Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: rRnzUdYmFCIGBBmDh9aYT6Xow6Om/M1bA8Vo6O5yQSQ=
Subject key identifier: B2:EA:84:39:52:C9:CA:66:D6:84:7A:C9:16:8C:57:C1:BB:99:8C:02
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1911623BD87224346F36DAF9D4A86301D87730F3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205489.roa
Signing time: Wed 24 Jun 2026 14:15:27 +0000
ROA not before: Wed 24 Jun 2026 14:10:27 +0000
ROA not after: Wed 23 Jun 2027 14:15:27 +0000
asID: 205489
IP address blocks: 181.214.121.0/24 maxlen: 24
181.215.22.0/24 maxlen: 24
181.215.40.0/24 maxlen: 24
181.215.111.0/24 maxlen: 24
181.215.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:11:62:3b:d8:72:24:34:6f:36:da:f9:d4:a8:63:01:d8:77:30:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 24 14:10:27 2026 GMT
Not After : Jun 23 14:15:27 2027 GMT
Subject: CN=B2EA843952C9CA66D6847AC9168C57C1BB998C02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:fb:e6:a1:ea:a9:76:96:65:95:ce:af:9a:
e4:7c:74:06:03:49:bc:25:5c:1d:20:44:8b:c4:94:
7d:97:00:77:cc:1b:bf:ee:f9:f8:93:4d:61:6a:a5:
e0:c7:c4:45:c8:2c:82:07:70:db:30:3c:ce:c7:22:
8b:71:f1:1c:f1:0a:8c:ae:e2:55:f7:56:68:8e:36:
61:69:33:b7:4d:7f:9b:73:34:71:90:93:0d:de:8a:
5d:4f:28:3d:82:9d:6e:dd:09:a3:8d:4a:40:f3:3a:
a5:11:ba:09:94:04:af:27:2f:9c:2e:e4:2c:55:ac:
fc:6a:a9:b4:f6:0c:a6:35:8a:ea:bf:c6:98:0b:96:
04:48:f0:33:a6:60:0f:c9:b9:11:cb:ae:46:57:eb:
25:36:04:0e:13:50:be:1f:4c:3e:df:1f:1a:2f:30:
7a:b4:76:70:15:cc:f8:80:db:6c:9c:8e:2a:a7:72:
98:9e:2e:fd:72:1f:70:a7:ab:20:8f:38:c3:c8:58:
86:c8:83:93:82:d4:22:d3:ac:20:8a:f8:d6:7c:78:
d5:b7:a7:95:f8:31:fb:60:b8:95:91:f5:87:b3:cb:
47:d0:80:78:47:eb:8c:f9:36:6e:af:e9:3b:a9:c6:
44:13:ac:ad:1e:8b:a1:58:f9:75:c5:92:0f:21:e7:
b8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EA:84:39:52:C9:CA:66:D6:84:7A:C9:16:8C:57:C1:BB:99:8C:02
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.121.0/24
181.215.22.0/24
181.215.40.0/24
181.215.111.0/24
181.215.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:70:9f:97:1e:4d:8f:16:7b:b3:97:41:c3:5c:d5:f9:ea:7b:
9d:82:0c:73:65:af:a6:85:a8:ac:f1:e3:ab:22:de:b3:19:86:
fa:08:b5:ab:e6:8f:4c:ac:96:82:d2:48:61:05:7d:0f:73:71:
35:03:7f:6b:b4:dd:eb:77:78:25:ca:bd:67:d0:b7:43:0a:0c:
90:1d:c1:31:72:34:c2:dd:fa:2e:ad:64:7e:ca:9f:4b:5c:4a:
35:f2:75:03:03:88:8f:52:5b:a2:7a:7d:08:2f:ce:13:1e:b9:
bd:f3:d3:4b:a0:86:95:11:ff:b2:ce:61:cd:84:25:a9:15:aa:
a4:a2:dc:2b:ed:69:ea:c4:1b:41:0f:bc:84:a2:ed:f5:9c:06:
f2:45:78:44:8a:ba:6e:ed:49:45:fc:7d:26:15:92:61:4f:03:
f7:81:52:e5:77:6a:68:49:c2:fd:81:58:11:58:5c:5b:2a:5e:
92:0d:49:44:57:c5:f8:40:8d:1b:16:10:ea:e3:02:00:28:27:
d4:d7:ea:be:34:10:03:d8:42:2a:73:d1:91:d6:dc:6a:9e:24:
da:4c:1a:c6:18:27:64:14:9e:fd:2b:30:05:54:b1:9c:77:93:
8f:4d:ca:91:2c:2a:87:f9:5c:13:c4:1d:32:5b:2b:e9:92:a6:
75:f7:a0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:19 2026 by rpki-client