Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205960.roa
File: AS205960.roa (raw, json)
Hash identifier: jwpBOC0pKxN67ZiOsOZXPTbF3n9KHlW7rAYYBjA2ty8=
Subject key identifier: 99:B5:B8:6C:C6:70:C1:21:D2:DF:5F:6D:B9:B3:29:9A:37:9E:C3:3E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 675E8CB5253DFEFA5053D92997E3CE0BCF94E512
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205960.roa
Signing time: Fri 21 Aug 2026 10:17:03 +0000
ROA not before: Fri 21 Aug 2026 10:12:03 +0000
ROA not after: Fri 20 Aug 2027 10:17:03 +0000
asID: 205960
IP address blocks: 167.148.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:5e:8c:b5:25:3d:fe:fa:50:53:d9:29:97:e3:ce:0b:cf:94:e5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 21 10:12:03 2026 GMT
Not After : Aug 20 10:17:03 2027 GMT
Subject: CN=99B5B86CC670C121D2DF5F6DB9B3299A379EC33E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:3e:99:1c:f6:fe:2c:f0:e8:f0:d8:dc:dc:
a2:04:9e:e6:4b:f4:d9:14:31:c3:18:15:07:61:f3:
ef:f1:50:ac:bb:78:d7:0d:35:7f:f5:ef:5f:77:06:
20:e2:4b:cd:e6:8d:30:30:d3:fe:05:01:af:b4:07:
0a:79:d5:59:7b:d9:e6:3d:93:f3:f7:ba:d8:ee:8b:
22:58:da:cd:59:f8:7b:f2:3d:61:f9:c2:e4:34:a7:
a5:8a:c4:b2:1b:ab:eb:68:0b:fb:02:04:4f:23:69:
ff:70:a4:1c:67:a1:07:9c:16:79:7d:6e:6e:97:45:
34:0c:4e:f0:08:11:3b:2c:1f:ca:bc:a8:85:60:f8:
f6:2f:f7:12:98:b6:04:3f:20:94:f7:3d:9e:c1:00:
f0:a1:8d:4d:3f:e5:e2:15:13:69:3e:82:ed:36:72:
3a:e4:96:57:3a:51:02:db:e6:a9:6d:e1:b6:32:c6:
36:31:7c:05:4b:83:b9:bc:9a:31:dc:18:98:d5:68:
e3:ce:f6:ec:48:5f:a2:3a:e3:d6:46:3d:76:e0:a2:
d9:94:3a:f2:25:02:d1:71:28:da:57:50:02:63:41:
7b:6f:d9:2f:da:81:09:3e:9b:33:44:52:4c:bf:b7:
b5:09:d3:eb:a1:c9:bd:85:3e:b3:bc:31:a3:82:df:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B5:B8:6C:C6:70:C1:21:D2:DF:5F:6D:B9:B3:29:9A:37:9E:C3:3E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:f8:26:d2:7c:f7:a3:c4:bf:15:6a:2a:95:75:8f:1a:e8:69:
6d:0c:65:37:28:f3:b7:46:ac:e3:4a:76:6d:af:f0:55:f9:0d:
7e:e8:78:a0:17:44:92:90:95:f6:fa:08:98:e6:9f:c9:fb:77:
e3:96:17:48:97:f0:6f:8a:9d:27:c8:45:39:48:6d:cf:5c:c0:
81:30:28:99:fe:93:dc:54:a5:9d:a3:6d:ff:6e:f1:44:1f:15:
5c:51:9c:d4:8b:7c:d5:20:14:b1:49:3a:6e:10:b9:52:83:c8:
47:40:bd:27:9b:aa:f0:68:c3:fe:1d:bb:9e:35:be:46:f6:17:
6b:fb:27:d2:3d:54:5b:08:84:cb:69:20:a0:bb:b5:02:15:82:
eb:ef:28:e4:36:24:86:60:0a:f7:8d:44:90:15:2c:c1:3b:86:
5f:3a:8e:c0:84:aa:8e:d1:9c:cf:77:a6:df:a1:51:a4:ef:19:
33:97:11:9e:b1:9d:4e:dc:4d:77:bb:f8:57:bc:05:11:54:5b:
58:02:d2:a2:8b:f2:1b:61:7e:ee:df:58:85:d9:3b:25:eb:cb:
26:49:ba:97:a0:bd:93:a7:ec:e5:41:c8:94:9e:d0:87:12:ab:
77:d1:6e:be:b5:4d:2c:73:42:d2:b8:83:0c:21:75:47:35:84:
c6:f1:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:08 2026 by rpki-client