Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204603.roa
File: AS204603.roa (raw, json)
Hash identifier: 87EWA+UXodZivAyxqKivtd5D36sLI0E2Rq3j7iywlm0=
Subject key identifier: 28:FF:1A:BA:C5:23:76:FB:0D:7C:09:C8:AF:A0:29:69:7E:E6:57:06
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 02106E4C277C2216BB897D9C1028C2EF43942DD5
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204603.roa
Signing time: Wed 22 Oct 2025 14:10:44 +0000
ROA not before: Wed 22 Oct 2025 14:05:44 +0000
ROA not after: Wed 21 Oct 2026 14:10:44 +0000
asID: 204603
IP address blocks: 2a14:7580:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:10:6e:4c:27:7c:22:16:bb:89:7d:9c:10:28:c2:ef:43:94:2d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 22 14:05:44 2025 GMT
Not After : Oct 21 14:10:44 2026 GMT
Subject: CN=28FF1ABAC52376FB0D7C09C8AFA029697EE65706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:a9:8b:5d:35:fc:07:51:6b:aa:3c:8f:78:
87:4d:16:b2:88:df:98:81:28:6b:75:17:06:56:37:
8d:d1:5c:b3:6d:a2:5e:a7:f8:50:ee:0f:48:b8:8d:
ab:57:2a:32:11:8e:03:48:e4:0e:9f:74:cc:2a:72:
78:de:17:9b:83:d0:06:88:3e:f8:2f:a9:dd:b3:e9:
84:ff:11:78:d1:2b:b1:29:d1:a9:fc:3d:16:17:99:
78:ae:03:c2:fa:5a:19:44:83:fd:e1:24:93:51:10:
41:cb:5b:e5:71:a3:b4:df:1a:60:10:eb:c4:9d:e0:
d7:02:61:c4:df:66:ad:76:cd:0e:60:74:db:1e:e1:
0c:5b:af:1a:a9:8d:0b:96:a5:41:f5:25:8b:09:d5:
71:ac:1f:ac:43:86:84:6d:1f:39:9b:be:77:64:84:
99:3c:5d:d9:24:7b:1a:55:c7:c8:e9:a4:fa:dc:26:
1c:21:5c:d0:db:6d:1d:c8:6c:92:31:5a:b3:1b:23:
65:6e:a4:eb:06:7d:84:c1:84:e7:3f:95:dd:55:da:
83:26:1a:70:aa:f5:7f:22:76:a7:33:6a:17:79:2b:
a0:9f:12:3e:8f:2a:12:24:4b:c6:97:38:9f:c0:52:
ce:8e:bf:46:80:c8:84:1c:9e:9f:7f:08:2d:ff:67:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FF:1A:BA:C5:23:76:FB:0D:7C:09:C8:AF:A0:29:69:7E:E6:57:06
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204603.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
22:e4:21:aa:e9:45:bb:80:6c:ee:83:f0:83:b0:94:b1:d1:14:
b5:68:25:82:11:31:07:c8:45:8b:b0:d5:45:16:89:6d:a8:39:
92:49:ef:6f:8f:83:87:d7:01:3f:e2:a0:6c:db:34:44:b8:eb:
cc:8f:28:30:ac:4b:48:43:78:c4:6d:99:06:60:95:a8:e1:dd:
39:6c:4d:64:85:56:0e:2e:ec:22:6e:32:94:ac:49:3c:1f:82:
63:09:8b:3d:06:9b:2f:e9:57:bd:d8:eb:9a:d9:99:b0:3e:28:
19:71:9d:db:4e:ac:03:4e:50:b7:23:40:cf:e8:94:fe:76:4e:
09:02:2a:65:5a:c2:4d:49:75:0a:b3:71:cd:4b:3f:75:03:aa:
06:42:b3:6e:c2:12:ba:e8:36:90:66:fe:f7:cf:17:b0:d4:b8:
dc:dd:fc:f3:40:df:e8:a5:7e:b6:7f:b2:38:2a:1c:96:4c:67:
2b:4a:02:9e:98:82:29:0d:da:cd:ff:92:bb:ed:77:26:2e:dd:
09:03:9f:11:0f:76:ab:12:a1:11:a0:57:62:06:22:ca:10:40:
e6:e1:5b:69:79:5e:c9:b4:90:62:81:9f:bb:31:0f:7e:2e:14:
37:22:01:65:19:eb:5e:8c:49:c8:f8:8c:e1:2d:f1:02:24:f1:
f8:1d:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:39:37 2025 by rpki-client