Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205091.roa
File: AS205091.roa (raw, json)
Hash identifier: TTNVjKT59fOLZkdZ/YuM8py6NmQiXWbIA5GdkZf74PU=
Subject key identifier: 33:F6:6F:B7:7D:75:D0:94:9F:85:3C:5B:E9:FD:EA:EE:1A:3D:84:0E
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4980247356F19899CD0FEFE2555EC3196D440AEC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205091.roa
Signing time: Tue 15 Jul 2025 09:54:13 +0000
ROA not before: Tue 15 Jul 2025 09:49:13 +0000
ROA not after: Tue 14 Jul 2026 09:54:13 +0000
asID: 205091
IP address blocks: 141.11.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:80:24:73:56:f1:98:99:cd:0f:ef:e2:55:5e:c3:19:6d:44:0a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 15 09:49:13 2025 GMT
Not After : Jul 14 09:54:13 2026 GMT
Subject: CN=33F66FB77D75D0949F853C5BE9FDEAEE1A3D840E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:b2:bc:ee:e5:1b:97:bc:23:9e:e2:1c:5e:
1c:a8:6f:16:12:b2:2f:39:78:3a:36:92:09:87:43:
08:c8:16:3c:ee:00:99:bb:88:32:bc:fd:24:f8:d8:
cf:ee:b1:26:67:a7:e2:61:83:24:15:87:a8:18:02:
d8:26:33:fe:7c:d7:3b:88:fe:69:c1:aa:16:56:38:
a0:92:27:88:4b:96:31:d2:33:65:ca:77:6a:87:06:
85:ae:94:b7:03:af:3a:34:b7:22:89:8f:08:fd:ff:
3c:1b:fd:b0:ad:fd:88:ea:f6:fc:2c:fa:29:ca:1e:
e0:06:65:97:c1:f2:c4:54:56:74:4d:b7:7c:6b:15:
22:26:3e:f1:f8:44:30:78:66:de:fd:3b:79:bd:15:
f8:00:5c:6d:fc:ee:84:30:40:c5:89:a6:b4:53:da:
37:09:16:36:46:45:f5:cb:69:77:3b:e5:57:fa:d4:
24:43:25:e7:c1:0f:a7:22:b0:c7:8e:88:be:58:0e:
0b:8f:09:65:f0:8f:e2:da:27:e8:73:b2:6b:60:d0:
b2:4e:c3:ce:95:15:cd:e4:64:3d:4f:37:bd:b4:9f:
bc:d1:12:2e:69:0a:58:bb:e8:0c:10:fc:a4:1c:d4:
2c:56:c6:5e:07:ae:a4:07:c7:d9:92:6c:ae:6f:93:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F6:6F:B7:7D:75:D0:94:9F:85:3C:5B:E9:FD:EA:EE:1A:3D:84:0E
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205091.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.248.0/24
Signature Algorithm: sha256WithRSAEncryption
71:26:af:0b:2b:cd:34:df:12:95:7a:c4:82:fc:03:43:5e:62:
9f:c1:d3:89:6c:35:16:71:c4:e9:86:34:21:77:46:20:8f:5e:
de:9a:93:24:c3:01:76:db:b7:53:6c:5f:8d:92:95:93:ba:c3:
4c:11:cf:29:88:6d:2b:e1:3a:6a:04:b3:cc:d2:32:70:3e:3f:
8a:36:5d:3b:b0:5d:ac:60:2c:88:b5:fb:67:7c:07:a2:c5:11:
33:b0:dd:27:c5:48:3b:f4:e4:91:2c:e3:86:88:9b:3c:cb:11:
d8:28:98:0e:b0:fc:92:30:e2:b0:48:5b:38:87:f4:a2:e7:d7:
47:ee:8b:95:03:2b:2d:91:c4:ed:2f:16:cb:d2:6f:31:7e:60:
2e:af:7f:99:02:cf:e3:7b:a7:b9:2b:0f:6d:5e:1e:da:e5:63:
c2:3b:e0:52:ae:c0:d1:a0:fc:f2:81:e4:27:3a:09:35:f0:32:
1a:21:22:c0:ad:05:03:cd:c9:49:5a:c4:f4:72:26:38:68:83:
d0:b5:7d:c2:30:47:97:43:77:e1:1e:34:34:c1:60:d0:f6:d8:
22:65:a5:b5:ae:22:19:92:27:50:26:88:fd:17:2d:d6:6a:cf:
b0:e4:e4:ab:10:42:45:86:1e:58:bb:e5:2c:5f:71:91:64:66:
ac:c8:e9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:07:11 2025 by rpki-client