Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa
File: AS205886.roa (raw, json)
Hash identifier: UOnghmeDJS48G1b43oyNztE99aMLic6l1i5GftuOm9Q=
Subject key identifier: 13:EE:CE:5E:23:C7:D7:3B:AC:67:21:82:FD:78:F0:25:AF:28:DB:62
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7783AF2810D47EF1BAFC154034AD47881A0AF19C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa
Signing time: Sat 14 Mar 2026 10:13:21 +0000
ROA not before: Sat 14 Mar 2026 10:08:21 +0000
ROA not after: Sat 13 Mar 2027 10:13:21 +0000
asID: 205886
IP address blocks: 155.117.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:83:af:28:10:d4:7e:f1:ba:fc:15:40:34:ad:47:88:1a:0a:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 14 10:08:21 2026 GMT
Not After : Mar 13 10:13:21 2027 GMT
Subject: CN=13EECE5E23C7D73BAC672182FD78F025AF28DB62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:d0:23:78:6c:80:a5:d1:8c:c5:d1:cc:35:
d1:9d:07:cb:2c:12:64:07:47:c0:8a:0e:a2:a9:15:
b6:44:5b:dd:db:56:df:ad:15:cf:6b:8e:b9:0c:ca:
af:9d:c7:1e:c3:17:6f:6e:b0:b4:cd:fb:d9:24:21:
c8:cf:4c:f6:c4:54:13:3c:10:ec:a8:e0:00:45:96:
97:20:1b:92:d0:fb:7f:da:78:40:7f:80:08:63:35:
5f:e2:70:c4:22:dc:46:96:31:8b:b9:aa:20:2d:c6:
f3:92:7a:4a:63:64:bc:6f:03:fd:e2:da:9a:5a:f6:
48:8c:de:a3:de:d5:71:5f:ce:b9:da:dd:1f:dd:c4:
7b:f7:60:76:04:e1:84:51:01:50:1c:7c:da:88:e7:
2b:33:c4:29:2a:ee:bd:4e:a7:d8:08:61:06:1f:00:
6e:40:5e:e7:ef:99:08:b0:53:89:6b:aa:ee:85:8e:
fe:cf:18:55:9b:d7:d0:6c:aa:f7:a9:15:83:44:bc:
ed:16:6e:92:0e:b0:f1:10:51:a5:84:6c:13:cf:78:
b3:6d:13:23:be:be:31:d6:ad:6c:5b:21:df:5c:ba:
84:2f:0b:34:0b:cc:ae:67:60:c4:35:eb:99:06:59:
01:5e:95:ac:11:1e:82:ec:52:17:19:1b:f1:7f:ad:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EE:CE:5E:23:C7:D7:3B:AC:67:21:82:FD:78:F0:25:AF:28:DB:62
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.214.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4a:b0:75:6f:ad:cd:6c:1e:1a:e8:e5:87:7c:ae:d7:61:40:
ef:4d:5c:16:f8:0e:2c:74:e1:67:12:a2:9e:b8:a4:47:fd:e8:
15:28:47:15:97:0d:72:b8:26:53:a0:61:1b:4f:b9:0d:63:0b:
73:2f:89:1b:ad:1f:69:2c:c3:8f:12:b1:e0:88:53:6d:14:8a:
91:94:ae:1f:6a:27:62:31:33:b3:9c:11:16:c6:40:dc:54:fa:
fd:b7:53:c2:3c:13:3d:0e:e2:c0:3b:5e:05:9b:39:14:7e:8e:
a2:36:a0:58:1d:97:87:b0:c2:0f:4c:44:ed:84:cc:c0:c3:c4:
36:4c:3e:5d:72:ed:3f:0a:c3:af:79:3e:84:b4:d6:2a:70:05:
e2:c6:f9:4f:6a:eb:a8:e5:d7:81:ab:97:4b:45:28:2e:6c:42:
e3:a2:e7:72:bf:c6:8c:19:9a:d6:a2:02:0f:52:f0:98:ae:52:
12:0e:90:47:b2:bc:e3:58:0e:eb:d2:db:0a:13:d8:a8:36:08:
f0:f1:69:ac:07:4c:2b:c3:80:ac:e3:3c:a7:33:f2:69:58:b3:
53:66:fe:5f:4b:ba:5f:c7:a2:80:fc:f7:d5:f2:09:63:bf:be:
70:ec:6e:01:24:3c:53:11:d4:ee:d7:ea:bb:37:d6:7a:f5:da:
d4:07:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:59:58 2026 by rpki-client