Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: gV07pApvAff24FW+/V3iNTO6PoHLYHeanDkf0DezHl0=
Subject key identifier: 46:DB:01:2B:90:A8:83:49:39:89:14:FC:3E:06:5E:89:A1:EA:CA:6F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7AD573E7441DC2CFADF9FB5D3C8C0C15DA78764C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205489.roa
Signing time: Thu 03 Sep 2026 20:19:59 +0000
ROA not before: Thu 03 Sep 2026 20:14:59 +0000
ROA not after: Thu 02 Sep 2027 20:19:59 +0000
asID: 205489
IP address blocks: 143.14.123.0/24 maxlen: 24
155.117.143.0/24 maxlen: 24
162.141.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d5:73:e7:44:1d:c2:cf:ad:f9:fb:5d:3c:8c:0c:15:da:78:76:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 3 20:14:59 2026 GMT
Not After : Sep 2 20:19:59 2027 GMT
Subject: CN=46DB012B90A88349398914FC3E065E89A1EACA6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:a6:94:5c:35:6a:7e:11:62:2f:be:44:72:
84:8e:d5:5f:0d:bf:23:77:d5:f4:08:4e:4d:e2:de:
d0:8b:dd:01:9e:1c:7e:5c:51:66:fe:41:f7:fa:46:
ee:9e:f4:7d:f9:50:63:11:c8:24:86:dd:58:fb:84:
cb:84:75:2d:c2:35:d9:e7:36:53:f4:fc:c6:fb:4d:
48:10:be:5c:b2:9d:7d:0b:59:6b:c8:c4:06:bc:22:
46:a5:5c:9e:1c:ee:bf:69:e9:7a:f7:33:47:b9:2c:
16:49:83:e0:2a:93:d8:e4:9d:53:8f:ff:dd:af:65:
68:be:df:f8:c7:f4:0b:11:0b:ba:73:a6:ad:e4:99:
9d:69:7d:27:28:81:bd:1f:ff:0a:a9:c3:11:c5:e3:
21:0f:b9:b5:76:a0:21:51:e5:8a:ac:31:b1:75:17:
3d:2c:4b:f7:ad:6f:19:d6:26:52:35:a8:8a:82:32:
16:0d:31:ff:99:c9:94:09:a8:9e:59:20:ff:fa:12:
42:bb:f5:44:f7:6d:3f:bd:85:b4:3f:9b:26:3e:61:
23:e4:a1:60:40:b7:82:bc:4b:8e:18:44:ce:89:a8:
54:44:53:b0:f5:a1:57:7c:84:8e:f1:dd:c7:c0:8d:
a0:8b:d8:ec:2a:15:fb:99:e3:64:7e:b6:91:13:48:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DB:01:2B:90:A8:83:49:39:89:14:FC:3E:06:5E:89:A1:EA:CA:6F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.123.0/24
155.117.143.0/24
162.141.96.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:85:ca:08:21:08:52:eb:d7:63:c9:a5:5c:ef:89:d9:4a:e5:
09:3b:2d:dc:2d:2e:65:33:3b:1c:bd:9c:88:88:7b:3d:95:7b:
e4:4d:ab:72:ad:33:ed:c2:42:3f:81:e2:c3:cf:cb:2a:c1:c4:
4e:25:4d:ea:2e:d8:4d:83:a5:90:fa:72:71:16:3f:15:98:7c:
5a:cc:87:85:22:c9:4d:5a:8d:bb:55:e5:fe:90:af:42:2b:cd:
cd:db:39:da:b5:b6:80:84:26:eb:ac:f7:e8:86:78:89:dc:cf:
9f:dc:cf:22:36:35:01:2e:0e:2d:60:5b:96:49:e4:28:52:16:
4f:62:82:3a:eb:b3:25:fc:ca:58:86:b5:95:1b:38:bb:3d:24:
45:bb:68:a3:74:9f:71:cf:f8:19:43:de:b1:c2:59:9e:23:ef:
55:20:ab:42:44:df:f4:9e:ea:ee:5b:88:7e:f5:cb:a6:a7:2d:
30:8e:bf:74:34:7c:9f:e1:f2:09:26:60:f8:7d:8a:74:13:d3:
62:9d:30:b4:39:c0:0d:d3:c3:35:d3:67:54:13:d6:75:77:6f:
f5:e2:18:96:33:0f:c5:77:c3:85:1e:04:cc:28:c1:6d:85:5a:
dc:55:63:f1:cc:69:20:a6:c2:62:63:b4:22:8b:94:c6:af:1e:
be:2f:0c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:10:20 2026 by rpki-client