Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205886.roa
File: AS205886.roa (raw, json)
Hash identifier: 81EwJRhUwV/TU1/uyPDOVIGZHV4E/UR9nukTfzMhhYQ=
Subject key identifier: 61:B5:65:81:D7:AC:4D:64:30:5D:28:69:32:A3:2C:32:BF:F9:EB:8F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5A8701FABE9EA74E394DB7ACA04771C9AAB1A1AA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205886.roa
Signing time: Fri 17 Oct 2025 02:46:44 +0000
ROA not before: Fri 17 Oct 2025 02:41:44 +0000
ROA not after: Fri 16 Oct 2026 02:46:44 +0000
asID: 205886
IP address blocks: 82.21.138.0/24 maxlen: 24
82.22.78.0/24 maxlen: 24
82.22.205.0/24 maxlen: 24
82.24.25.0/24 maxlen: 24
82.25.57.0/24 maxlen: 24
82.27.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:87:01:fa:be:9e:a7:4e:39:4d:b7:ac:a0:47:71:c9:aa:b1:a1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 17 02:41:44 2025 GMT
Not After : Oct 16 02:46:44 2026 GMT
Subject: CN=61B56581D7AC4D64305D286932A32C32BFF9EB8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:3a:73:a6:e9:55:a6:88:8e:42:b3:ef:c2:
8a:79:58:3e:6f:10:56:d2:b3:03:28:bb:19:93:e5:
3b:9c:b5:a3:8d:53:23:a5:2f:1d:72:15:39:1e:dd:
e9:e7:91:63:8b:de:b8:18:40:0b:fe:06:65:3c:0f:
56:95:5e:84:6e:5c:53:c0:e3:bb:90:6f:85:22:d6:
1e:61:22:8b:92:83:f1:c7:7a:02:19:84:9c:49:77:
0d:44:19:f3:31:2b:82:15:30:11:01:e2:00:34:af:
14:14:48:12:0e:d6:fc:0c:dd:03:82:b9:1d:14:8e:
eb:9c:bc:b1:e2:21:f9:09:29:6d:dc:1b:bc:4a:49:
50:b6:07:d3:a0:4c:88:43:3f:dd:74:72:f5:57:83:
a6:36:1b:fe:01:c1:b9:dd:6e:82:7d:f2:32:9f:67:
f6:6e:5c:de:2e:19:cb:8f:c0:58:19:c1:f3:fe:1b:
98:82:7b:68:74:67:61:af:fe:e3:d7:15:04:22:33:
c4:38:8c:96:ca:77:be:22:bc:f2:41:b1:8e:39:ae:
2d:96:16:6c:42:fe:ac:b3:7b:a7:de:32:39:a9:e9:
7a:5e:63:87:bd:86:61:2e:30:a1:e1:bc:fa:b0:30:
01:59:d0:10:4a:b1:48:85:b5:c5:8d:63:12:d9:32:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B5:65:81:D7:AC:4D:64:30:5D:28:69:32:A3:2C:32:BF:F9:EB:8F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.138.0/24
82.22.78.0/24
82.22.205.0/24
82.24.25.0/24
82.25.57.0/24
82.27.131.0/24
Signature Algorithm: sha256WithRSAEncryption
22:28:3a:57:e2:28:df:7d:b5:e7:4f:fa:0a:22:78:92:8d:da:
0f:3d:0a:a1:31:0a:9d:68:dc:43:2a:26:5f:ac:d9:9e:91:d6:
37:18:99:41:ba:03:2b:7b:3e:69:f3:ed:c5:64:f5:5c:6e:40:
26:31:90:f9:39:1d:95:60:51:69:fc:e7:b6:b7:19:aa:58:3d:
21:4f:26:07:73:13:0f:06:ea:3c:b1:13:73:96:69:bf:cb:dc:
9f:77:e8:52:ae:fa:b7:15:7f:a3:fc:e3:ac:0e:5b:d5:3e:e9:
01:ee:fd:4c:b0:98:28:6b:d1:32:12:fe:31:60:02:9d:2e:6c:
82:90:d2:c0:d8:a0:f0:c6:27:5b:2a:39:f6:8c:80:b0:f1:30:
70:50:e6:91:89:11:3d:32:6e:13:68:29:4d:c6:42:be:3b:4d:
4c:92:d9:99:84:34:1f:76:3f:c7:0f:9e:ff:28:17:91:21:fc:
b1:5f:96:9c:a8:60:e2:1b:7a:87:1f:f4:15:5c:32:67:b7:23:
4c:ca:fb:31:fa:58:20:33:e8:24:1e:17:a9:c0:e1:6f:a0:93:
8a:40:4c:e8:9a:d0:4b:d0:70:78:02:91:5e:42:6a:39:10:1d:
d7:74:39:f1:cd:da:38:94:41:ed:de:fc:7a:52:04:40:7c:56:
85:da:0f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:27:42 2025 by rpki-client