Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS204765.roa
File: AS204765.roa (raw, json)
Hash identifier: qDVLLAZCDzcfKr887nxebe5HZMnhgkrf33PL2+Owj90=
Subject key identifier: 03:F7:9C:88:27:B8:C5:45:03:76:39:41:D3:DE:7D:34:92:17:08:5B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: CAC13379B8363DAFCB471367C0BF23546344E6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS204765.roa
Signing time: Mon 08 Jun 2026 18:50:07 +0000
ROA not before: Mon 08 Jun 2026 18:45:07 +0000
ROA not after: Mon 07 Jun 2027 18:50:07 +0000
asID: 204765
IP address blocks: 95.135.180.0/24 maxlen: 24
178.95.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ca:c1:33:79:b8:36:3d:af:cb:47:13:67:c0:bf:23:54:63:44:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 8 18:45:07 2026 GMT
Not After : Jun 7 18:50:07 2027 GMT
Subject: CN=03F79C8827B8C54503763941D3DE7D349217085B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:04:bf:32:a5:93:6d:8a:35:87:1b:9b:0d:
ac:f8:7b:76:b1:e0:16:d8:db:1e:b3:34:81:d5:2b:
3c:20:c3:6d:6f:d4:5b:f1:8b:7e:72:8a:4b:f6:59:
ae:34:28:08:56:bd:e7:9f:5e:d8:48:b4:67:b8:50:
63:b1:0e:86:2a:03:b3:93:d6:58:e2:be:50:15:b0:
ed:b7:3a:22:75:2b:ad:01:94:c6:fd:81:8e:15:4e:
81:68:67:9f:66:f6:0a:af:35:ee:ac:88:69:b8:40:
5f:36:6b:84:90:e8:44:2a:25:52:98:e4:28:70:5b:
80:fd:39:34:a4:6c:e4:84:5a:b0:f8:2f:14:8b:c9:
35:6e:d2:65:98:54:35:c7:04:fc:2d:c3:4c:7b:78:
c9:86:d4:86:c4:18:ef:ad:44:0b:80:46:cb:bf:d6:
ed:3a:bb:60:78:b8:70:46:86:00:04:b8:84:60:0e:
be:d9:c1:15:7e:2e:a2:b2:9c:d6:b1:ea:e6:38:06:
5c:c9:ab:0d:48:09:a4:d7:ef:5a:49:87:cd:e2:89:
e5:02:a2:f5:b4:87:62:36:57:ad:81:e9:f8:18:6a:
52:ed:cf:1c:98:02:a2:77:a3:a6:d0:2f:04:85:47:
0f:8f:88:c9:07:24:50:70:07:0a:a6:64:ab:04:7f:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:9C:88:27:B8:C5:45:03:76:39:41:D3:DE:7D:34:92:17:08:5B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS204765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.180.0/24
178.95.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:53:6d:aa:a7:63:79:7f:d4:f4:01:2c:36:5c:8e:26:87:ed:
4d:fd:0c:ea:4d:39:1c:14:41:e5:9f:de:21:c1:3f:a8:0a:99:
c3:37:89:38:60:5c:7f:be:3c:d3:d8:e2:51:88:be:57:8d:9f:
6b:85:6c:17:d0:fd:4e:0c:52:b3:19:1b:f3:b0:eb:a1:b7:79:
c1:0a:ea:5d:4c:d8:e0:87:74:02:91:6f:c2:a4:78:20:b5:68:
09:c3:ad:ee:c1:0d:06:57:d4:6a:44:94:99:14:6a:9c:bc:cb:
c2:e1:93:73:34:35:30:95:93:da:46:64:ea:35:a3:00:57:94:
0f:61:63:47:50:82:19:d6:22:b3:1a:19:91:cf:10:95:2c:86:
1f:ba:19:4c:94:a7:be:31:e1:ea:3f:56:d8:d6:65:4d:7e:3b:
34:82:20:60:ba:59:94:52:ae:c2:d8:e1:e4:a4:19:ba:4d:f2:
cf:c8:fd:06:91:ef:85:13:2d:89:ee:b2:76:f4:82:1b:dc:b1:
b8:60:87:29:a2:1f:b8:d3:86:b6:d5:19:34:5b:55:ec:c6:8b:
c0:91:f2:6e:ce:07:8b:38:37:3c:2a:80:7d:82:c4:d9:51:3a:
5c:26:27:ac:b9:1c:9e:ab:8e:8d:ed:af:c7:4a:78:75:e3:80:
2e:bc:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:03:50 2026 by rpki-client