Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205591.roa
File: AS205591.roa (raw, json)
Hash identifier: SptWUMaGT+dcmtREHhNUNIy+4Krj3t75VBJrSIpKmOY=
Subject key identifier: A1:C6:72:F4:D6:E1:D0:84:38:5B:E8:5B:D8:DC:5A:5F:4F:94:1B:CB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6B9A6DD161E74C4E0A00007CD50C1D48E1B4385A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205591.roa
Signing time: Fri 13 Mar 2026 14:24:18 +0000
ROA not before: Fri 13 Mar 2026 14:19:18 +0000
ROA not after: Fri 12 Mar 2027 14:24:18 +0000
asID: 205591
IP address blocks: 82.41.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9a:6d:d1:61:e7:4c:4e:0a:00:00:7c:d5:0c:1d:48:e1:b4:38:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 13 14:19:18 2026 GMT
Not After : Mar 12 14:24:18 2027 GMT
Subject: CN=A1C672F4D6E1D084385BE85BD8DC5A5F4F941BCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:96:69:f2:16:4b:84:0f:5a:9f:8f:ec:29:
f0:2f:d9:03:9c:6f:a8:00:d5:9f:d0:9e:2e:4c:e1:
9d:6d:a5:33:81:58:b2:00:85:40:1f:ac:80:73:6a:
d8:44:79:55:11:37:fa:46:36:6d:78:8c:4b:99:10:
9c:c4:f9:f7:43:8b:d4:04:42:c6:17:2a:ce:04:85:
29:b0:60:6d:d0:64:5e:cf:57:e4:da:1b:57:8c:e5:
d2:f4:e7:9c:9b:60:80:6a:fd:6f:46:b5:28:17:91:
11:fc:44:06:20:3c:bf:33:7d:d2:97:6b:79:47:7a:
66:11:5b:23:2e:13:6d:1f:99:a8:d9:ab:24:9c:d9:
37:75:3f:65:d8:cf:db:d0:35:30:86:8b:d1:06:8f:
88:42:85:48:39:a4:fa:9b:1c:a8:8a:56:3d:a4:b5:
4b:23:ce:a5:6b:0a:dc:8a:a7:49:a4:06:6a:63:f8:
58:14:45:f3:14:51:ac:e0:a4:c5:8b:cb:c5:47:8e:
42:cc:fa:0d:10:5a:3d:53:36:05:e8:ca:6b:1c:48:
3d:62:c3:ac:e2:6e:a2:e3:26:c3:61:6d:98:be:dd:
50:c5:a7:96:1a:e4:22:14:80:a8:61:c5:01:1a:1d:
3a:b0:80:88:a9:e0:f5:86:5b:92:0c:c2:8c:37:c9:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:72:F4:D6:E1:D0:84:38:5B:E8:5B:D8:DC:5A:5F:4F:94:1B:CB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205591.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.141.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5c:84:45:1f:d5:b4:58:2f:a5:15:3d:85:9f:2f:0b:4e:8b:
ee:20:ac:a8:d8:de:59:81:7d:ea:8a:43:78:16:b0:68:6a:10:
9e:00:c8:31:88:3d:1d:15:48:46:e5:99:21:fe:ae:2f:81:b5:
8a:02:93:37:30:c9:7d:f2:0d:ac:e2:51:8b:c1:56:65:14:9b:
a1:d9:f4:2e:58:e8:1c:4b:d4:fe:cf:be:e4:3a:e5:ae:6e:42:
88:97:7c:d8:9c:4b:37:68:c6:53:4c:51:82:fb:0e:dc:0b:88:
30:2f:19:88:14:36:ef:62:2c:4e:8c:53:ce:9f:0e:91:73:ae:
a7:64:ef:11:d7:85:d8:2c:39:83:58:98:a4:16:d3:2f:16:4c:
58:52:84:1f:4f:68:ed:91:2b:a5:52:41:45:2c:79:3e:d6:b6:
51:13:46:05:3b:eb:e4:0a:2f:a0:8a:9a:4e:32:2b:47:6f:ab:
a5:b3:58:1d:5e:4f:66:68:5e:89:8e:c4:d7:4a:b8:aa:38:4a:
05:69:8e:43:fb:2a:fd:8f:a1:57:17:2c:db:a0:d9:e0:a2:83:
73:55:fb:a2:95:99:c3:27:8f:11:be:a9:1d:8b:41:64:d6:4f:
52:b6:d8:b7:5b:df:30:54:d0:6b:44:70:71:9a:8a:f5:58:0a:
27:1d:4e:ff
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUa5pt0WHnTE4KAAB81QwdSOG0OFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMTMxNDE5MThaFw0yNzAzMTIxNDI0MThaMDMxMTAvBgNV
BAMTKEExQzY3MkY0RDZFMUQwODQzODVCRTg1QkQ4REM1QTVGNEY5NDFCQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCabpZp8hZLhA9an4/sKfAv2QOc
b6gA1Z/Qni5M4Z1tpTOBWLIAhUAfrIBzathEeVURN/pGNm14jEuZEJzE+fdDi9QE
QsYXKs4EhSmwYG3QZF7PV+TaG1eM5dL055ybYIBq/W9GtSgXkRH8RAYgPL8zfdKX
a3lHemYRWyMuE20fmajZqySc2Td1P2XYz9vQNTCGi9EGj4hChUg5pPqbHKiKVj2k
tUsjzqVrCtyKp0mkBmpj+FgURfMUUazgpMWLy8VHjkLM+g0QWj1TNgXoymscSD1i
w6zibqLjJsNhbZi+3VDFp5Ya5CIUgKhhxQEaHTqwgIip4PWGW5IMwow3ydx5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUocZy9Nbh0IQ4W+hb2NxaX0+UG8swHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1NTkxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUimN
MA0GCSqGSIb3DQEBCwUAA4IBAQBwXIRFH9W0WC+lFT2Fny8LTovuIKyo2N5ZgX3q
ikN4FrBoahCeAMgxiD0dFUhG5Zkh/q4vgbWKApM3MMl98g2s4lGLwVZlFJuh2fQu
WOgcS9T+z77kOuWubkKIl3zYnEs3aMZTTFGC+w7cC4gwLxmIFDbvYixOjFPOnw6R
c66nZO8R14XYLDmDWJikFtMvFkxYUoQfT2jtkSulUkFFLHk+1rZRE0YFO+vkCi+g
ippOMitHb6uls1gdXk9maF6JjsTXSriqOEoFaY5D+yr9j6FXFyzboNngooNzVfui
lZnDJ48Rvqkdi0Fk1k9Stti3W98wVNBrRHBxmor1WAonHU7/
-----END CERTIFICATE-----
Generated at Mon Mar 16 16:13:41 2026 by rpki-client