Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: UsHno/nueZE59EL6TWhoiOPu9mouaBJKolBGMsOsQwI=
Subject key identifier: 2B:C1:6B:B5:5F:86:65:1C:02:97:6D:23:0E:C0:75:A2:45:11:89:4A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 71727E288956C1B490618C97D1B2B5538B1260A3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205489.roa
Signing time: Fri 02 Oct 2026 19:23:11 +0000
ROA not before: Fri 02 Oct 2026 19:18:11 +0000
ROA not after: Fri 01 Oct 2027 19:23:11 +0000
asID: 205489
IP address blocks: 143.14.123.0/24 maxlen: 24
155.117.143.0/24 maxlen: 24
162.141.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:72:7e:28:89:56:c1:b4:90:61:8c:97:d1:b2:b5:53:8b:12:60:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 2 19:18:11 2026 GMT
Not After : Oct 1 19:23:11 2027 GMT
Subject: CN=2BC16BB55F86651C02976D230EC075A24511894A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:57:38:3a:51:fe:e0:0a:a6:aa:30:f6:57:
14:4b:65:38:e2:46:58:fb:f1:c3:29:98:2b:c2:3b:
cb:58:cc:ed:cf:95:58:e7:41:cf:1d:27:ce:28:b2:
d7:10:fd:88:14:1f:c0:85:bb:9d:15:17:99:d8:38:
40:40:07:78:12:7f:60:b8:94:13:9d:06:78:96:4d:
6a:70:3b:8f:d0:ca:eb:4c:8a:e4:3a:e2:23:ea:8d:
7c:d3:96:48:9a:92:ae:ec:f7:11:45:ef:ef:37:a9:
8f:d7:52:9b:a2:84:01:65:bd:b6:29:49:73:c4:18:
67:de:43:07:45:03:7e:a5:26:14:4d:42:fe:6c:ad:
34:53:c8:5c:1c:95:aa:5c:f3:eb:f3:65:0d:ff:d4:
2e:68:bc:07:f0:0e:8a:fb:a5:7f:41:b9:4f:eb:cc:
57:50:38:f9:9d:31:a2:7d:81:e1:03:3e:db:bb:6d:
22:2d:08:19:24:09:06:83:ae:4d:f4:b7:36:22:ed:
0d:31:02:b4:99:67:4f:bc:73:30:aa:ce:c5:73:65:
6e:b5:d9:cd:f9:9a:cc:67:77:4e:e5:be:f6:ec:36:
bf:a2:26:84:ae:00:37:9c:b7:bb:f8:49:08:ef:3c:
e1:35:fb:ba:9d:19:21:04:78:b7:f9:9c:25:43:e0:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C1:6B:B5:5F:86:65:1C:02:97:6D:23:0E:C0:75:A2:45:11:89:4A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.123.0/24
155.117.143.0/24
162.141.96.0/24
Signature Algorithm: sha256WithRSAEncryption
21:4d:47:d8:0b:f7:44:01:8e:d5:75:4f:30:09:f1:b9:52:ef:
b2:70:63:44:73:45:00:e4:92:b6:a2:d9:04:4b:de:af:fe:b5:
96:e3:03:ed:8a:7f:85:03:ad:3f:0c:e8:d8:9b:3c:12:0c:fc:
07:a7:08:e4:a1:2f:af:0d:d7:f2:95:82:0b:14:e6:ac:00:87:
bd:3b:65:4f:50:96:82:97:a0:c0:e5:be:8a:3e:74:20:26:ad:
cd:1f:84:0e:20:cf:06:64:43:82:21:45:55:ae:e9:53:0b:f8:
b5:e0:fa:bd:83:1b:cc:83:e3:fa:53:0d:3a:2b:ae:c8:28:a3:
1a:6a:35:3a:07:b9:d1:1b:a3:8b:6d:c3:1d:49:a3:2d:16:e1:
9b:d1:23:69:d6:e8:67:74:20:77:69:d3:60:12:70:cb:87:d9:
10:7c:ab:f2:e5:98:86:c5:05:98:b7:32:61:9d:39:dd:89:e7:
ee:e5:28:4c:f2:d9:ec:16:ca:57:a0:00:f3:5b:5a:1c:7a:44:
8c:11:88:a8:61:da:14:39:14:b2:79:41:4a:d8:a5:38:d2:3a:
60:6d:d8:5d:2b:0d:89:94:df:f3:72:f6:9a:c6:a8:db:b9:1a:
9a:6c:6b:88:3b:ce:b3:5a:8b:c9:7d:04:64:1a:d0:62:48:b5:
28:56:91:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:08 2026 by rpki-client