Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: 3Q2eQEMoM8ROFf+lgpbyq1YN+n+08vxQGcADwVQrij0=
Subject key identifier: 7F:17:A1:11:A3:3D:CA:55:20:39:D7:06:23:6D:14:97:DB:43:9B:9E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 70CC2E2C7C779AB220F6EDD0F6946A7D341299A6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS205489.roa
Signing time: Sat 06 Jun 2026 18:16:34 +0000
ROA not before: Sat 06 Jun 2026 18:11:34 +0000
ROA not after: Sat 05 Jun 2027 18:16:34 +0000
asID: 205489
IP address blocks: 51.146.67.0/24 maxlen: 24
51.194.128.0/24 maxlen: 24
51.194.156.0/24 maxlen: 24
188.220.20.0/24 maxlen: 24
188.221.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:cc:2e:2c:7c:77:9a:b2:20:f6:ed:d0:f6:94:6a:7d:34:12:99:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 6 18:11:34 2026 GMT
Not After : Jun 5 18:16:34 2027 GMT
Subject: CN=7F17A111A33DCA552039D706236D1497DB439B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:4c:93:a8:f3:03:b5:d0:d9:e6:11:87:33:
42:8b:28:f3:b5:61:df:62:b4:1d:a6:f8:55:89:b3:
fa:12:3a:15:0b:46:aa:a4:e0:1b:fe:41:27:f9:a6:
29:69:a2:3f:49:fb:b7:ca:e1:1b:2e:06:92:a9:64:
2e:6c:7f:5c:88:3e:3d:34:7f:f3:d3:5f:3e:77:3c:
f0:72:fa:1a:7b:d6:6a:6c:1b:1b:a4:38:56:30:9f:
98:3e:4c:f9:1a:13:01:84:02:af:9a:1e:6b:d8:c7:
bd:39:ad:ef:b7:37:7d:d4:d9:22:c0:22:b7:86:41:
64:0e:cf:0c:cc:84:be:df:c4:fc:e9:fc:38:d6:e2:
38:ac:c1:04:f0:cb:85:2f:92:8a:08:5a:d3:13:c1:
61:27:64:48:c1:47:1d:d1:1a:8b:f7:cb:e4:3a:cc:
ca:7e:18:41:e5:2a:ed:22:31:23:8a:c4:84:45:fc:
59:a9:e6:6e:7a:a7:7c:81:a7:33:04:4e:61:27:5d:
23:cd:29:1b:c6:cb:00:71:1c:6a:03:dd:b4:53:8c:
79:77:4d:5b:96:32:1a:fe:75:31:37:11:a6:7a:1d:
88:55:60:5c:d2:73:7f:09:4d:9e:06:c9:16:22:00:
8d:93:65:a9:ce:c7:97:57:62:31:6f:76:48:8b:12:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:A1:11:A3:3D:CA:55:20:39:D7:06:23:6D:14:97:DB:43:9B:9E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.67.0/24
51.194.128.0/24
51.194.156.0/24
188.220.20.0/24
188.221.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:bb:6d:cf:00:f5:30:78:c4:f8:ce:cb:1b:56:0f:ed:76:23:
c4:26:79:23:1c:da:79:a0:4c:63:df:f3:d6:97:fc:7e:a6:b0:
0e:cd:cf:3c:ca:6e:dc:f4:7d:3f:cb:43:9a:40:98:1d:be:af:
47:4f:e1:a0:21:65:66:d6:1b:67:9c:bb:71:59:01:f2:7b:b1:
e3:cd:39:d3:61:81:0f:ab:8e:39:7e:87:b7:45:fb:7d:c5:4f:
97:72:78:75:8c:8e:6f:f5:d3:6c:00:ed:a9:d8:9b:45:54:77:
94:12:98:2c:a1:ae:7e:b1:66:7b:d2:ee:8b:50:82:8d:2a:d3:
c5:bb:43:80:ff:1e:27:0f:c3:a0:af:80:b8:e0:72:83:ac:15:
12:cf:0f:b6:20:45:fc:02:89:86:77:58:9d:4e:03:ea:7c:08:
26:70:28:b5:4c:46:5c:c1:6b:0a:13:1d:e7:15:90:b8:70:de:
94:7a:1d:fc:38:f7:43:6c:f6:3c:5e:14:81:6b:0c:a2:cf:05:
3d:c2:a8:a0:27:46:c4:c1:be:81:6c:4d:45:7b:c3:c4:6c:17:
19:b3:67:ea:d2:66:1f:8d:06:fb:00:cf:ce:36:2f:40:4a:cd:
43:3e:4e:8c:f6:2c:f8:d1:cd:a6:53:02:3f:2b:db:2c:c0:67:
24:56:70:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:08 2026 by rpki-client