Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS205896.roa
File: AS205896.roa (raw, json)
Hash identifier: G8fB04xkK/3XvL7C8pu+GZP1q7xrbqJ5J+qwaKVyGQE=
Subject key identifier: BF:61:F5:5C:7E:7C:27:8E:5A:05:F6:0B:A4:6C:D6:64:ED:E8:B0:25
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 5E93BF6369A04D87A49B58CCBFA437064E032F44
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS205896.roa
Signing time: Fri 05 Sep 2025 12:41:49 +0000
ROA not before: Fri 05 Sep 2025 12:36:49 +0000
ROA not after: Fri 04 Sep 2026 12:41:49 +0000
asID: 205896
IP address blocks: 139.28.50.0/24 maxlen: 24
212.115.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:93:bf:63:69:a0:4d:87:a4:9b:58:cc:bf:a4:37:06:4e:03:2f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Sep 5 12:36:49 2025 GMT
Not After : Sep 4 12:41:49 2026 GMT
Subject: CN=BF61F55C7E7C278E5A05F60BA46CD664EDE8B025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:c6:d4:7e:91:4e:8a:d3:b4:99:76:09:b5:
88:3d:03:41:9f:81:65:f9:35:71:4b:ab:b1:a5:a4:
e5:aa:3d:e6:fb:2d:59:40:26:0b:cf:81:d8:32:62:
04:e1:30:07:c6:30:af:af:f3:5b:b2:22:13:3f:f3:
67:d4:26:6f:37:45:bd:ab:91:e4:bf:ec:81:d1:d6:
7b:88:f8:cf:bd:49:e3:bf:1a:d5:63:3b:0a:ae:f1:
9b:a4:33:2f:c9:00:4b:cc:93:d6:20:84:f1:1c:89:
71:bd:d6:9e:c1:05:37:00:e7:dc:7c:94:60:7c:16:
92:17:5d:81:51:a0:93:f0:94:c9:54:78:31:e6:24:
8e:17:0b:b1:67:8b:ab:8f:d0:4a:20:37:01:95:f6:
b5:9a:da:0b:1d:12:1c:57:6a:44:14:28:94:07:2a:
88:7c:fc:47:13:06:51:f1:06:c0:2e:af:49:40:25:
c3:d4:5f:a3:ae:0e:2b:68:29:61:c9:8d:39:87:53:
05:6d:3e:2f:e7:72:85:e7:70:8d:75:eb:9c:7f:f1:
bb:db:dc:fa:d2:c6:49:b9:1c:6f:9f:b2:3e:e3:b3:
21:8a:9b:92:10:ac:80:ee:9e:88:53:67:c1:6b:d1:
bb:b7:6f:4b:9f:f3:77:0c:c6:84:f9:40:ec:f7:9d:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:61:F5:5C:7E:7C:27:8E:5A:05:F6:0B:A4:6C:D6:64:ED:E8:B0:25
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS205896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.50.0/24
212.115.102.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9a:1a:9b:ed:28:93:9e:06:44:41:a3:06:b8:4c:61:16:19:
e5:c8:12:11:ee:be:75:5f:6a:9a:92:fa:a3:4b:e2:b8:87:e5:
54:b7:04:af:b4:35:a2:83:c4:33:7d:81:6b:58:f4:a2:c7:5b:
11:f8:ac:2a:9f:70:84:12:fd:13:5a:89:71:9b:92:ff:b3:f6:
d7:cc:72:da:0e:fb:e0:cf:46:31:ed:c0:f4:ba:b7:3c:77:01:
76:e7:9c:56:a1:77:e4:55:80:12:6b:7f:9f:a6:a8:ee:06:26:
82:ae:04:ed:91:32:81:00:06:1a:56:5d:9f:27:65:02:cc:07:
60:e7:71:2b:47:f0:c4:2a:68:21:0d:fa:d7:76:e4:42:ff:1f:
54:6e:6f:1e:d2:0e:d0:5d:54:63:d5:0f:64:69:a4:a5:56:f6:
95:17:bf:c5:7b:22:49:40:50:38:0c:e8:da:5a:81:aa:62:9f:
e9:0d:43:56:78:fd:10:b0:a4:06:4e:30:c4:20:a8:98:9a:60:
a6:31:5f:8a:65:ce:cd:47:e1:8b:12:d4:68:6b:84:f7:26:15:
8a:7d:bb:12:a8:c5:2d:63:24:a2:8d:0f:9f:b0:ee:3f:63:8c:
71:05:23:88:82:1c:bc:dd:29:13:fe:08:e9:54:e9:95:6d:5c:
6f:a3:b6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:59:14 2025 by rpki-client