Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205772.roa
File: AS205772.roa (raw, json)
Hash identifier: PMjf/AZnECqi/DlLeb2UjNfADOat5RZCt6mJjXjrRm8=
Subject key identifier: A8:01:B6:0F:E2:49:4A:D6:24:CB:0D:44:1C:CC:86:8C:52:51:0D:D3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6ADB12C9AA3E8656C4B9791F42C07CE7E45DAA4C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205772.roa
Signing time: Wed 27 May 2026 17:32:03 +0000
ROA not before: Wed 27 May 2026 17:27:03 +0000
ROA not after: Wed 26 May 2027 17:32:03 +0000
asID: 205772
IP address blocks: 178.83.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:db:12:c9:aa:3e:86:56:c4:b9:79:1f:42:c0:7c:e7:e4:5d:aa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 27 17:27:03 2026 GMT
Not After : May 26 17:32:03 2027 GMT
Subject: CN=A801B60FE2494AD624CB0D441CCC868C52510DD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:2b:b9:fc:d8:6d:6e:78:69:55:3d:19:77:
a2:1d:4f:be:ca:f2:0a:9f:fb:6d:06:4e:4d:62:84:
47:71:be:0a:dc:c0:cc:18:ec:c4:77:6e:fc:51:a2:
b2:77:c7:08:22:bc:8f:cf:58:dd:6c:0f:bf:bc:15:
9d:bb:4e:ca:9a:6e:13:43:ac:d2:5d:de:fd:85:7d:
de:c3:10:d7:11:69:27:51:33:68:1d:df:dd:c9:81:
40:41:dc:d5:f2:81:e3:ce:96:73:80:96:86:55:11:
89:32:d1:0f:5e:20:80:aa:2e:0d:a2:07:a1:5b:13:
92:4d:02:4f:e8:af:39:8e:15:f0:bc:01:b9:b3:b1:
89:89:13:e3:0e:8e:5d:f7:a7:b0:ff:b3:df:db:d6:
06:25:fb:c5:a4:4f:0c:21:ec:4c:bd:71:46:0a:56:
00:d6:cc:a0:67:4f:20:0e:a5:85:b1:37:c7:b3:a8:
26:e9:5d:43:d5:74:b3:4f:e4:b7:fb:06:e6:8a:f9:
9b:08:62:77:7f:cc:f0:0b:55:55:17:c0:96:a8:99:
e3:cf:7b:fd:00:a6:98:fe:d4:90:d2:7e:ee:f4:57:
20:48:e5:49:19:84:0d:da:01:64:95:81:07:e3:08:
3b:4b:0f:a5:40:ad:39:a0:19:65:b4:07:21:11:93:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:01:B6:0F:E2:49:4A:D6:24:CB:0D:44:1C:CC:86:8C:52:51:0D:D3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.110.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f2:3c:7d:5b:28:71:0c:c8:ab:e0:cb:65:03:c2:df:45:6d:
6a:5f:16:b0:b1:c7:78:ab:7a:0c:ab:eb:90:4e:c0:b0:35:51:
74:23:f1:fa:1c:e2:42:43:de:56:62:cf:72:03:e3:32:2a:dc:
f2:56:94:2a:b0:6b:41:e1:65:da:a9:98:e7:2b:61:e5:0c:f9:
40:e0:fb:fd:2f:7a:49:07:73:e7:29:90:f1:75:19:23:9b:31:
00:54:54:71:b3:5d:be:e2:eb:17:d2:aa:fa:56:53:44:11:e3:
cf:e7:19:96:a5:70:03:bb:ad:50:a7:2c:eb:85:35:f1:72:7c:
cb:d7:9d:ed:26:6c:59:39:67:88:c2:63:1d:92:80:09:a2:bd:
1b:72:8c:b8:f1:53:c7:1b:25:44:01:73:82:cb:a8:6c:ca:2a:
e1:f3:63:e9:5b:7b:e8:50:c9:80:a2:8f:cd:e0:f0:75:63:af:
7c:21:5c:ad:4f:c0:ba:db:ce:26:ac:85:43:4b:69:fb:51:9f:
44:45:5c:d2:20:b9:ab:d1:87:44:92:a4:8b:44:c9:63:f7:75:
af:da:38:45:91:e7:83:57:d1:27:1f:a7:af:b9:fd:f7:b7:04:
2b:94:0e:f6:a9:b2:dc:be:77:8f:43:e4:3c:8f:73:0a:92:dd:
b4:33:b0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:13 2026 by rpki-client