Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205548.roa
File: AS205548.roa (raw, json)
Hash identifier: 8lITTcg6owpiA3PLsU/EWNGH7ErquLi0fpzMW6s7gV4=
Subject key identifier: 4C:A2:6A:21:68:AE:2C:0F:AD:01:C6:5F:1E:E6:17:33:98:C5:30:F1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 275FC4ECE30A775109A2B6548B9CD14E0A836430
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205548.roa
Signing time: Wed 10 Jun 2026 04:26:46 +0000
ROA not before: Wed 10 Jun 2026 04:21:46 +0000
ROA not after: Wed 09 Jun 2027 04:26:46 +0000
asID: 205548
IP address blocks: 140.150.236.0/24 maxlen: 24
143.14.189.0/24 maxlen: 24
155.117.82.0/24 maxlen: 24
155.117.224.0/24 maxlen: 24
162.141.117.0/24 maxlen: 24
167.148.203.0/24 maxlen: 24
168.222.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:5f:c4:ec:e3:0a:77:51:09:a2:b6:54:8b:9c:d1:4e:0a:83:64:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 10 04:21:46 2026 GMT
Not After : Jun 9 04:26:46 2027 GMT
Subject: CN=4CA26A2168AE2C0FAD01C65F1EE6173398C530F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:c7:57:9c:68:cc:24:5e:a5:2b:e4:2b:9c:
e3:4a:5c:d6:1a:43:30:ff:58:a9:db:c0:9d:ef:79:
ab:d8:4b:84:67:17:e2:a2:01:91:2d:54:23:33:50:
bf:53:64:a2:cf:df:f9:b0:64:70:d9:1f:2c:63:6b:
56:01:ad:b7:04:70:99:c1:41:1b:21:b1:67:80:bc:
e5:dd:68:37:9f:41:14:fc:96:40:3f:31:9e:6d:87:
34:a0:11:3b:6a:df:18:94:db:8a:9a:1b:8d:1a:a7:
9b:c9:df:a8:55:49:ac:58:14:19:c7:b7:08:7e:c0:
66:7e:32:17:58:ed:d2:62:4b:2a:47:99:72:b9:76:
bd:c7:2a:78:97:68:b6:33:bf:2b:4e:0d:2a:78:59:
77:0a:22:77:c7:06:e8:23:92:6a:a8:dc:ac:6f:7c:
2c:82:be:94:87:3c:18:17:d8:1a:8f:e4:cd:98:c3:
87:db:24:04:a1:ce:02:0a:4a:3d:17:a8:b6:94:03:
c3:e4:49:c3:99:c4:53:12:d6:50:48:72:2e:f3:89:
9c:95:da:d3:3f:0b:aa:32:d9:98:b3:ae:ed:ff:dc:
1a:ec:de:fd:0c:11:41:06:a9:bc:0f:9c:10:e6:fc:
ff:c3:01:f8:dd:1a:e7:9f:15:f7:a2:1f:3f:3d:61:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:6A:21:68:AE:2C:0F:AD:01:C6:5F:1E:E6:17:33:98:C5:30:F1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.236.0/24
143.14.189.0/24
155.117.82.0/24
155.117.224.0/24
162.141.117.0/24
167.148.203.0/24
168.222.0.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5b:b3:c5:05:dc:f5:26:51:bb:21:f2:05:8b:ef:38:e8:c9:
f7:f6:5c:16:db:1b:60:ce:fe:03:c8:7a:d3:4d:32:8e:cc:a8:
3c:ae:40:e6:d8:c5:f6:31:e6:a7:5c:b0:fa:54:bd:83:88:ac:
42:b0:f5:4e:c5:81:22:aa:58:d3:cc:96:25:5c:8d:8e:68:17:
32:9e:a9:3e:90:86:4c:dd:d6:66:e8:5f:d7:2d:39:a4:06:3a:
df:b0:ef:65:af:af:fe:08:81:9c:cf:fd:49:be:b5:c5:b1:40:
c2:50:81:23:e7:d4:cd:ab:9f:8c:8f:2b:ea:f5:d4:3a:af:55:
b7:3d:89:8d:bb:27:23:e9:cf:b4:a6:2a:bf:1d:d1:a5:6d:3f:
f2:64:9a:9d:ee:4b:8d:28:67:24:14:e8:c4:fe:67:87:f9:63:
37:4a:03:05:5e:32:59:01:a2:56:c3:6a:b4:3d:0b:a6:38:07:
9b:93:ea:b0:4a:3b:80:89:dd:a4:29:fc:35:8c:16:ae:20:5c:
d7:6f:b4:87:1f:c3:8a:be:cc:bc:2b:8b:fb:ba:4b:92:a4:a9:
7f:50:64:da:55:f5:f7:56:7c:d7:8f:e4:b7:6e:23:6e:18:6e:
33:e0:d9:26:d3:00:ef:eb:26:f1:33:c5:d9:67:64:4d:6f:cd:
16:58:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:53 2026 by rpki-client