Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205960.roa
File: AS205960.roa (raw, json)
Hash identifier: ybnHAj+OvOPYOU4nV/CMaYP0dPIbb4fHL4L6tpjkBkw=
Subject key identifier: 89:8D:23:5E:FA:17:42:9B:25:D8:D9:0C:50:C5:1F:EA:A0:3F:F9:1F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 202A703D9D7BC4E2BAFDC4FBFB3FE30370380A64
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205960.roa
Signing time: Thu 03 Sep 2026 04:44:32 +0000
ROA not before: Thu 03 Sep 2026 04:39:32 +0000
ROA not after: Thu 02 Sep 2027 04:44:32 +0000
asID: 205960
IP address blocks: 141.11.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2a:70:3d:9d:7b:c4:e2:ba:fd:c4:fb:fb:3f:e3:03:70:38:0a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 3 04:39:32 2026 GMT
Not After : Sep 2 04:44:32 2027 GMT
Subject: CN=898D235EFA17429B25D8D90C50C51FEAA03FF91F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:f7:69:b4:28:6e:ac:0b:01:c4:64:98:86:
a7:08:da:52:ee:39:68:35:1e:bd:95:d6:c2:7c:16:
ee:a8:0a:d8:b6:66:23:10:fb:f4:e2:0f:ab:99:42:
78:8f:01:3d:30:68:9d:36:6f:b3:4b:ef:3e:bc:71:
09:66:24:c6:aa:7e:7e:73:58:16:75:36:09:34:45:
63:49:ba:20:eb:34:ca:72:37:f9:c9:bc:38:0e:9a:
57:74:04:2e:9f:1f:b2:08:79:b6:e9:87:57:2d:c6:
77:94:33:c6:17:0e:a2:aa:1f:98:87:28:9c:0b:07:
24:9d:d9:4c:2b:28:f5:e9:cb:89:dc:a3:b1:96:b0:
5f:0a:54:57:80:36:1d:e7:6b:82:94:86:a0:d7:2a:
78:75:bc:90:52:2f:10:d2:c1:fe:6e:12:55:1a:dd:
0c:f4:a5:74:d5:07:86:bb:43:b4:93:32:81:bb:ef:
f8:d7:9e:86:d4:ac:75:ff:b7:11:58:de:66:13:48:
c9:3d:b7:40:79:6f:67:87:c5:21:12:52:7d:53:b7:
77:fa:e3:c9:70:15:f6:0a:be:90:07:32:be:7f:7b:
40:46:db:19:71:91:78:33:27:23:ec:59:c7:16:46:
63:02:d1:fb:0b:4d:d3:be:ee:04:46:13:17:1d:31:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8D:23:5E:FA:17:42:9B:25:D8:D9:0C:50:C5:1F:EA:A0:3F:F9:1F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.60.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:1e:5c:8b:e6:33:24:f2:dc:ad:11:df:d9:ca:b2:ba:f6:73:
d0:31:01:7f:8b:35:e1:b9:89:e4:da:04:a7:49:bf:55:8d:55:
4d:87:a2:ae:d3:3a:3f:69:36:d9:aa:9a:dd:df:d6:d8:34:2c:
0e:44:ec:46:6c:f7:8f:78:6f:fe:78:b4:dd:08:f5:e0:67:f1:
4b:70:89:9d:a3:89:a9:ec:2f:1f:fe:32:5e:01:32:1d:a1:78:
65:dd:79:51:c9:b0:64:1f:04:f8:2d:6c:20:ba:dc:6c:0a:df:
d1:3a:66:bf:69:f0:31:5a:3f:66:5e:6c:10:95:e2:b7:58:d5:
08:b4:46:0d:eb:e8:00:1e:bf:aa:fe:48:ee:45:23:60:17:ad:
c7:a2:d1:c5:ec:ca:e9:12:56:d2:ef:fa:f7:16:fe:73:2f:2b:
4b:d7:0b:75:82:5d:f6:61:05:a1:88:35:5f:7f:5a:65:e8:11:
f7:d4:b8:a3:3f:57:0e:56:05:56:2c:06:f7:31:1e:dc:77:7b:
92:dc:58:ab:75:bd:d2:55:d8:da:06:e9:6b:d4:59:87:51:5f:
20:fd:56:67:61:d2:46:d0:52:fe:86:46:d2:77:a6:13:aa:37:
4a:1f:57:74:5b:25:f6:64:ae:a8:dc:9d:07:c4:f1:fb:64:11:
3a:88:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:10 2026 by rpki-client