Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205809.roa
File: AS205809.roa (raw, json)
Hash identifier: Pt0ogJ++Iu3ZzqY/ttuix+TNt4S4ajcjTaAqikUXZRI=
Subject key identifier: 10:94:59:48:E8:54:65:2A:3C:06:0E:14:F3:0C:DB:BD:78:31:F7:28
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 41A6872C72A3A2FBA0FAB56F65B8BB0D160AD194
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205809.roa
Signing time: Fri 28 Aug 2026 00:28:30 +0000
ROA not before: Fri 28 Aug 2026 00:23:30 +0000
ROA not after: Fri 27 Aug 2027 00:28:30 +0000
asID: 205809
IP address blocks: 82.21.172.0/24 maxlen: 24
82.26.65.0/24 maxlen: 24
82.29.203.0/24 maxlen: 24
82.29.204.0/24 maxlen: 24
82.29.205.0/24 maxlen: 24
82.29.206.0/24 maxlen: 24
82.29.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a6:87:2c:72:a3:a2:fb:a0:fa:b5:6f:65:b8:bb:0d:16:0a:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 28 00:23:30 2026 GMT
Not After : Aug 27 00:28:30 2027 GMT
Subject: CN=10945948E854652A3C060E14F30CDBBD7831F728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:14:d2:fe:3a:9f:04:e4:21:fb:23:40:d0:
56:3a:24:1a:92:bd:e0:2e:01:95:2f:53:24:fc:b4:
04:2f:77:7f:84:75:6d:f5:45:2a:f7:c7:12:67:44:
39:1b:7b:5c:a6:aa:d5:7e:aa:03:14:b6:81:74:6b:
2f:84:2d:70:b4:7a:45:dd:dd:84:bc:6f:19:43:ec:
55:59:29:9b:9c:40:92:bb:19:c4:62:23:cb:75:04:
3b:23:57:c0:8d:f4:3e:89:ee:c3:53:77:44:2e:d9:
0b:c2:71:be:83:45:ba:e8:04:9d:5c:c0:59:9d:a3:
fc:03:cb:e1:23:ce:cb:7d:4f:26:2e:89:8f:7c:15:
a9:c7:bc:2b:3c:ed:46:49:12:91:b3:1e:b1:22:2c:
38:47:3f:f9:b3:c3:0b:28:b4:81:dd:b8:bd:1d:ca:
cd:59:2c:a1:69:79:a9:e0:53:38:33:1f:54:40:7f:
d1:55:72:0e:f4:7d:63:76:2d:17:96:3f:cd:92:21:
57:a9:ce:22:42:5a:79:e0:22:d5:e3:c7:74:f8:17:
c6:fa:c8:f4:0e:f9:ea:97:db:00:c3:80:46:76:db:
b6:e0:f0:b9:ab:92:7e:ce:b4:7f:ef:f9:d8:e2:cb:
ec:00:31:e5:05:48:6b:d4:e1:7b:ed:c7:a2:0c:a1:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:59:48:E8:54:65:2A:3C:06:0E:14:F3:0C:DB:BD:78:31:F7:28
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.172.0/24
82.26.65.0/24
82.29.203.0-82.29.207.255
Signature Algorithm: sha256WithRSAEncryption
88:9d:cf:95:0d:22:bc:8f:db:04:06:59:99:6a:5b:be:fb:fa:
d7:e9:0a:c6:a2:18:87:7e:53:24:0c:2c:89:de:f7:15:20:f5:
59:50:a3:c7:70:79:c6:75:cd:3b:f2:94:9d:88:a5:09:36:71:
b9:98:97:b2:19:e1:61:50:c0:0a:d6:5d:54:1e:ef:33:f1:5e:
a2:bb:ba:5d:1b:c9:14:7b:76:5c:65:3e:5c:88:ec:ad:0c:48:
68:47:fe:be:3e:f8:15:ed:17:c8:b3:a4:b1:92:db:2f:2a:d6:
48:42:ab:3f:d4:0f:35:8f:1c:f2:45:a7:14:34:f9:8e:b2:8f:
20:41:f9:e1:1e:d2:06:ae:51:af:a9:73:da:27:12:1d:5d:d2:
b5:2c:7f:04:84:cc:00:12:88:c2:b6:67:64:c8:44:3a:83:75:
8f:9c:e1:e0:6b:63:2f:19:2c:88:cc:fc:f7:64:80:2d:88:f7:
2e:06:69:27:b2:a4:9d:8d:cc:5d:45:b2:ae:f7:7b:36:f4:e2:
6d:37:ee:ef:76:58:0e:67:c2:1e:d2:99:4e:d9:13:11:f6:81:
bc:51:47:76:f6:40:21:c9:f1:f0:37:83:ad:4f:26:a7:a6:da:
9b:f2:20:b3:d8:0c:99:4f:04:d1:90:e5:61:7d:b8:b6:64:77:
09:5a:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:22 2026 by rpki-client