Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205502.roa
File: AS205502.roa (raw, json)
Hash identifier: Ak9h5T6L+DIzpyaKXgW931nP8q7vBMCD7gRj4fE0K0k=
Subject key identifier: 9A:94:C8:7A:16:3B:6A:3F:6E:2E:62:21:2D:BB:2D:BF:1E:0A:90:1A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 16A0017F3FB1EE3A421362105E2F070BB9CF588F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205502.roa
Signing time: Fri 05 Jun 2026 05:27:24 +0000
ROA not before: Fri 05 Jun 2026 05:22:24 +0000
ROA not after: Fri 04 Jun 2027 05:27:24 +0000
asID: 205502
IP address blocks: 155.117.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a0:01:7f:3f:b1:ee:3a:42:13:62:10:5e:2f:07:0b:b9:cf:58:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 5 05:22:24 2026 GMT
Not After : Jun 4 05:27:24 2027 GMT
Subject: CN=9A94C87A163B6A3F6E2E62212DBB2DBF1E0A901A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:92:a3:ff:64:01:de:6a:68:c0:a3:39:b6:
f3:91:a8:83:58:69:36:a5:84:24:cc:16:77:7e:9b:
86:af:8b:82:d5:3d:48:d7:23:2a:2a:20:6c:f4:7a:
2c:f8:2c:1c:3c:a1:01:40:6b:6a:d3:d5:a9:ba:8a:
f5:17:3e:6d:39:01:fd:92:73:7c:15:ef:d3:16:ea:
74:be:e6:5a:eb:2a:58:a6:ba:94:ca:2a:a5:3f:cf:
a9:a5:d6:ed:b4:d6:17:00:4c:33:d6:e6:cb:e9:cf:
0b:b1:5a:45:14:58:8e:cb:e4:29:2b:43:8d:b1:d1:
f8:c1:c6:6f:28:09:1e:56:0e:29:83:de:e8:4b:cf:
0b:5f:72:2f:80:74:98:fa:13:a3:35:60:21:29:02:
9f:56:33:07:24:6d:24:b4:a1:e7:5b:41:24:7b:92:
91:05:06:79:7f:90:7c:4f:8a:f6:06:65:6b:ae:3b:
8b:67:8c:65:c6:12:4c:0d:fd:f6:f5:13:08:a1:41:
e3:0d:b2:c8:29:6f:76:5e:40:a5:05:91:7a:a1:6a:
4d:1e:1f:95:d6:af:57:35:4a:3f:45:85:62:5a:c7:
31:71:79:9c:0e:46:c2:d8:4e:4c:7e:64:32:bf:49:
62:0f:7d:f4:a2:52:cc:d4:39:fe:b3:68:2b:b3:df:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:C8:7A:16:3B:6A:3F:6E:2E:62:21:2D:BB:2D:BF:1E:0A:90:1A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205502.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.251.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2f:30:c9:6e:ba:15:d3:48:81:42:f6:2f:5d:2b:93:c9:18:
22:10:8b:02:85:69:c2:78:23:72:1c:bd:ac:ae:70:99:0e:64:
ac:b1:ee:2c:48:ec:7e:09:28:48:fa:61:8d:69:f9:a8:b5:39:
71:66:56:18:11:bc:42:3a:b5:c1:c4:26:96:ea:04:5d:9e:1f:
21:f4:05:82:16:3f:fe:54:ea:27:2b:53:36:96:b6:aa:b6:d1:
3a:fd:5a:4b:3a:1a:dd:6a:70:a2:d0:ab:cb:c2:14:ca:83:a6:
2e:9b:02:90:38:cf:44:35:b9:25:87:5b:b0:f2:e2:d3:21:6c:
50:39:60:4c:8b:8b:a6:d9:fb:00:4a:28:02:8a:e2:d5:61:8f:
81:65:1a:55:dc:f4:d0:30:ee:c5:66:a8:ed:f5:1d:47:ef:41:
8d:e9:db:25:cd:ab:09:c8:a8:53:73:de:0c:44:a2:5c:a2:b8:
b8:5b:79:c9:90:9c:00:cf:d5:74:1b:67:08:02:11:52:95:8c:
cf:b1:99:b5:42:81:c2:10:4e:fc:9e:cb:be:f2:44:33:56:8a:
e5:6a:cf:6a:f7:07:a0:6d:74:ad:a0:1f:68:bc:f3:81:57:57:
e2:00:d9:1d:2f:51:65:81:12:a7:f5:ff:24:1a:7b:5b:82:e1:
db:ac:5b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:48:56 2026 by rpki-client