Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: zYXuKdA7BxQWpmYIghn7X+ICh5r3jM6PqYqwVjxchs8=
Subject key identifier: 89:6A:21:61:7C:0E:C3:E8:CA:8C:EF:D0:54:99:0A:19:C2:EE:2E:C2
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 47557DE36C64537D0E9FBFCF57EBF53AC4737082
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS205489.roa
Signing time: Thu 01 Oct 2026 22:34:32 +0000
ROA not before: Thu 01 Oct 2026 22:29:32 +0000
ROA not after: Thu 30 Sep 2027 22:34:32 +0000
asID: 205489
IP address blocks: 5.199.7.0/24 maxlen: 24
5.199.8.0/24 maxlen: 24
5.199.10.0/24 maxlen: 24
5.199.14.0/24 maxlen: 24
5.199.16.0/24 maxlen: 24
5.199.25.0/24 maxlen: 24
5.199.26.0/24 maxlen: 24
5.199.27.0/24 maxlen: 24
5.199.30.0/24 maxlen: 24
5.199.35.0/24 maxlen: 24
5.199.36.0/24 maxlen: 24
5.199.38.0/24 maxlen: 24
5.199.40.0/24 maxlen: 24
5.199.53.0/24 maxlen: 24
5.199.57.0/24 maxlen: 24
5.199.59.0/24 maxlen: 24
5.199.61.0/24 maxlen: 24
5.199.62.0/24 maxlen: 24
5.199.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:55:7d:e3:6c:64:53:7d:0e:9f:bf:cf:57:eb:f5:3a:c4:73:70:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 1 22:29:32 2026 GMT
Not After : Sep 30 22:34:32 2027 GMT
Subject: CN=896A21617C0EC3E8CA8CEFD054990A19C2EE2EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:e4:d5:f6:8d:66:b3:54:af:d2:ab:57:7b:
b7:7d:ea:12:30:18:2b:5f:3e:85:db:5b:2c:16:7a:
f3:40:72:92:e6:33:da:88:3e:54:c9:4f:99:03:72:
28:a5:4a:d1:2c:24:92:07:7b:51:c4:d0:80:c1:95:
f6:87:5b:19:e4:c1:c6:f2:d8:8e:10:22:20:de:46:
bc:14:7a:ef:78:e4:e0:62:18:8b:d5:fb:01:f8:52:
3f:eb:14:80:cb:50:f7:e4:9e:52:32:82:11:65:73:
5a:6b:67:80:5d:29:23:96:a4:75:fd:4e:89:52:3b:
c9:21:7f:15:fe:5b:f1:cc:74:14:48:8b:f7:a2:83:
fa:a9:f1:80:83:ee:41:2e:86:13:33:e2:47:dd:12:
9f:51:77:1e:ab:8e:d6:f3:f0:dc:f8:c0:6f:f4:57:
66:87:d1:d4:d9:5d:3d:34:cc:5d:97:0a:40:c4:6f:
ac:16:5d:61:bc:01:2b:74:d5:cc:e5:67:33:de:a4:
c4:36:95:b4:69:cb:fc:cd:9b:cc:8f:2d:ec:7d:e5:
ef:6b:3d:70:4d:3c:0e:f1:9b:a5:f1:66:5d:81:1f:
03:aa:63:59:46:d2:f2:3e:3c:0d:9a:23:64:64:3f:
ec:68:46:3d:48:01:8d:52:bd:4e:1e:4f:c9:84:4c:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6A:21:61:7C:0E:C3:E8:CA:8C:EF:D0:54:99:0A:19:C2:EE:2E:C2
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.7.0-5.199.8.255
5.199.10.0/24
5.199.14.0/24
5.199.16.0/24
5.199.25.0-5.199.27.255
5.199.30.0/24
5.199.35.0-5.199.36.255
5.199.38.0/24
5.199.40.0/24
5.199.53.0/24
5.199.57.0/24
5.199.59.0/24
5.199.61.0-5.199.63.255
Signature Algorithm: sha256WithRSAEncryption
27:47:0b:4e:df:81:4f:b1:aa:4f:07:c4:50:89:f7:ab:b3:9d:
51:a3:24:3a:e4:d5:57:5e:96:91:be:fc:93:4c:75:9d:5c:e9:
e2:66:5e:4c:30:80:5f:9c:16:59:00:7d:ad:fa:2f:a3:40:6f:
cb:20:20:4b:d2:5c:c2:f6:c5:27:08:8d:22:a0:f9:37:8f:9c:
92:74:25:9a:a2:98:74:6a:20:5d:13:30:f9:cf:10:c1:a2:8c:
9b:aa:f7:e0:79:98:62:50:16:60:02:75:06:d1:9b:e5:9d:7e:
57:59:a1:74:cc:db:84:c1:55:f2:12:65:22:b7:58:eb:0c:f4:
69:38:49:25:01:f4:06:b2:fa:ac:4b:da:56:f5:df:c6:f3:d7:
6f:a7:0d:21:d7:5b:04:4b:8b:b9:97:e0:13:9f:da:c2:8d:41:
aa:9a:a6:3e:39:d3:7e:80:36:5e:c4:82:c3:fd:20:2e:01:91:
d4:5e:2b:5c:2f:3a:54:09:8a:b6:47:cf:65:bd:9b:c9:29:f5:
c3:1b:c8:d8:12:4e:dd:b6:53:a0:4f:60:aa:ac:cd:34:59:b5:
d7:7e:66:27:4b:f1:eb:90:8e:36:cc:62:d4:43:51:5c:89:ac:
df:ed:c6:aa:31:bb:19:6d:df:ee:db:d6:ee:27:22:c3:29:31:
f3:92:3a:eb
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIUR1V942xkU30On7/PV+v1OsRzcIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjEwMDEyMjI5MzJaFw0yNzA5MzAyMjM0MzJaMDMxMTAvBgNV
BAMTKDg5NkEyMTYxN0MwRUMzRThDQThDRUZEMDU0OTkwQTE5QzJFRTJFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUjOTV9o1ms1Sv0qtXe7d96hIw
GCtfPoXbWywWevNAcpLmM9qIPlTJT5kDciilStEsJJIHe1HE0IDBlfaHWxnkwcby
2I4QIiDeRrwUeu945OBiGIvV+wH4Uj/rFIDLUPfknlIyghFlc1prZ4BdKSOWpHX9
TolSO8khfxX+W/HMdBRIi/eig/qp8YCD7kEuhhMz4kfdEp9Rdx6rjtbz8Nz4wG/0
V2aH0dTZXT00zF2XCkDEb6wWXWG8ASt01czlZzPepMQ2lbRpy/zNm8yPLex95e9r
PXBNPA7xm6XxZl2BHwOqY1lG0vI+PA2aI2RkP+xoRj1IAY1SvU4eT8mETCMxAgMB
AAGjggJzMIICbzAdBgNVHQ4EFgQUiWohYXwOw+jKjO/QVJkKGcLuLsIwHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0Yzc3LWZkOGIt
NDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wL0FTMjA1NDg5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbjAMAwQA
BccHAwQABccIAwQABccKAwQABccOAwQABccQMAwDBAAFxxkDBAIFxxgDBAAFxx4w
DAMEAAXHIwMEAAXHJAMEAAXHJgMEAAXHKAMEAAXHNQMEAAXHOQMEAAXHOzAMAwQA
Bcc9AwQGBccAMA0GCSqGSIb3DQEBCwUAA4IBAQAnRwtO34FPsapPB8RQifers51R
oyQ65NVXXpaRvvyTTHWdXOniZl5MMIBfnBZZAH2t+i+jQG/LICBL0lzC9sUnCI0i
oPk3j5ySdCWaoph0aiBdEzD5zxDBooybqvfgeZhiUBZgAnUG0ZvlnX5XWaF0zNuE
wVXyEmUit1jrDPRpOEklAfQGsvqsS9pW9d/G89dvpw0h11sES4u5l+ATn9rCjUGq
mqY+OdN+gDZexILD/SAuAZHUXitcLzpUCYq2R89lvZvJKfXDG8jYEk7dtlOgT2Cq
rM00WbXXfmYnS/HrkI42zGLUQ1Fciazf7caqMbsZbd/u29buJyLDKTHzkjrr
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:18:21 2026 by rpki-client