Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205544.roa
File: AS205544.roa (raw, json)
Hash identifier: HHxWttXrzgwJ9l49r+tGx8URj1PczUu2aEhZ1hDX7cA=
Subject key identifier: 40:F9:93:15:42:88:85:D3:50:FE:C9:56:E5:85:83:E5:51:B0:98:F7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 430ABE54B42D2BF194F8DD6F549DF1E403BA7E86
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205544.roa
Signing time: Wed 21 Oct 2026 11:40:00 +0000
ROA not before: Wed 21 Oct 2026 11:35:00 +0000
ROA not after: Wed 20 Oct 2027 11:40:00 +0000
asID: 205544
IP address blocks: 147.79.61.0/24 maxlen: 24
148.135.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0a:be:54:b4:2d:2b:f1:94:f8:dd:6f:54:9d:f1:e4:03:ba:7e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 21 11:35:00 2026 GMT
Not After : Oct 20 11:40:00 2027 GMT
Subject: CN=40F99315428885D350FEC956E58583E551B098F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:13:7d:3e:02:2c:17:95:df:0b:86:b7:20:
3c:10:9e:ed:39:d5:bd:60:02:aa:49:11:65:28:29:
ed:56:f9:77:9b:20:4d:02:4d:66:fa:ac:c0:b9:11:
d3:69:ff:b5:8c:1f:ac:5a:39:fb:86:7d:08:14:ab:
ec:3f:93:7d:34:47:67:d2:59:52:6d:97:50:08:d2:
ac:6f:d8:70:6b:dc:cd:49:bb:c3:d3:a8:7b:12:80:
3e:25:e0:06:86:af:1e:33:e6:cb:38:b8:2e:84:1a:
de:28:76:62:b3:e4:60:cf:4a:66:32:fc:30:36:83:
2a:6e:67:b0:25:a2:75:ea:fb:af:f8:9a:6e:bd:d1:
38:17:0a:4d:54:93:18:61:a3:48:b1:bc:15:8b:cb:
fd:9b:87:b4:8e:bf:ef:5d:1c:ff:43:43:3a:c5:60:
49:53:be:46:48:b9:fb:06:e5:93:b9:51:da:3c:d5:
23:9d:d4:1d:6d:42:a5:76:e0:51:4c:12:66:01:b3:
1a:f5:b6:7c:b1:85:22:6e:1f:9f:37:bb:27:19:4b:
4c:12:c0:9f:aa:32:73:d1:c9:61:25:16:46:fe:5e:
ea:e1:72:c6:c1:cf:b7:24:08:bc:2c:65:be:52:9d:
0c:12:cd:43:ed:88:c3:a5:cf:bd:02:d5:52:bf:6b:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F9:93:15:42:88:85:D3:50:FE:C9:56:E5:85:83:E5:51:B0:98:F7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205544.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.61.0/24
148.135.162.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:66:54:2a:8f:a2:4b:ac:8a:75:f0:d1:be:38:d5:17:99:83:
3d:3a:51:f2:50:ec:30:c1:c9:4f:41:59:e6:7d:04:d4:9d:5f:
e3:17:f8:93:43:94:bb:2b:a8:04:64:06:4c:b8:00:03:ab:51:
f6:7f:71:6c:23:e9:5e:d5:00:a8:3d:91:56:c4:6f:11:78:2e:
03:98:22:c2:c9:aa:4d:2f:a7:48:12:1d:aa:b5:78:b2:ee:3c:
b5:e2:a6:52:94:d0:7f:6f:9a:2d:c0:e3:88:67:19:96:96:27:
2e:28:db:d7:3a:10:dd:8b:81:5d:ee:96:f2:a8:b7:13:80:58:
3b:1b:16:64:99:af:a9:5d:52:f9:c4:9a:1c:ca:a8:bd:b1:2b:
f6:ce:03:38:2a:19:83:69:4c:df:48:f4:b8:6a:9a:6d:66:b5:
46:27:4a:0b:bc:e2:4c:69:5c:a4:f5:5d:c3:e8:a5:50:30:40:
33:a8:71:59:94:ad:05:6a:b4:e4:a6:04:4c:71:b6:4d:39:d4:
df:ec:40:59:a0:b0:94:58:c7:f2:26:75:a6:8d:34:5e:71:62:
3c:21:b6:c9:19:5f:1c:e8:bc:f2:67:75:a2:ae:7f:92:9d:4f:
4a:96:ec:43:bc:84:f3:66:f4:57:08:09:c4:c7:2a:aa:4d:ed:
90:5b:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:37:22 2026 by rpki-client