Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: AQ4kO9r8zDW3hYAYtmBi2aPfW58MhEmsg0pbqKrUgD0=
Subject key identifier: 7F:80:EE:F3:85:35:30:28:FD:90:C9:7C:52:D8:E5:EB:8D:3C:CA:71
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 256E1BD8A3844684BE53DDA78F97E6452BFFA317
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS205489.roa
Signing time: Wed 15 Jul 2026 15:53:22 +0000
ROA not before: Wed 15 Jul 2026 15:48:22 +0000
ROA not after: Wed 14 Jul 2027 15:53:22 +0000
asID: 205489
IP address blocks: 212.17.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:6e:1b:d8:a3:84:46:84:be:53:dd:a7:8f:97:e6:45:2b:ff:a3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 15 15:48:22 2026 GMT
Not After : Jul 14 15:53:22 2027 GMT
Subject: CN=7F80EEF385353028FD90C97C52D8E5EB8D3CCA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:ed:0a:f1:e8:d4:dc:f0:dc:ab:31:a9:b2:
ae:2b:b1:23:e6:31:61:b8:f8:6a:a2:92:8d:1c:4b:
0b:c1:26:17:b6:a4:82:bc:2c:c2:0a:8a:3f:70:fe:
5f:06:30:6e:56:23:87:19:26:5c:8b:e4:12:a6:ab:
00:65:fd:e5:1d:2f:20:7a:c0:69:2a:7e:c0:ca:08:
49:55:e3:d6:0f:f6:c8:85:ba:ef:2f:21:53:28:f8:
99:3a:b7:6f:ab:6c:8b:13:27:ef:61:c5:43:11:e0:
9d:4b:c0:71:80:fc:de:08:ba:8d:9a:f0:32:0a:11:
6c:e1:a8:d7:43:fd:8b:73:cb:fa:44:cf:de:08:49:
6a:2a:42:f3:67:58:2a:3a:f1:ae:b0:e9:da:3f:87:
ae:6b:20:14:c1:ce:b9:97:e0:ac:ca:40:41:61:21:
df:fb:52:f9:12:cf:6c:a9:16:01:4f:0c:cc:c0:5e:
ae:bd:57:ec:db:21:1e:e4:41:fa:67:00:ba:66:06:
e1:37:30:3e:48:ae:4d:ea:e6:c1:53:37:d7:6a:8d:
22:ae:1d:35:ee:2a:54:5e:76:7e:52:20:ae:66:36:
5f:6e:82:b5:f1:a8:2a:f3:43:17:8c:6b:d6:99:02:
e4:93:8a:fd:26:30:49:51:24:db:a6:d4:81:90:ce:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:80:EE:F3:85:35:30:28:FD:90:C9:7C:52:D8:E5:EB:8D:3C:CA:71
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8e:39:c8:a2:48:31:92:c8:76:a0:de:7c:e8:9c:83:bb:5e:
a3:4b:78:42:2b:68:e4:22:4d:e6:a3:2e:d2:18:99:98:bc:c1:
ec:fc:7f:f9:4a:1c:fe:fb:34:24:be:ae:1a:b5:90:53:53:41:
41:38:99:a4:a9:82:3f:d3:45:1d:7d:07:14:30:59:43:43:5a:
d1:fe:ab:83:5c:7f:9f:e3:42:c3:c5:a7:cd:25:e8:7f:a2:6f:
47:40:91:58:fb:c9:b0:58:b1:de:95:a6:47:85:75:52:b6:1f:
89:5b:2b:57:3f:dc:2e:a6:a0:de:dc:af:ec:14:a0:0e:f5:53:
6c:bb:3b:cb:9e:f4:a2:ed:4f:4b:cc:b8:77:a4:c1:f6:2f:0a:
cd:5c:bd:c9:91:f3:98:d5:3c:d5:d2:cf:06:71:6e:e2:47:47:
10:70:25:d0:ff:f5:5f:7e:1e:09:4d:40:b2:74:dd:e9:a6:7a:
38:d2:d2:0e:50:da:c7:84:95:d5:2f:91:ae:1d:11:a6:21:06:
c3:85:5f:c6:c3:3a:56:d7:5a:88:2c:c9:39:a6:9c:cd:0e:f1:
2f:a3:b5:bd:e1:4b:f3:88:54:2c:71:41:c8:b8:b9:dc:9b:3b:
0c:5d:e1:55:58:4c:80:93:7d:b4:92:01:db:5e:f7:cd:88:cf:
9f:97:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:21 2026 by rpki-client