxlen: 40
2a14:7583:ef20::/44 maxlen: 44
2a14:7583:ef70::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:8e:65:e1:92:d0:f9:69:76:b3:de:54:eb:50:11:d0:33:fb:82:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 28 06:55:14 2026 GMT
Not After : Aug 27 07:00:14 2027 GMT
Subject: CN=C1F1DC0C5E332EF5B03CDF2806E8F8E3BC03EFEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:94:ba:3e:b5:bc:98:43:54:9b:04:fb:a7:15:
05:54:4b:bb:de:ee:5a:30:c0:5d:c1:2d:8e:47:dd:
87:8d:50:09:28:0e:8e:20:d1:71:71:53:69:17:d5:
43:ad:bb:21:21:36:69:89:46:4b:47:ea:6e:2d:0b:
1e:90:18:44:be:06:ff:87:96:b4:80:15:48:b3:2e:
65:2b:9a:fc:f4:d2:3d:12:4b:8f:ec:9d:56:7e:8a:
3c:9d:ea:f7:d8:77:26:ea:b6:20:91:a3:dd:da:16:
57:1c:6b:70:16:f2:e2:29:c8:4d:94:bd:f5:34:7c:
0a:83:51:16:c9:af:57:68:a8:9e:c7:6d:e6:9e:f1:
e7:c1:16:8a:81:59:9d:df:a3:81:3f:aa:5e:b0:f8:
1e:72:1a:5f:c0:bb:86:87:0a:4e:4f:bd:b2:81:c0:
4a:2c:b3:8f:88:5a:9c:c6:9a:a2:57:49:4f:63:65:
0a:c8:24:b5:46:db:97:2e:9c:ce:2f:46:dc:37:a0:
0c:ba:12:6a:b5:a0:ee:e0:59:56:ba:f2:c7:4a:c3:
3f:4f:5e:d1:2b:73:cb:25:a0:2c:53:cd:ff:da:9c:
c3:59:96:c4:db:c8:19:1b:18:95:1b:04:7c:19:5f:
61:11:82:ff:4a:f5:1a:03:da:97:1a:96:ad:9e:4e:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:DC:0C:5E:33:2E:F5:B0:3C:DF:28:06:E8:F8:E3:BC:03:EF:EB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ec00::/40
2a14:7581:5000::/37
2a14:7583:e800::/40
2a14:7583:ef20::/44
2a14:7583:ef70::/44
Signature Algorithm: sha256WithRSAEncryption
3b:3f:39:c6:d8:86:3b:57:37:b9:f3:43:01:7d:b9:7d:1e:41:
18:7a:b3:ed:59:cb:15:89:95:0a:96:dc:d8:a2:6e:3d:95:64:
12:c4:f2:18:53:12:8d:4c:74:79:f4:4b:9e:9e:6c:26:0f:04:
98:48:62:a4:bf:85:76:9b:d9:32:e7:f7:6e:3e:78:eb:9f:1c:
2a:a5:31:9e:c9:1e:18:ce:1b:bf:18:4f:07:80:c8:60:ae:16:
dc:a9:45:44:5b:3e:a9:09:4e:bc:ef:8d:df:11:64:78:df:33:
d6:99:37:71:e4:50:cd:c4:e6:05:d2:9a:47:91:cd:49:e4:d9:
e3:4e:0e:ed:2a:a2:de:e2:93:57:3c:7c:02:ca:54:4f:05:12:
1f:01:8a:9d:11:7d:9c:7d:6f:fd:44:31:3f:18:49:b8:d6:0c:
81:8a:6c:73:e6:cc:e3:c3:c3:e2:75:c3:2f:cf:be:c8:0c:71:
26:02:b7:1f:52:4e:7c:d9:b0:ac:ca:cc:78:a5:24:4f:5d:b3:
b2:c3:2c:53:03:00:a2:20:b6:83:17:29:1d:08:49:e3:18:c1:
ed:e7:41:8a:db:1d:e5:38:b9:e2:b0:b5:29:ca:c7:cb:9c:4a:
d6:ef:c7:4f:28:8d:1c:39:da:cc:05:64:68:f1:74:2b:d1:15:
e6:50:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:23:16 2026 by rpki-client