Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: AZyhpL5WwzPYZli+VZ05YiZU9xRbhaSs9lHAsPxquJw=
Subject key identifier: FF:A7:99:D6:52:09:44:7B:A7:19:36:13:A9:7F:08:3A:A9:25:D0:A8
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 216A41D3CCB51B70A8CDE81BF60D560588E20430
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205489.roa
Signing time: Thu 04 Jun 2026 21:05:24 +0000
ROA not before: Thu 04 Jun 2026 21:00:24 +0000
ROA not after: Thu 03 Jun 2027 21:05:24 +0000
asID: 205489
IP address blocks: 152.89.250.0/24 maxlen: 24
194.5.148.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6a:41:d3:cc:b5:1b:70:a8:cd:e8:1b:f6:0d:56:05:88:e2:04:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 4 21:00:24 2026 GMT
Not After : Jun 3 21:05:24 2027 GMT
Subject: CN=FFA799D65209447BA7193613A97F083AA925D0A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:e1:97:36:f9:ed:60:ae:7c:4e:e8:5e:fa:
28:c7:47:e1:87:02:af:2e:46:16:b8:93:cb:ea:ca:
86:1e:9c:4f:94:fb:f6:4c:92:08:83:01:4e:d5:90:
5f:35:e9:5a:ce:72:a4:a8:86:5f:72:dd:c1:7c:cb:
61:74:27:30:67:e4:bd:64:19:53:b0:6e:c1:36:89:
ec:0c:e8:e3:fc:f2:36:5d:9b:91:99:63:48:e3:45:
1c:55:74:e2:e7:34:59:ff:98:14:d3:e2:19:62:8d:
71:53:3c:14:32:03:d9:a1:c9:d1:de:94:82:ab:85:
23:aa:6e:3d:be:6a:aa:2a:b1:8d:b3:23:b7:88:55:
8d:42:87:c3:f3:7c:ea:ef:d7:5b:3d:74:f1:c9:90:
63:23:13:50:16:34:b6:13:05:0c:6c:08:01:c5:1a:
71:53:db:c8:76:a7:03:ac:1d:37:b6:47:c4:e2:34:
3b:82:e0:3e:86:02:cd:45:d1:7b:0d:e1:0c:91:7a:
91:14:94:a6:26:5c:bd:0a:46:0c:15:0e:0e:a8:d1:
7f:1a:a2:60:a7:5d:63:5d:d6:1e:e7:10:2f:4c:cd:
15:5a:61:89:c2:fc:ba:b6:48:10:98:9e:12:41:13:
1c:61:4f:26:58:f6:cd:6f:d9:3e:82:01:9b:20:8f:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A7:99:D6:52:09:44:7B:A7:19:36:13:A9:7F:08:3A:A9:25:D0:A8
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.250.0/24
194.5.148.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:52:68:8f:1f:b4:53:6d:fd:55:25:6a:c7:fc:9a:80:00:fa:
89:04:91:24:ee:fc:e2:76:93:1c:b8:78:f8:b1:74:21:0f:4c:
8f:26:f4:d0:6f:54:c2:98:8b:b3:b4:f8:3e:49:c6:19:bb:16:
88:bd:59:40:65:5e:b2:00:98:a0:32:6a:be:e3:fe:7c:64:92:
df:6a:f1:e2:3d:f0:eb:e5:a1:6f:29:6b:82:1c:3a:bb:9e:41:
1b:cb:33:da:94:58:b3:b6:61:29:5b:39:bf:92:25:41:13:36:
55:a4:7a:3e:1a:c4:b5:94:ec:b1:dd:04:ca:3a:31:03:dc:0f:
1a:c2:1b:15:c6:66:50:26:a9:04:72:d6:e8:1f:49:88:46:14:
c4:de:cb:7c:2c:66:cd:52:2f:8b:5f:96:b5:49:ae:45:9e:f6:
c0:72:12:72:6e:84:e7:5c:39:ff:cf:0f:bf:e8:b2:95:af:d4:
7f:d5:da:25:da:e3:e3:cb:e1:87:3b:eb:0c:02:f2:10:40:9f:
68:d0:e9:e2:ec:a4:87:55:a6:fa:40:fd:07:39:f3:8d:9e:9b:
eb:2d:05:e7:b1:40:4e:26:4a:a2:33:4c:a1:a8:db:f2:e9:db:
46:60:0e:b8:f7:24:76:74:99:a4:a5:c1:19:3c:0d:b5:c2:14:
8a:3d:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:07 2026 by rpki-client