Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205418.roa
File: AS205418.roa (raw, json)
Hash identifier: Vd+gf9OO7r2FeKOam70/4PkdGQMdy0NY55NQDtzEqRY=
Subject key identifier: 6B:3B:09:DE:71:A5:AC:7F:10:FB:0F:55:EC:62:23:D6:7A:A2:03:9F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 28AC695BE30C5279EA1CB5556A9A2C7367426FB8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205418.roa
Signing time: Wed 27 Aug 2025 06:14:59 +0000
ROA not before: Wed 27 Aug 2025 06:09:59 +0000
ROA not after: Wed 26 Aug 2026 06:14:59 +0000
asID: 205418
IP address blocks: 143.14.49.0/24 maxlen: 24
155.117.164.0/24 maxlen: 24
162.141.4.0/24 maxlen: 24
167.148.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ac:69:5b:e3:0c:52:79:ea:1c:b5:55:6a:9a:2c:73:67:42:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 27 06:09:59 2025 GMT
Not After : Aug 26 06:14:59 2026 GMT
Subject: CN=6B3B09DE71A5AC7F10FB0F55EC6223D67AA2039F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:19:a3:90:89:5d:57:70:0c:02:dc:3f:c7:
04:a4:67:83:85:03:a3:ae:b8:ff:bb:ba:2a:19:51:
b7:f3:16:f7:83:8f:7b:a1:e1:9b:b8:d4:97:9c:15:
cd:6b:0d:3c:62:ff:af:5e:44:7f:c4:a6:51:d6:6b:
67:61:b0:2d:35:ad:64:62:d7:89:6a:b2:9a:f9:03:
4a:56:f6:ad:4f:54:92:e0:be:6a:91:51:0e:1a:30:
18:d1:c5:b2:8a:83:bf:84:46:c9:f0:b6:94:73:85:
bd:74:93:2a:e2:c4:92:1d:4b:fd:94:9e:9a:9f:5e:
e0:44:5e:f6:fc:1b:66:d3:e1:6b:c3:1a:2c:22:65:
5d:fd:20:ab:01:9c:18:ee:4c:95:79:2b:76:d7:b2:
af:b5:8d:26:51:78:fb:38:20:77:1c:b1:52:f6:a7:
96:83:87:fa:0b:9d:4e:5f:63:0b:96:d2:91:b8:ff:
48:f0:d0:e3:ca:e6:e5:5d:bc:47:10:da:a5:1d:41:
07:fb:23:1c:f2:30:20:e3:a7:83:c5:10:10:2f:e7:
dd:ec:d4:7a:ee:de:7a:c0:04:b5:52:28:ec:ba:90:
23:f2:c7:49:73:0a:cd:4a:ae:95:3d:9e:69:8b:57:
a0:76:28:21:6b:e1:4f:20:04:8c:23:c6:cb:08:d7:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3B:09:DE:71:A5:AC:7F:10:FB:0F:55:EC:62:23:D6:7A:A2:03:9F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205418.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.49.0/24
155.117.164.0/24
162.141.4.0/24
167.148.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f9:4b:7c:63:f3:4d:da:81:6e:0b:06:91:cf:2a:08:05:db:
42:13:28:c4:b8:bf:97:27:62:ad:c8:26:be:b1:69:ca:94:db:
22:6e:92:ad:9e:78:08:ed:86:3d:61:e6:42:86:c9:fb:e0:f4:
01:36:f6:62:ec:23:ca:88:7f:85:19:64:cc:26:3b:cc:fb:c3:
0c:01:61:73:7f:30:51:a7:6a:38:ac:a6:14:69:4d:9f:f8:21:
2c:96:2f:78:6a:91:c7:32:b2:7e:fb:7f:8b:a2:d2:93:a1:13:
69:d7:f9:7c:09:71:7c:33:e4:76:e5:9a:d5:57:99:32:74:2b:
bf:d3:3d:4e:af:2e:b1:91:92:32:e7:1e:18:32:55:dd:ec:17:
bc:07:eb:8a:b4:76:8a:eb:12:f2:56:24:d7:6f:dc:9d:ee:3f:
e6:ee:ae:68:a0:8c:1b:15:6b:02:1a:97:b7:f5:11:97:b3:f2:
45:e1:e5:43:30:c4:e4:1b:e4:48:03:c1:a3:ee:11:ff:3d:e8:
f0:ac:8c:6c:21:13:65:d0:0b:70:96:e3:c9:cd:30:a8:5a:89:
a1:d7:41:6e:0a:63:fd:65:f6:95:d0:70:57:cc:bf:fd:ae:96:
f3:8b:fe:3f:02:b6:35:3a:6f:dc:b3:50:f3:da:0a:d3:0e:34:
ae:7a:19:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:46:58 2025 by rpki-client