Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205705.roa
File: AS205705.roa (raw, json)
Hash identifier: QytAir3laKA868+WA045gviDfOu7H3SYD4fKuM6ovK8=
Subject key identifier: 54:A2:B2:4A:26:D7:D1:19:D3:E8:7F:AF:9E:1B:9D:0A:19:06:23:FA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1C901C7110FF1243C95DE6A5D276EFC6BCF08840
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205705.roa
Signing time: Wed 10 Sep 2025 09:57:13 +0000
ROA not before: Wed 10 Sep 2025 09:52:13 +0000
ROA not after: Wed 09 Sep 2026 09:57:13 +0000
asID: 205705
IP address blocks: 2a13:9500:db::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:90:1c:71:10:ff:12:43:c9:5d:e6:a5:d2:76:ef:c6:bc:f0:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 10 09:52:13 2025 GMT
Not After : Sep 9 09:57:13 2026 GMT
Subject: CN=54A2B24A26D7D119D3E87FAF9E1B9D0A190623FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:61:79:c0:f3:95:61:83:a5:cc:20:b3:2f:
f3:d8:d9:aa:14:9f:65:07:75:3f:81:ce:a1:4f:ac:
39:86:f6:f9:ff:c3:cf:d0:c7:4d:54:db:bd:72:f4:
c8:c7:a2:8a:8c:a2:53:b1:c6:d0:2f:23:54:33:3d:
b4:ec:c9:bd:fd:c0:13:bd:38:b5:bb:35:af:0a:8b:
61:22:72:ab:e5:22:99:43:25:1a:b2:7b:b0:ad:46:
a2:62:d5:11:87:6a:00:aa:5d:f7:6b:60:eb:71:db:
4f:8a:c5:7c:75:28:6e:aa:99:1f:40:1e:c5:56:17:
b3:70:17:7f:c7:38:07:88:9f:16:7a:cd:85:ee:9e:
97:e8:d7:bd:78:57:ae:d8:eb:4d:c8:e4:77:91:23:
c6:69:02:4b:be:c1:50:b5:09:08:ff:ef:d9:89:2c:
49:cb:7b:bf:5f:63:6e:a9:51:08:ee:ca:e6:e4:3e:
6a:e9:5c:58:c7:4c:ab:3b:da:0f:d3:69:0c:34:af:
fc:9a:c7:79:a8:f6:6e:81:42:f6:66:a6:1a:2b:5c:
75:90:15:95:90:8a:90:c7:73:b3:bf:4a:d8:19:b2:
ba:a2:db:e7:77:b9:83:8c:fc:16:5d:c8:8b:25:b4:
cb:40:4e:11:73:50:1c:80:93:29:41:41:5f:73:a3:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A2:B2:4A:26:D7:D1:19:D3:E8:7F:AF:9E:1B:9D:0A:19:06:23:FA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205705.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:db::/48
Signature Algorithm: sha256WithRSAEncryption
58:11:a6:9a:69:59:92:56:03:f9:fa:2a:d0:e0:5e:eb:6a:38:
13:15:a4:bf:9c:fd:53:0e:1d:0b:52:dc:83:3d:e3:ed:62:2c:
6e:5e:05:3e:15:a5:01:91:cc:d7:17:70:e7:f4:4e:51:46:e2:
46:3c:a0:4b:1c:df:a1:f1:79:80:f4:0e:d6:7a:56:e9:b9:a3:
0a:78:32:01:00:c0:c8:12:61:61:12:8a:71:73:55:a4:5f:16:
1b:3e:fc:07:1d:70:2b:24:df:a3:d5:77:d0:90:f7:d2:67:59:
7c:01:5c:dc:d8:fd:1a:71:7d:37:af:31:8e:20:cf:56:a1:13:
a4:98:ee:fb:b5:90:8c:89:78:09:aa:d5:6c:5e:82:b0:91:60:
b5:dd:61:c8:9e:42:e0:71:c8:57:67:bb:5d:a9:e8:6c:f9:9f:
96:f4:e2:46:4a:85:88:95:b9:fe:ba:fc:ea:f6:03:df:6b:33:
9a:db:b4:cd:2b:c4:0d:8a:a2:37:a8:ff:8a:34:24:50:30:8e:
89:a6:8c:3d:25:59:25:d1:58:57:26:05:47:93:62:c9:13:a3:
4b:58:73:fb:5a:39:8c:9c:d9:4b:19:a6:86:71:c6:2b:2c:79:
56:ad:50:e9:2b:99:48:46:be:2b:dd:63:8b:2c:96:56:92:7d:
d5:eb:0c:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUHJAccRD/EkPJXeal0nbvxrzwiEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA5MTAwOTUyMTNaFw0yNjA5MDkwOTU3MTNaMDMxMTAvBgNV
BAMTKDU0QTJCMjRBMjZEN0QxMTlEM0U4N0ZBRjlFMUI5RDBBMTkwNjIzRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QWF5wPOVYYOlzCCzL/PY2aoU
n2UHdT+BzqFPrDmG9vn/w8/Qx01U271y9MjHooqMolOxxtAvI1QzPbTsyb39wBO9
OLW7Na8Ki2EicqvlIplDJRqye7CtRqJi1RGHagCqXfdrYOtx20+KxXx1KG6qmR9A
HsVWF7NwF3/HOAeInxZ6zYXunpfo1714V67Y603I5HeRI8ZpAku+wVC1CQj/79mJ
LEnLe79fY26pUQjuyubkPmrpXFjHTKs72g/TaQw0r/yax3mo9m6BQvZmphorXHWQ
FZWQipDHc7O/StgZsrqi2+d3uYOM/BZdyIsltMtAThFzUByAkylBQV9zo3a9AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUVKKySibX0RnT6H+vnhudChkGI/owHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1NzA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AADbMA0GCSqGSIb3DQEBCwUAA4IBAQBYEaaaaVmSVgP5+irQ4F7rajgTFaS/nP1T
Dh0LUtyDPePtYixuXgU+FaUBkczXF3Dn9E5RRuJGPKBLHN+h8XmA9A7WelbpuaMK
eDIBAMDIEmFhEopxc1WkXxYbPvwHHXArJN+j1XfQkPfSZ1l8AVzc2P0acX03rzGO
IM9WoROkmO77tZCMiXgJqtVsXoKwkWC13WHInkLgcchXZ7tdqehs+Z+W9OJGSoWI
lbn+uvzq9gPfazOa27TNK8QNiqI3qP+KNCRQMI6Jpow9JVkl0VhXJgVHk2LJE6NL
WHP7WjmMnNlLGaaGccYrLHlWrVDpK5lIRr4r3WOLLJZWkn3V6wy2
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:27:29 2025 by rpki-client