Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205896.roa
File: AS205896.roa (raw, json)
Hash identifier: tgjHbc1t0irf4kS7dDLouiZD3h0Tk424rETwCIMvStU=
Subject key identifier: B7:FD:17:AA:A8:98:01:EC:E1:D1:2E:AB:50:F2:C4:B1:01:9D:09:BE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 682892DFD712171B992CB909F8607C57C050D661
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205896.roa
Signing time: Wed 17 Sep 2025 06:20:56 +0000
ROA not before: Wed 17 Sep 2025 06:15:56 +0000
ROA not after: Wed 16 Sep 2026 06:20:56 +0000
asID: 205896
IP address blocks: 143.14.183.0/24 maxlen: 24
167.148.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:28:92:df:d7:12:17:1b:99:2c:b9:09:f8:60:7c:57:c0:50:d6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 17 06:15:56 2025 GMT
Not After : Sep 16 06:20:56 2026 GMT
Subject: CN=B7FD17AAA89801ECE1D12EAB50F2C4B1019D09BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:02:33:f1:c8:70:59:cc:5a:3e:e4:33:a4:
45:b0:52:83:b5:0f:1a:39:d5:8f:9e:14:a5:84:14:
90:bb:68:43:7f:45:7f:a8:ad:fb:e9:d9:3b:c5:39:
0e:bd:3a:4d:56:f0:b8:0b:59:2c:87:7c:91:ea:a1:
24:e7:44:bf:24:a2:ee:c0:28:17:8c:2b:c6:9a:19:
1d:41:b2:89:c5:ba:a0:27:ef:5e:1d:13:5c:b1:53:
5b:9b:8a:31:a3:4a:cf:8a:21:60:be:11:f6:da:37:
b7:63:2e:05:39:a7:a7:f5:cd:fc:64:bd:b4:1f:da:
59:1a:51:89:e6:71:bc:16:e1:06:c5:0c:0d:ac:3c:
4e:a9:72:1f:e9:fb:c2:a5:d5:9c:4b:ec:fb:86:b7:
47:b4:53:4a:d7:14:86:ee:50:46:f7:e1:cf:66:b8:
e0:20:a8:e5:5b:40:9a:64:15:47:42:6b:9d:22:3c:
ff:e9:40:2c:7c:59:b7:56:71:3e:9c:fc:68:0e:3b:
32:09:3a:d7:14:d1:56:6a:e9:69:d0:1d:18:12:8a:
bc:7d:f9:6d:d0:1c:f7:76:e4:b1:00:31:18:ff:49:
15:bf:3d:50:a6:01:d8:a8:28:a6:5a:7d:46:95:a0:
60:88:e9:70:0e:00:10:a2:f2:9b:bd:3b:22:29:4b:
03:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FD:17:AA:A8:98:01:EC:E1:D1:2E:AB:50:F2:C4:B1:01:9D:09:BE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.183.0/24
167.148.205.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:58:bc:90:03:2e:49:70:46:19:e4:7a:27:22:eb:71:82:db:
99:5a:aa:6a:a3:b3:46:e1:bd:ca:70:1f:6b:1c:ea:28:09:22:
17:98:6d:d9:f2:22:71:dc:a7:47:c2:f4:ec:4b:49:bc:39:fc:
09:26:16:dd:82:5c:48:17:66:2a:62:12:4c:ae:de:11:e1:7a:
84:3e:ed:04:1d:d4:12:b6:e2:31:a5:e6:78:57:b1:a5:a5:f1:
12:90:a6:e8:9e:3c:7b:95:b7:c7:dc:9c:1f:67:ab:97:e8:b3:
be:a5:74:18:63:a4:10:f8:74:93:1b:d2:21:d7:23:4b:fa:65:
0f:1d:74:75:46:1b:eb:39:0e:8c:88:06:4a:cb:90:4e:e3:57:
98:e8:dc:34:59:b2:36:a7:eb:cc:d8:69:19:8e:40:bb:9c:57:
ea:a5:4c:5c:a7:65:59:e2:6f:98:38:62:df:ed:f2:d6:a9:cf:
51:db:00:42:e7:1e:0c:b8:90:47:b9:47:6a:49:c0:cb:dd:b8:
31:df:58:5f:4d:f1:74:78:27:90:1f:bc:e5:18:14:c0:20:22:
02:49:43:2d:67:bf:63:f1:e1:42:f7:f5:53:d5:c8:bf:e4:bc:
3f:3b:6f:32:06:6c:06:e5:a5:26:50:8f:31:63:94:88:3b:2e:
5d:9e:40:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:25:01 2025 by rpki-client