Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204874.roa
File: AS204874.roa (raw, json)
Hash identifier: oLUXcI1XQkVOPCH78llLCn7LLH785H9X/IQIpn+Vs4s=
Subject key identifier: 9C:ED:FA:DC:B2:15:42:19:C5:CB:C7:F0:65:6C:3C:04:C8:D4:74:1D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 59E7F26392510093EB3A18CB6D15B1B76A74868A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204874.roa
Signing time: Tue 15 Sep 2026 13:49:29 +0000
ROA not before: Tue 15 Sep 2026 13:44:29 +0000
ROA not after: Tue 14 Sep 2027 13:49:29 +0000
asID: 204874
IP address blocks: 2a14:7580:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e7:f2:63:92:51:00:93:eb:3a:18:cb:6d:15:b1:b7:6a:74:86:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 15 13:44:29 2026 GMT
Not After : Sep 14 13:49:29 2027 GMT
Subject: CN=9CEDFADCB2154219C5CBC7F0656C3C04C8D4741D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:2e:c0:0a:0c:78:bc:57:74:f8:29:3b:b9:
a7:d5:8a:10:26:50:24:ce:48:b8:e8:b3:61:a7:72:
02:ed:00:cb:d1:88:92:3d:30:1e:37:b7:72:d8:da:
05:2a:d4:76:e6:4b:83:d5:51:1e:39:c2:d4:83:d4:
12:cf:68:09:aa:8a:14:7e:86:9e:35:f4:85:c0:e2:
1c:13:d2:8f:a8:13:ce:55:c3:09:64:ec:e7:74:10:
cc:01:eb:3c:91:84:50:52:4b:04:2d:4f:e0:ae:e1:
15:37:27:d9:48:fc:b7:81:62:52:f9:ca:0e:5b:e4:
72:5c:95:18:79:a3:6a:65:7a:15:11:29:b1:9a:d1:
ad:bf:b2:5e:98:17:92:2c:94:42:b7:5d:4f:2e:24:
f0:5a:73:32:08:c1:53:5d:ba:04:07:8a:09:3a:14:
80:0a:99:b7:6f:8b:bc:6b:73:c2:b3:2e:e2:1d:1e:
97:d7:54:47:2a:6c:70:a6:1a:50:4b:6b:3c:4f:47:
55:8d:63:a1:bc:59:66:2a:4c:20:cc:5e:59:0a:e8:
39:4f:62:54:a8:85:55:d8:f2:84:45:4c:be:4b:8e:
24:08:74:f0:53:b1:5d:ca:88:d8:1e:1a:07:fc:a4:
ac:dd:f2:d2:17:b3:7e:fd:ca:5b:8d:01:4b:f1:8a:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:ED:FA:DC:B2:15:42:19:C5:CB:C7:F0:65:6C:3C:04:C8:D4:74:1D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204874.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
92:a6:8f:f0:18:fd:b7:e4:2e:93:71:31:1d:ae:d9:42:25:cf:
f0:3a:0f:08:b0:72:e2:50:a0:e6:39:3a:45:56:2f:f5:02:57:
c9:a7:63:8b:0b:a6:ec:e9:85:9a:a7:d5:4d:e5:59:99:12:88:
83:fa:88:e0:d0:d5:82:19:e1:38:33:81:51:1c:86:95:db:6d:
e7:a8:08:a4:d1:0c:2f:04:a0:b1:cd:e8:5a:ec:39:59:3b:2d:
09:62:27:89:91:d0:71:33:dd:da:01:57:b5:69:c6:ce:fa:06:
e3:af:f9:d8:72:61:f8:be:74:e4:4f:f5:41:9b:89:2d:3c:d0:
f9:df:e8:93:41:9a:dc:aa:cd:6a:5e:97:03:89:d5:87:5b:04:
69:86:ef:ac:48:57:33:84:46:18:de:0f:a3:b8:12:8b:5a:f1:
8d:fd:f3:47:8b:64:d2:f3:9d:35:4d:ba:85:b8:9f:f1:28:78:
09:8a:e1:18:ac:58:15:33:fe:6f:34:ad:b1:35:af:e3:70:25:
58:c0:4f:a1:64:8e:cc:2d:23:b1:86:94:c9:d9:d6:cf:8f:b2:
93:2f:d4:ed:8d:a4:02:b6:d0:75:01:82:41:9a:9e:17:73:8a:
83:dc:cc:e0:60:99:74:23:0c:af:bc:64:f4:0f:70:60:6c:2a:
76:a6:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:44:08 2026 by rpki-client