Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205840.roa
File: AS205840.roa (raw, json)
Hash identifier: PUysSUv1tkkqD0YsCdCFzw9kygG3ghZVSeqnTjvMfLY=
Subject key identifier: 92:0C:5D:FB:8D:F2:1D:11:83:51:61:96:7F:E4:49:57:23:85:EC:54
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 781A43C71CFE5AE053865F7269EE637C5965C703
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205840.roa
Signing time: Wed 09 Sep 2026 20:09:26 +0000
ROA not before: Wed 09 Sep 2026 20:04:26 +0000
ROA not after: Wed 08 Sep 2027 20:09:26 +0000
asID: 205840
IP address blocks: 82.27.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1a:43:c7:1c:fe:5a:e0:53:86:5f:72:69:ee:63:7c:59:65:c7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 9 20:04:26 2026 GMT
Not After : Sep 8 20:09:26 2027 GMT
Subject: CN=920C5DFB8DF21D11835161967FE449572385EC54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:e8:d7:4e:d3:d7:9c:c0:53:ff:5c:53:c9:
c3:c8:4b:c5:9e:1a:d6:14:03:8b:1a:7d:5a:d3:74:
08:e2:2a:14:3c:b9:2a:44:53:b9:38:89:f6:15:38:
ac:6d:07:dc:55:1c:9b:68:9f:6d:38:c4:b0:93:f9:
04:10:92:22:b6:79:72:8e:91:24:f9:06:e5:d6:ab:
a9:40:c9:25:5f:d8:ff:1a:23:67:12:5b:42:3b:ca:
c7:a4:6b:e2:48:04:3c:fd:7f:1f:6b:cd:8b:02:05:
cd:a6:72:07:5b:eb:d2:e0:d6:da:51:85:23:bb:3d:
95:f1:2a:0c:20:7e:2d:fa:97:fd:db:0b:f9:4a:03:
80:72:e6:38:59:83:7c:a4:f3:5d:95:c7:7c:0a:67:
1c:7b:10:c1:8b:09:45:13:f5:2e:c6:b3:86:6a:c8:
bb:44:ba:e3:1e:09:75:b1:6e:c6:fa:ff:28:64:57:
71:17:d8:d8:30:83:d4:b4:a6:1c:50:a6:9a:7d:fe:
8b:63:25:7e:f7:e6:85:67:68:5c:96:2e:29:d9:85:
f3:48:6e:cc:21:57:cc:c9:2a:25:44:83:8e:bc:80:
bc:79:3f:ff:39:9e:95:26:8b:c5:03:fc:7a:bb:ff:
12:39:39:c1:c7:e5:35:79:48:b2:31:03:2e:0b:71:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:5D:FB:8D:F2:1D:11:83:51:61:96:7F:E4:49:57:23:85:EC:54
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.10.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ee:d3:24:9d:06:be:ef:e5:04:a7:6d:25:1d:1b:15:6a:8c:
d8:d4:e6:b7:05:d3:58:4a:8e:e5:01:b3:d9:32:3f:b4:2d:c8:
a0:86:4a:d0:d3:ef:1d:87:dd:83:09:a3:fd:07:8b:d7:69:49:
41:d5:88:ad:24:1b:51:be:58:81:f5:52:f8:bf:7d:3b:47:af:
05:5b:ea:4c:02:1c:dd:70:16:c9:99:7e:a1:f0:cd:e0:31:a8:
50:d9:40:f2:27:53:81:dc:94:00:e6:19:86:f3:65:4c:e0:85:
31:60:60:2a:17:10:7f:ec:27:a2:ea:61:6d:71:95:fe:71:9a:
c4:ef:47:b0:c6:dd:80:ee:85:6c:a7:98:7f:26:fe:69:35:56:
26:f3:c7:d9:49:24:84:dd:0a:cc:8a:77:4e:c2:65:b6:02:08:
35:99:3a:d0:21:8d:8e:03:f9:fe:06:bd:26:0d:b9:54:84:27:
55:a3:23:24:35:19:ad:e6:b4:ed:94:e0:46:75:6b:db:9a:7d:
2e:12:35:21:c2:fd:5d:0c:03:a9:c0:bc:ee:83:3d:1e:d9:8b:
4c:bd:66:2d:d3:21:ee:3b:b5:b7:33:70:db:e8:f8:05:72:30:
32:d2:b4:2e:25:31:ad:06:2a:44:03:62:63:6a:7c:89:a9:31:
34:f4:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 02:57:11 2026 by rpki-client