Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: 4MBHjulU+W7EwqNi21Pc6DxnQ+Pkl9OQ9jrpEorfjxU=
Subject key identifier: 18:D9:34:39:5C:A4:14:9E:52:CF:6A:F8:C6:C5:FC:3F:57:70:3B:F8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0BEC3D35F71C335F7A8DDEFD8E53A76D06920520
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205489.roa
Signing time: Tue 06 Oct 2026 00:00:14 +0000
ROA not before: Mon 05 Oct 2026 23:55:14 +0000
ROA not after: Tue 05 Oct 2027 00:00:14 +0000
asID: 205489
IP address blocks: 82.38.150.0/24 maxlen: 24
82.39.103.0/24 maxlen: 24
178.83.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ec:3d:35:f7:1c:33:5f:7a:8d:de:fd:8e:53:a7:6d:06:92:05:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 5 23:55:14 2026 GMT
Not After : Oct 5 00:00:14 2027 GMT
Subject: CN=18D934395CA4149E52CF6AF8C6C5FC3F57703BF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:cf:df:c2:18:84:03:28:12:bb:50:5a:6f:
94:ad:bc:7c:f8:cb:04:67:b4:c4:bb:ca:40:5f:7a:
b1:da:91:8d:96:9f:69:1f:6c:f3:dd:8b:3d:bd:5c:
12:48:6d:3c:0d:e5:f7:61:dc:13:a2:58:1c:93:3f:
08:53:00:26:15:db:6b:18:25:4d:46:59:f5:ba:d2:
19:7d:48:90:71:40:27:9d:35:f8:c4:e5:3c:21:80:
70:f5:31:c9:49:4b:89:ef:ba:0c:f5:6c:d8:ae:7e:
62:9c:ca:d3:c2:57:1c:8a:b2:81:00:41:4e:32:87:
92:35:d7:9d:19:de:26:d4:aa:97:2b:5a:1f:2d:01:
fe:76:b4:a8:b5:56:9e:07:59:95:29:18:74:f2:9d:
82:ef:9a:f8:7e:89:30:ee:36:4b:54:32:6a:f9:ec:
f7:a1:05:ac:df:78:00:f3:e3:43:a2:be:84:3c:3e:
cf:71:c4:93:17:80:87:37:31:96:d4:0d:7a:8c:e5:
58:d8:19:8f:39:07:76:73:0a:bc:45:43:bc:ef:f8:
c7:05:75:f7:c5:21:88:cb:07:ff:8f:c9:91:df:4a:
11:b1:96:56:67:8d:cd:f1:c5:22:2b:d6:71:36:25:
94:80:60:a4:5e:d6:f3:48:c8:61:2c:7f:43:04:a7:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:34:39:5C:A4:14:9E:52:CF:6A:F8:C6:C5:FC:3F:57:70:3B:F8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.150.0/24
82.39.103.0/24
178.83.115.0/24
Signature Algorithm: sha256WithRSAEncryption
85:87:5c:47:5e:64:e4:79:f2:6d:dc:df:ff:a4:1c:7c:b3:8e:
d1:20:c7:76:18:98:9b:6d:fa:46:c2:41:e3:79:ef:84:e9:10:
98:c9:02:f2:ae:fd:74:f2:56:1d:1a:02:6b:bf:ae:a2:8d:fd:
9a:71:d4:55:ea:08:22:f3:33:e6:81:34:d0:36:1c:9a:25:e4:
53:b9:1f:78:e6:94:33:3e:ba:89:83:88:cf:94:d8:01:95:fa:
3d:73:bd:1c:2b:b5:fe:56:67:b4:a8:97:6f:87:fc:38:50:c6:
72:6e:2d:e1:67:98:68:57:92:db:70:53:d8:9b:ab:bd:2b:08:
50:c2:90:d4:3d:6f:aa:4d:c9:46:83:bb:37:34:2e:49:17:96:
63:7e:83:51:b1:af:22:cc:79:da:29:0e:2a:0a:51:eb:4d:64:
f0:ee:78:c7:3e:60:e5:82:6e:e5:6a:bf:be:8c:fd:d8:c3:84:
c7:3a:2e:56:70:87:0f:0a:1a:d8:eb:6a:fc:bb:a7:db:7a:9c:
51:1f:6f:70:9e:9b:fb:e8:1e:4f:40:a4:89:d0:0e:b6:ae:e1:
eb:96:09:dc:03:ec:39:bc:b1:02:c5:11:d7:cb:66:ff:5c:8b:
44:f3:8c:be:1a:ef:e8:4c:9f:2b:e8:19:4e:75:34:4a:12:09:
58:a7:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 10:49:27 2026 by rpki-client