Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: 6lsD/FjFfMxWC3T1jASV7DRLwgnpr6GDOS0lFlMoVIY=
Subject key identifier: 27:04:31:6A:19:49:7D:C4:8D:77:C1:0C:E7:3B:15:F0:A1:D5:D5:88
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3E8DFE5B44A707B41A149C9B43A29717CAFD98D0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205489.roa
Signing time: Mon 28 Sep 2026 09:31:46 +0000
ROA not before: Mon 28 Sep 2026 09:26:46 +0000
ROA not after: Mon 27 Sep 2027 09:31:46 +0000
asID: 205489
IP address blocks: 5.252.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8d:fe:5b:44:a7:07:b4:1a:14:9c:9b:43:a2:97:17:ca:fd:98:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 28 09:26:46 2026 GMT
Not After : Sep 27 09:31:46 2027 GMT
Subject: CN=2704316A19497DC48D77C10CE73B15F0A1D5D588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:16:5d:6f:8a:7b:2c:99:80:1f:39:12:de:
d4:b6:7e:12:c4:c2:36:c1:0a:33:39:a9:80:9e:53:
59:18:c0:b8:4a:5d:7d:fe:6d:a8:54:7f:0b:0d:54:
25:a2:76:4f:e7:ef:9c:76:e1:6f:93:98:e9:18:f7:
b5:ba:80:89:68:59:90:d6:eb:02:78:4f:23:5e:ef:
5c:43:9f:86:8c:be:19:0f:38:09:56:1e:a6:ca:1c:
c2:0a:61:f9:97:65:9e:db:84:02:c5:eb:a2:99:a6:
a4:6c:92:e5:92:54:5d:f6:df:90:ba:fb:f1:27:f6:
c7:31:37:26:68:8d:f1:22:7b:19:73:aa:c8:9f:c5:
af:62:98:80:44:23:dd:42:83:4a:66:d2:10:e2:0e:
00:c1:b9:71:ed:a0:c1:43:a7:ea:c9:40:fe:d9:59:
04:9a:b5:96:8a:88:47:73:65:78:52:bc:72:c2:bd:
a4:68:01:83:f2:35:71:2a:3e:1a:69:34:0c:b8:ec:
9d:84:c0:98:60:42:9e:37:35:81:0b:e3:c5:0d:6f:
12:01:b1:03:85:72:da:b5:7e:f5:fc:02:cf:68:78:
c1:f2:f4:1a:38:dc:6d:d2:8a:86:a1:95:ea:c1:d0:
72:bf:81:b6:10:0e:a9:66:a1:f4:22:c5:10:8e:b8:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:04:31:6A:19:49:7D:C4:8D:77:C1:0C:E7:3B:15:F0:A1:D5:D5:88
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.74.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:65:9b:ce:c9:7c:37:55:d9:c6:da:b1:24:fb:07:b7:eb:97:
11:83:83:15:e2:5b:41:26:0f:2e:be:cb:6d:34:ee:e3:14:aa:
22:d7:30:86:b8:0b:08:40:64:de:1a:3c:89:20:50:6c:45:c7:
de:67:84:f7:4a:68:83:06:b1:ad:18:a5:7c:05:90:3b:ab:1f:
02:60:27:7f:f7:e8:76:95:c1:56:76:69:35:f9:56:f6:22:15:
7c:88:cd:2f:ac:1b:c4:8b:53:fc:cc:bc:cb:af:6d:63:25:1f:
4e:ce:7d:14:a2:5b:33:dd:c8:be:38:8d:8c:43:29:1f:6a:d4:
d9:a0:69:1d:8b:92:9a:38:b0:1e:19:7f:dc:f6:b8:c5:a5:dc:
14:96:bd:b0:3d:9f:76:d6:4d:82:d7:3e:31:f3:3e:07:99:ec:
40:ed:a7:b4:0c:f1:4a:35:79:61:fb:8c:74:61:e1:21:e1:b6:
10:a5:4a:aa:e2:d5:46:66:1c:fb:be:17:a5:9f:2e:3c:67:2f:
a3:55:fa:32:6a:b3:17:2b:1d:0a:a7:50:b8:21:b2:bb:43:a4:
ec:20:a4:d8:f4:fe:3c:b5:9b:a5:f7:28:95:8b:9e:3f:63:f7:
8b:d7:62:e8:54:9e:d0:68:9e:4b:3f:54:d8:6f:59:b5:25:0b:
91:67:1b:03
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUPo3+W0SnB7QaFJybQ6KXF8r9mNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MjgwOTI2NDZaFw0yNzA5MjcwOTMxNDZaMDMxMTAvBgNV
BAMTKDI3MDQzMTZBMTk0OTdEQzQ4RDc3QzEwQ0U3M0IxNUYwQTFENUQ1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU2xZdb4p7LJmAHzkS3tS2fhLE
wjbBCjM5qYCeU1kYwLhKXX3+bahUfwsNVCWidk/n75x24W+TmOkY97W6gIloWZDW
6wJ4TyNe71xDn4aMvhkPOAlWHqbKHMIKYfmXZZ7bhALF66KZpqRskuWSVF3235C6
+/En9scxNyZojfEiexlzqsifxa9imIBEI91Cg0pm0hDiDgDBuXHtoMFDp+rJQP7Z
WQSatZaKiEdzZXhSvHLCvaRoAYPyNXEqPhppNAy47J2EwJhgQp43NYEL48UNbxIB
sQOFctq1fvX8As9oeMHy9Bo43G3SioahlerB0HK/gbYQDqlmofQixRCOuO4/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUJwQxahlJfcSNd8EM5zsV8KHV1YgwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA1NDg5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABfxK
MA0GCSqGSIb3DQEBCwUAA4IBAQAOZZvOyXw3VdnG2rEk+we365cRg4MV4ltBJg8u
vsttNO7jFKoi1zCGuAsIQGTeGjyJIFBsRcfeZ4T3SmiDBrGtGKV8BZA7qx8CYCd/
9+h2lcFWdmk1+Vb2IhV8iM0vrBvEi1P8zLzLr21jJR9Ozn0Uolsz3ci+OI2MQykf
atTZoGkdi5KaOLAeGX/c9rjFpdwUlr2wPZ921k2C1z4x8z4HmexA7ae0DPFKNXlh
+4x0YeEh4bYQpUqq4tVGZhz7vhelny48Zy+jVfoyarMXKx0Kp1C4IbK7Q6TsIKTY
9P48tZul9yiVi54/Y/eL12LoVJ7QaJ5LP1TYb1m1JQuRZxsD
-----END CERTIFICATE-----
Generated at Wed Oct 21 09:19:01 2026 by rpki-client