Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: 5X4+4FzSdwACcWY1ioJHUrWIgy5asgIJug5eeWs6120=
Subject key identifier: C9:72:64:38:13:99:A1:8C:5C:51:AC:6B:65:D2:7E:62:71:09:DB:BA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 354C71B5525C59CB93F7FB83389FD64344CDD82D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS205489.roa
Signing time: Thu 03 Sep 2026 19:16:21 +0000
ROA not before: Thu 03 Sep 2026 19:11:21 +0000
ROA not after: Thu 02 Sep 2027 19:16:21 +0000
asID: 205489
IP address blocks: 51.194.156.0/24 maxlen: 24
94.194.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4c:71:b5:52:5c:59:cb:93:f7:fb:83:38:9f:d6:43:44:cd:d8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 3 19:11:21 2026 GMT
Not After : Sep 2 19:16:21 2027 GMT
Subject: CN=C97264381399A18C5C51AC6B65D27E627109DBBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:6a:cb:28:35:b1:b4:f9:bd:58:07:0f:30:
6a:0c:c9:36:9f:b8:06:5a:0d:dd:01:7f:c7:06:3c:
af:cd:e8:30:64:ea:82:cc:dc:8e:21:53:9e:ba:91:
34:8d:d4:9f:5f:4c:1b:fd:7b:10:7f:63:6e:f5:b0:
bf:43:0e:47:86:ee:4a:3f:1f:73:ea:f4:f4:ca:e5:
2a:ad:29:fa:6e:5b:8b:16:a8:aa:9b:17:c3:7b:dc:
8a:7d:dc:7c:45:75:b1:ff:d0:95:f1:bb:bf:ae:9c:
c9:a3:c1:81:c6:7f:8a:ee:b4:ec:31:0c:20:b2:9f:
cc:ca:ac:04:ae:8c:30:fd:be:d4:d7:93:c6:3f:d3:
4c:e0:d1:08:e1:24:76:d8:d0:af:a2:77:93:a3:65:
95:20:a9:24:ee:6b:e3:c6:75:f6:4b:1b:28:bc:aa:
0e:bc:5f:fe:6c:cf:9a:03:d5:f9:65:e1:8f:d3:c2:
21:ae:10:40:48:db:4a:4b:fd:5f:c9:ad:aa:df:31:
f4:ca:f5:8a:57:09:67:19:c8:5c:ba:01:2a:3d:f5:
af:f2:a9:8a:69:fd:26:de:96:a1:61:70:0d:7b:a4:
a7:e7:a1:3e:cb:19:c7:94:7d:2b:d9:9d:21:c9:b8:
08:b5:64:52:67:70:e4:15:c7:f4:39:ad:22:cd:6a:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:72:64:38:13:99:A1:8C:5C:51:AC:6B:65:D2:7E:62:71:09:DB:BA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.156.0/24
94.194.120.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:3a:32:56:29:78:29:be:8d:ab:63:f8:dd:28:9d:55:7a:83:
6b:41:99:50:14:d5:4c:e9:fd:16:e3:c9:db:89:15:08:4c:b5:
3a:ea:86:be:c3:ca:ef:4f:cb:c1:e4:8b:bb:65:79:5e:38:8b:
3a:aa:dc:16:63:7b:7f:be:6b:64:d2:57:78:d9:bb:b4:47:75:
24:68:40:43:ce:56:9d:da:0d:62:67:bf:02:50:44:ac:d8:7f:
7a:f7:df:7e:dc:ff:c8:72:c4:ed:93:40:90:03:ab:a2:43:5b:
ec:7d:55:dc:eb:9d:b2:5b:e2:8d:cd:5e:f4:39:3c:66:bb:43:
da:4d:60:cb:83:4a:5e:7f:1e:7c:51:8b:1a:37:25:d0:a5:41:
c5:ae:91:bc:4d:de:fd:32:e6:4e:3a:a8:c9:95:59:43:50:3c:
f8:59:86:50:c8:65:bc:04:53:1d:31:d2:b8:82:e0:ea:7d:e0:
f5:aa:48:d5:f5:3d:ca:c8:74:7f:9c:1f:85:ab:7a:de:c3:ad:
60:64:54:cc:41:92:e4:03:60:e9:5a:7a:bd:4e:dd:a8:2c:55:
21:7c:d6:c7:d7:9c:7e:db:a5:b5:88:e1:8f:6d:6f:a4:50:5c:
06:c9:b5:d8:c5:e3:16:93:df:39:fc:ac:37:23:a8:00:16:9e:
c1:8b:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:10:20 2026 by rpki-client