Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205987.roa
File: AS205987.roa (raw, json)
Hash identifier: 2CAS88FJw2XPdWhhEk4vBgVR6Q/evrP65KFwJyhvJGw=
Subject key identifier: 6F:FD:8C:4D:00:E4:89:61:73:18:8A:06:30:BB:C6:50:91:4F:42:A0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7BEFE51BF002875699CE6781AE38C45387DBBE50
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205987.roa
Signing time: Wed 27 May 2026 17:37:03 +0000
ROA not before: Wed 27 May 2026 17:32:03 +0000
ROA not after: Wed 26 May 2027 17:37:03 +0000
asID: 205987
IP address blocks: 181.215.176.0/24 maxlen: 24
191.96.103.0/24 maxlen: 24
191.101.102.0/24 maxlen: 24
191.101.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 14:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ef:e5:1b:f0:02:87:56:99:ce:67:81:ae:38:c4:53:87:db:be:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 27 17:32:03 2026 GMT
Not After : May 26 17:37:03 2027 GMT
Subject: CN=6FFD8C4D00E4896173188A0630BBC650914F42A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:7e:0e:cc:50:12:b9:bc:2c:5f:16:fe:d0:
04:4d:bd:5d:9e:76:4c:ee:7e:35:eb:ac:e8:92:3e:
ff:51:2c:af:b8:9d:dd:ac:3c:1f:b8:26:c0:5b:5a:
1c:12:ee:f8:c4:7f:f1:af:41:73:87:e0:fd:de:1e:
76:e8:4c:91:d7:46:30:ed:c3:40:4d:18:52:3d:06:
98:ca:92:f1:d8:33:ee:79:79:1c:92:c3:97:bb:99:
46:ca:d9:88:13:54:33:d5:3f:0b:4a:f1:4f:40:51:
97:32:c3:db:e5:41:44:48:ff:57:8b:fa:40:dd:a4:
2f:94:03:d1:2c:e1:94:5d:82:1a:cf:45:45:e1:6c:
2e:81:ba:ca:32:20:73:75:44:4d:67:75:a7:39:c8:
c4:9a:d1:4b:16:ff:bb:9c:28:fe:d7:e8:ae:fe:e1:
13:ff:3b:a2:e3:8e:52:8f:31:04:eb:7d:93:f9:c7:
d3:bf:e2:70:ed:e2:25:8b:e7:ba:b2:f4:45:f7:8e:
94:19:b7:5c:7d:d5:7d:2e:0b:46:f0:82:a8:bf:a9:
e6:2d:9e:2a:74:05:f4:59:eb:c1:28:2f:fc:e3:cc:
54:e3:c6:a7:44:65:b7:e6:03:ca:b6:12:7b:ea:48:
d6:45:c4:53:f0:6f:c6:04:dd:1e:3d:3f:73:b6:01:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FD:8C:4D:00:E4:89:61:73:18:8A:06:30:BB:C6:50:91:4F:42:A0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.176.0/24
191.96.103.0/24
191.101.102.0/24
191.101.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:00:d9:71:0f:de:bf:e1:75:d3:ab:53:2b:b2:0c:41:2c:e1:
07:2d:68:76:48:27:bb:4b:25:9a:57:53:92:27:29:34:8f:39:
fc:80:d9:11:8f:98:95:ac:b5:d8:c5:1c:63:38:20:33:4a:48:
66:e0:64:ed:06:45:89:21:f5:ca:c0:b3:20:fc:65:2c:95:69:
95:61:26:65:92:8a:0f:8d:4c:6a:c0:2a:85:58:f3:43:6f:11:
44:bd:50:22:5f:99:d2:b4:f5:9d:79:72:02:f4:8b:e4:7e:4a:
d5:ef:70:83:e8:a5:72:92:e7:1e:be:e8:ad:bb:28:83:a2:58:
7a:f3:1a:63:91:1b:45:6a:25:3f:0c:84:22:1d:c3:f8:36:96:
5c:d1:d1:2b:3a:49:bd:32:56:9c:12:af:74:36:9c:05:8c:70:
eb:c0:e5:49:ec:72:c5:17:fb:2a:6e:20:1a:f8:26:2f:9c:07:
70:9b:54:e3:e6:41:00:1c:ff:eb:fe:b8:7f:1f:50:e8:9d:7e:
e6:7e:b0:b0:d7:7e:91:03:19:90:b4:33:68:9e:50:26:d5:6c:
2b:50:db:d3:8b:af:9b:8b:5a:95:c2:ae:e0:73:e3:b7:1c:cf:
a8:96:98:3e:b2:d2:de:35:08:59:b0:39:c1:25:6c:40:cb:cc:
79:4e:c5:1d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUe+/lG/ACh1aZzmeBrjjEU4fbvlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA1MjcxNzMyMDNaFw0yNzA1MjYxNzM3MDNaMDMxMTAvBgNV
BAMTKDZGRkQ4QzREMDBFNDg5NjE3MzE4OEEwNjMwQkJDNjUwOTE0RjQyQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVD34OzFASubwsXxb+0ARNvV2e
dkzufjXrrOiSPv9RLK+4nd2sPB+4JsBbWhwS7vjEf/GvQXOH4P3eHnboTJHXRjDt
w0BNGFI9BpjKkvHYM+55eRySw5e7mUbK2YgTVDPVPwtK8U9AUZcyw9vlQURI/1eL
+kDdpC+UA9Es4ZRdghrPRUXhbC6BusoyIHN1RE1ndac5yMSa0UsW/7ucKP7X6K7+
4RP/O6LjjlKPMQTrfZP5x9O/4nDt4iWL57qy9EX3jpQZt1x91X0uC0bwgqi/qeYt
nip0BfRZ68EoL/zjzFTjxqdEZbfmA8q2EnvqSNZFxFPwb8YE3R49P3O2ASUFAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUb/2MTQDkiWFzGIoGMLvGUJFPQqAwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA1OTg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAtdew
AwQAv2BnAwQAv2VmAwQAv2V4MA0GCSqGSIb3DQEBCwUAA4IBAQAMANlxD96/4XXT
q1MrsgxBLOEHLWh2SCe7SyWaV1OSJyk0jzn8gNkRj5iVrLXYxRxjOCAzSkhm4GTt
BkWJIfXKwLMg/GUslWmVYSZlkooPjUxqwCqFWPNDbxFEvVAiX5nStPWdeXIC9Ivk
fkrV73CD6KVykucevuituyiDolh68xpjkRtFaiU/DIQiHcP4NpZc0dErOkm9Mlac
Eq90NpwFjHDrwOVJ7HLFF/sqbiAa+CYvnAdwm1Tj5kEAHP/r/rh/H1DonX7mfrCw
136RAxmQtDNonlAm1WwrUNvTi6+bi1qVwq7gc+O3HM+olpg+stLeNQhZsDnBJWxA
y8x5TsUd
-----END CERTIFICATE-----
Generated at Thu Jun 4 01:16:18 2026 by rpki-client