Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205987.roa
File: AS205987.roa (raw, json)
Hash identifier: 3ZMiu2JPqymxbK8dgjkN89abFcOBc++secuvTnABIb8=
Subject key identifier: 51:DF:39:29:6E:10:D8:37:A2:70:2A:41:85:C1:63:5C:07:0D:34:40
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 33D3372AB9DE9A3144B574641FB4619F85C89B0A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205987.roa
Signing time: Mon 04 Aug 2025 00:08:49 +0000
ROA not before: Mon 04 Aug 2025 00:03:49 +0000
ROA not after: Mon 03 Aug 2026 00:08:49 +0000
asID: 205987
IP address blocks: 2a14:7583:4000::/36 maxlen: 48
2a14:7583:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d3:37:2a:b9:de:9a:31:44:b5:74:64:1f:b4:61:9f:85:c8:9b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 4 00:03:49 2025 GMT
Not After : Aug 3 00:08:49 2026 GMT
Subject: CN=51DF39296E10D837A2702A4185C1635C070D3440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:9b:f2:7f:39:fe:50:bf:46:72:05:54:71:
76:6e:59:b7:1d:72:d9:24:f1:a9:70:c4:2d:dd:81:
2f:f9:cf:80:7d:bb:56:27:76:66:f3:55:68:65:d4:
28:ef:e5:dd:2e:e2:98:4d:54:3a:ac:e6:8c:c9:eb:
7a:97:6d:fa:30:62:74:1e:be:c9:6e:c1:16:f6:1c:
b9:0e:e6:ed:cd:75:b8:31:37:8a:59:6b:ed:ef:d9:
d6:74:e1:d0:33:fe:17:58:8f:6a:46:fc:bc:e1:ca:
78:f2:9f:d7:cd:c0:6a:32:71:23:18:02:ed:b3:c2:
10:b1:f7:88:4f:fb:fd:79:f7:95:d7:a0:99:3f:c0:
1c:b4:60:44:5e:8a:fc:e0:4f:88:68:64:c0:5b:bd:
76:3d:db:c3:ab:d2:4c:c4:93:84:a6:4a:17:03:7e:
3a:55:f4:2e:ff:49:eb:d3:e9:cf:5f:40:47:a3:56:
57:88:5f:22:fc:c9:d1:1e:a4:b3:ba:d7:8d:36:51:
ea:19:11:66:fb:e4:c4:fb:a4:d4:45:6c:82:1f:e7:
51:41:e5:9d:48:e9:d8:ff:2a:e6:8b:03:8e:4b:0a:
4a:5b:be:5d:90:b2:4e:c3:a8:64:8b:41:e0:9d:fd:
e6:9c:68:08:e3:da:9a:fb:f7:6d:e2:42:32:68:02:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:39:29:6E:10:D8:37:A2:70:2A:41:85:C1:63:5C:07:0D:34:40
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:4000::/35
Signature Algorithm: sha256WithRSAEncryption
69:79:16:2d:86:5a:cf:ef:79:c0:80:af:22:be:17:14:b0:b7:
f3:15:84:fa:dc:4e:ac:a1:0f:1a:ea:a6:20:a4:d8:c1:3f:ae:
5b:7e:ee:a0:c0:d0:8f:b3:b9:87:fd:18:bf:7f:25:4d:5c:54:
f9:af:c7:c0:f5:4e:04:f8:c6:01:94:fa:ad:fe:38:f4:dc:1b:
a4:fc:fb:44:9d:ed:9a:03:8d:d2:41:ea:8e:ec:c9:88:ac:6a:
a6:c3:12:20:0b:02:7e:22:71:20:36:f0:7d:50:ca:54:a6:8f:
66:ee:c0:c3:5c:4a:5a:47:cc:a4:5a:08:19:b7:5f:6f:c7:ec:
01:5e:34:8d:83:98:be:b7:44:e1:43:ca:4e:a8:77:4d:1f:13:
b2:97:28:38:92:15:55:ce:7a:2d:14:d6:c9:7c:55:17:06:70:
9e:a7:51:aa:64:ee:11:59:64:25:0b:88:98:a4:7c:8c:dd:f0:
d0:5d:be:20:52:71:99:4e:6c:a0:13:b2:c8:29:5b:65:2e:a3:
92:0d:29:4e:33:d6:f6:d7:f9:5f:ce:11:f2:15:8d:b6:75:9f:
ed:e1:e0:bc:7d:38:88:12:23:52:3c:42:09:b8:8c:0f:e0:07:
5c:5c:c1:41:1c:12:bf:9a:1f:93:c4:36:92:c9:d8:c9:ff:d5:
ab:94:9c:67
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUM9M3KrnemjFEtXRkH7Rhn4XImwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTA4MDQwMDAzNDlaFw0yNjA4MDMwMDA4NDlaMDMxMTAvBgNV
BAMTKDUxREYzOTI5NkUxMEQ4MzdBMjcwMkE0MTg1QzE2MzVDMDcwRDM0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMspvyfzn+UL9GcgVUcXZuWbcd
ctkk8alwxC3dgS/5z4B9u1YndmbzVWhl1Cjv5d0u4phNVDqs5ozJ63qXbfowYnQe
vsluwRb2HLkO5u3NdbgxN4pZa+3v2dZ04dAz/hdYj2pG/Lzhynjyn9fNwGoycSMY
Au2zwhCx94hP+/1595XXoJk/wBy0YEReivzgT4hoZMBbvXY928Or0kzEk4SmShcD
fjpV9C7/SevT6c9fQEejVleIXyL8ydEepLO61402UeoZEWb75MT7pNRFbIIf51FB
5Z1I6dj/KuaLA45LCkpbvl2Qsk7DqGSLQeCd/eacaAjj2pr7923iQjJoAhhXAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUUd85KW4Q2DeicCpBhcFjXAcNNEAwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA1OTg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKhR1
g0AwDQYJKoZIhvcNAQELBQADggEBAGl5Fi2GWs/vecCAryK+FxSwt/MVhPrcTqyh
DxrqpiCk2ME/rlt+7qDA0I+zuYf9GL9/JU1cVPmvx8D1TgT4xgGU+q3+OPTcG6T8
+0Sd7ZoDjdJB6o7syYisaqbDEiALAn4icSA28H1QylSmj2buwMNcSlpHzKRaCBm3
X2/H7AFeNI2DmL63ROFDyk6od00fE7KXKDiSFVXOei0U1sl8VRcGcJ6nUapk7hFZ
ZCULiJikfIzd8NBdviBScZlObKATssgpW2Uuo5INKU4z1vbX+V/OEfIVjbZ1n+3h
4Lx9OIgSI1I8Qgm4jA/gB1xcwUEcEr+aH5PENpLJ2Mn/1auUnGc=
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:20:45 2025 by rpki-client