Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205544.roa
File: AS205544.roa (raw, json)
Hash identifier: l2efCXAAnakfBUcE32Q+n5ojUI6mNispa/GjkJ2nAO4=
Subject key identifier: 12:A0:CA:F0:51:6A:7F:65:F0:D4:23:DE:77:00:67:53:63:04:8E:2C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0E4247E2FE0CDACC9ADD8F0F06E842DEA7C37550
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205544.roa
Signing time: Wed 21 Oct 2026 11:40:01 +0000
ROA not before: Wed 21 Oct 2026 11:35:01 +0000
ROA not after: Wed 20 Oct 2027 11:40:01 +0000
asID: 205544
IP address blocks: 141.11.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 09:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:42:47:e2:fe:0c:da:cc:9a:dd:8f:0f:06:e8:42:de:a7:c3:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 21 11:35:01 2026 GMT
Not After : Oct 20 11:40:01 2027 GMT
Subject: CN=12A0CAF0516A7F65F0D423DE7700675363048E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:09:6e:bb:f4:b5:7f:57:b5:04:5e:4c:ce:
1b:ba:d6:9c:e1:e3:8b:29:dd:81:a5:5c:ed:3e:32:
77:f9:1a:fe:27:24:5c:5b:d2:8d:08:76:cd:0e:9d:
22:65:9a:9a:56:e4:02:cc:65:cb:4f:6a:47:b7:65:
20:b6:fb:4b:e8:9d:ea:bf:93:f6:e5:cd:8b:33:ae:
c2:3b:f2:0f:5b:da:a3:03:b4:9a:c7:d9:8e:35:af:
b5:7e:5c:be:10:22:11:11:58:9a:f8:2b:95:80:dc:
e1:8f:4f:dc:5e:74:34:e5:a8:a5:dd:b2:ab:be:a4:
70:dc:62:b9:91:34:48:16:65:37:d2:e6:22:c5:13:
66:10:86:17:65:f3:d0:0c:44:c1:36:4a:47:c3:d3:
b7:90:37:61:d3:52:cb:8e:f7:af:56:f3:e6:dc:81:
62:a1:c3:b1:f7:6b:35:3a:bc:79:31:b0:fc:85:38:
ce:e2:ed:bd:f7:e4:12:5c:d3:8c:79:55:9c:6b:21:
76:28:df:4e:f3:b3:a7:24:73:ab:13:27:c0:b2:f3:
87:ba:c2:4d:ec:92:da:9c:b4:d5:4b:30:ed:e5:0f:
5d:6a:8a:3e:11:a0:f9:4f:28:7c:53:04:2a:79:d1:
63:53:fb:7b:1a:2f:68:49:51:cf:3c:11:f4:3f:de:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:CA:F0:51:6A:7F:65:F0:D4:23:DE:77:00:67:53:63:04:8E:2C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205544.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.92.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bf:25:8d:fb:c4:06:6d:77:fa:a0:94:b7:06:bd:1e:1f:bc:
eb:c6:e6:88:dc:22:d5:91:06:05:3d:f1:dc:95:c2:3f:23:48:
84:a4:40:af:72:81:e8:45:1b:75:3c:dc:0d:71:33:70:88:9f:
39:21:be:c5:90:44:67:15:ed:a3:af:8b:b9:d9:45:44:e1:e6:
64:28:91:bb:bc:d8:b8:d9:ae:20:0d:6d:67:0b:95:9a:62:0a:
63:9a:f6:ad:df:1f:1e:6f:c4:03:6f:d6:e0:8e:ea:20:ba:7a:
23:ad:15:48:5a:3f:d6:84:68:29:ec:69:39:9b:0a:8e:d0:00:
56:2e:43:07:0c:3b:ee:13:72:40:20:b9:b0:42:e7:03:81:c2:
1e:04:f0:aa:3a:37:77:b3:c8:a2:d4:2b:cf:f3:6e:29:30:b3:
a1:21:29:78:30:72:1e:64:3b:a7:93:7a:32:cf:9d:13:87:fb:
83:d8:9a:b0:ab:3f:03:82:ce:bc:1d:b5:94:79:08:1d:04:d4:
59:f8:8a:67:8e:2b:95:b9:42:5f:bb:95:bc:7d:66:0e:44:23:
45:4a:43:d1:3f:fd:a2:4e:7d:c4:df:ba:22:01:f3:cb:e3:5a:
19:85:9a:6f:82:d2:44:cf:24:bb:c6:ec:f1:65:2a:ba:fa:b8:
7a:c2:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:48:25 2026 by rpki-client