Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205305.roa
File: AS205305.roa (raw, json)
Hash identifier: DRb9yKkPYHLyRj2+I/4LQz8X2QID0JrmCsRbELLUDRo=
Subject key identifier: 4E:D2:88:E8:D4:D1:D0:9E:28:40:CD:34:4B:38:32:4A:A6:5C:A7:44
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 11751212153D4C193177349026849842173961DC
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205305.roa
Signing time: Wed 01 Jul 2026 07:00:12 +0000
ROA not before: Wed 01 Jul 2026 06:55:12 +0000
ROA not after: Wed 30 Jun 2027 07:00:12 +0000
asID: 205305
IP address blocks: 2a14:7584:a001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:75:12:12:15:3d:4c:19:31:77:34:90:26:84:98:42:17:39:61:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 1 06:55:12 2026 GMT
Not After : Jun 30 07:00:12 2027 GMT
Subject: CN=4ED288E8D4D1D09E2840CD344B38324AA65CA744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:62:3e:fa:90:da:52:cf:3b:8d:e0:0d:7c:
c1:4b:89:c6:53:ef:ee:f7:ed:71:fd:b7:98:5d:bf:
2c:59:84:0c:ed:12:b3:6d:c4:80:9e:97:5e:d2:63:
19:ed:ea:6c:bb:f2:9d:c9:c0:3e:95:a6:9e:8b:8c:
a2:3a:2c:91:b9:ac:70:d4:1f:85:34:4c:9e:64:fd:
33:bd:9e:06:81:01:46:04:30:94:c9:8a:cc:78:5a:
23:c7:b8:13:43:f0:bd:b8:bb:35:30:0b:3e:f9:b7:
34:2e:52:bc:01:3f:f4:71:98:75:90:7f:84:ad:2f:
d8:1b:2d:57:5d:93:73:94:f1:94:5a:76:3b:ad:94:
f4:4f:34:67:e6:4c:44:ff:20:71:9e:d0:84:71:a9:
45:1f:f9:dc:53:92:92:10:b0:d0:ca:66:53:3c:9e:
c8:5b:6e:7f:48:0e:29:8a:9a:95:9a:ea:39:16:43:
cc:96:b8:1b:d3:05:de:01:f1:7f:15:9d:ac:a6:09:
c7:80:d6:7b:56:9c:07:46:ea:ca:9c:2c:c4:e3:05:
38:b8:cc:ff:c8:66:97:07:f7:1b:f9:3b:0d:70:5f:
e7:0c:e2:5c:e6:d6:5d:da:e1:fb:80:1f:b5:13:3f:
54:dc:9b:08:97:41:17:b9:50:2e:bb:be:94:9d:38:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D2:88:E8:D4:D1:D0:9E:28:40:CD:34:4B:38:32:4A:A6:5C:A7:44
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:a001::/48
Signature Algorithm: sha256WithRSAEncryption
8d:1d:93:90:f6:91:cc:f8:d0:97:92:65:b1:14:36:e1:77:cb:
2e:c1:20:d6:f3:60:d8:ab:fb:ce:0d:70:6c:89:68:42:f7:2d:
d2:de:49:d4:8a:d1:57:14:ba:b9:1c:da:7c:19:4e:28:de:50:
81:55:99:e3:44:c9:2a:86:17:ee:96:21:4a:69:c6:c3:ef:22:
27:93:9e:c7:be:2d:22:e8:8e:63:79:f1:fe:c1:59:4d:3f:f8:
2f:ba:8d:e5:63:56:c5:23:a3:90:af:b5:48:08:77:6c:a1:96:
b7:5f:97:49:bd:3c:25:31:c2:d8:16:49:f6:30:e6:6d:bd:2c:
9e:ae:6a:1f:2b:41:3d:52:43:2b:de:8e:66:35:8e:88:c6:d9:
84:74:6b:92:e8:9d:d6:c9:78:18:33:37:f0:de:30:d1:21:e5:
cd:2e:20:ee:9d:b3:73:f8:4e:0d:8e:a3:5a:ef:dd:31:b4:1b:
46:e7:e9:f0:df:32:d1:cf:c9:0c:ee:4c:af:13:65:de:77:a9:
46:42:cf:66:c3:d3:b5:87:ba:39:d6:3b:db:5d:b1:af:54:a6:
90:2e:0e:34:0a:90:0f:69:eb:0a:0b:d2:ae:6a:d4:b4:77:d1:
88:87:92:dc:70:ad:d9:02:58:d8:60:31:62:e9:86:63:22:7b:
49:b7:36:e6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUEXUSEhU9TBkxdzSQJoSYQhc5YdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA3MDEwNjU1MTJaFw0yNzA2MzAwNzAwMTJaMDMxMTAvBgNV
BAMTKDRFRDI4OEU4RDREMUQwOUUyODQwQ0QzNDRCMzgzMjRBQTY1Q0E3NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLmI++pDaUs87jeANfMFLicZT
7+737XH9t5hdvyxZhAztErNtxICel17SYxnt6my78p3JwD6Vpp6LjKI6LJG5rHDU
H4U0TJ5k/TO9ngaBAUYEMJTJisx4WiPHuBND8L24uzUwCz75tzQuUrwBP/RxmHWQ
f4StL9gbLVddk3OU8ZRadjutlPRPNGfmTET/IHGe0IRxqUUf+dxTkpIQsNDKZlM8
nshbbn9IDimKmpWa6jkWQ8yWuBvTBd4B8X8VnaymCceA1ntWnAdG6sqcLMTjBTi4
zP/IZpcH9xv5Ow1wX+cM4lzm1l3a4fuAH7UTP1TcmwiXQRe5UC67vpSdONt3AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUTtKI6NTR0J4oQM00SzgySqZcp0QwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA1MzA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
hKABMA0GCSqGSIb3DQEBCwUAA4IBAQCNHZOQ9pHM+NCXkmWxFDbhd8suwSDW82DY
q/vODXBsiWhC9y3S3knUitFXFLq5HNp8GU4o3lCBVZnjRMkqhhfuliFKacbD7yIn
k57Hvi0i6I5jefH+wVlNP/gvuo3lY1bFI6OQr7VICHdsoZa3X5dJvTwlMcLYFkn2
MOZtvSyermofK0E9UkMr3o5mNY6IxtmEdGuS6J3WyXgYMzfw3jDRIeXNLiDunbNz
+E4NjqNa790xtBtG5+nw3zLRz8kM7kyvE2Xed6lGQs9mw9O1h7o51jvbXbGvVKaQ
Lg40CpAPaesKC9KuatS0d9GIh5LccK3ZAljYYDFi6YZjIntJtzbm
-----END CERTIFICATE-----
Generated at Fri Jul 10 17:54:12 2026 by rpki-client