Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205941.roa
File: AS205941.roa (raw, json)
Hash identifier: pKQMfwLK1eoyRsxkJYnk2OWXQPYHfAgw0uuy8trR+uI=
Subject key identifier: B4:27:64:B6:63:E4:97:00:6A:0D:2F:6A:AC:B3:28:33:63:D5:B7:58
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 76F8D3866811C4E14A732BAFF2D3A06427C56113
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205941.roa
Signing time: Fri 03 Apr 2026 21:42:47 +0000
ROA not before: Fri 03 Apr 2026 21:37:47 +0000
ROA not after: Fri 02 Apr 2027 21:42:47 +0000
asID: 205941
IP address blocks: 2a14:7580:ff9e::/48 maxlen: 48
2a14:7580:ff9f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f8:d3:86:68:11:c4:e1:4a:73:2b:af:f2:d3:a0:64:27:c5:61:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 3 21:37:47 2026 GMT
Not After : Apr 2 21:42:47 2027 GMT
Subject: CN=B42764B663E497006A0D2F6AACB3283363D5B758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:fc:8b:7b:e5:c9:f8:79:aa:d4:63:bb:e3:
97:22:36:13:59:a4:24:0d:c3:d1:77:7d:e2:35:7a:
ec:b8:73:5a:c5:78:b7:cf:5c:02:05:07:ba:de:bf:
3d:4e:d6:7f:cc:ee:52:76:9d:f9:28:3a:eb:65:1c:
24:83:1f:3e:a5:35:f7:59:da:ad:17:6f:9b:17:cd:
84:b8:3d:41:fb:6f:f0:52:13:35:be:3d:d9:85:95:
f7:2d:c5:a5:1d:0b:10:b1:9d:32:5e:14:66:b8:a7:
03:35:ea:12:3d:3d:de:1a:5e:20:f0:a1:1e:f3:f7:
de:a7:d6:5d:ee:c1:e8:79:0c:50:7c:ea:27:69:5f:
9c:f2:c4:3a:f0:d5:3c:84:f5:c0:c0:ed:4a:83:69:
ed:ba:19:b6:e3:67:e6:2f:8c:e6:c2:f0:5e:58:28:
75:e0:05:a8:2b:51:c7:1b:07:81:d5:36:72:47:a5:
2a:08:a2:17:2c:d7:58:d7:06:ff:69:73:da:7e:5a:
4b:8a:bb:38:92:06:6f:b6:92:de:5c:21:6e:98:2c:
26:7f:8a:9d:17:ac:74:84:a8:73:ce:68:1a:be:6d:
af:69:d4:00:fa:11:0a:0e:6f:93:e1:45:dd:44:87:
86:75:0c:f7:ab:85:0b:d8:59:42:50:13:61:7f:5a:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:27:64:B6:63:E4:97:00:6A:0D:2F:6A:AC:B3:28:33:63:D5:B7:58
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff9e::/47
Signature Algorithm: sha256WithRSAEncryption
27:5a:63:de:71:fd:31:02:a3:0d:a7:57:4a:25:8c:2a:7d:87:
f7:52:d8:77:d8:79:12:09:e3:3c:b1:02:d3:e7:58:b1:85:19:
a0:a9:28:42:81:3e:17:8e:af:b6:e0:08:fe:60:92:c3:0c:fa:
30:72:8f:8e:c5:ae:6a:ed:d8:9f:cc:02:25:92:e7:40:ad:d4:
9f:5a:f5:49:6c:59:ee:f5:4e:a9:ea:14:6c:05:c7:66:54:2a:
34:9b:bf:8d:28:c2:45:96:17:dc:bd:0f:b5:b3:e6:57:6f:0f:
da:39:05:ca:18:14:e1:75:32:79:c9:fa:59:1b:27:15:8c:a6:
be:da:d5:f2:77:e9:f1:b9:1d:f0:41:24:21:35:9e:ef:aa:f6:
9c:c2:d2:dd:3d:5a:bb:92:a7:c1:f2:87:57:6e:01:09:ed:dc:
02:6b:16:bc:3c:b5:6c:23:45:fc:39:bd:56:a4:de:44:e4:5b:
da:3a:bb:3d:6e:a6:fd:1b:e9:e1:69:50:31:0b:1f:a3:de:ef:
51:ff:78:92:13:da:c8:30:a4:1e:c4:bd:47:f3:46:f3:d5:9f:
60:84:c2:0c:0e:27:51:4a:62:f4:3d:31:61:f6:89:e7:2d:43:
fe:4f:dc:79:5c:cf:8c:15:4b:e2:46:16:b5:30:42:af:b9:93:
61:8e:55:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:09:57 2026 by rpki-client