Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205009.roa
File: AS205009.roa (raw, json)
Hash identifier: r0YXQl734ycm/wIwuFTmsSf6/c8IdvBVPVKi0oUwi5c=
Subject key identifier: 22:B7:65:D9:D7:11:38:39:C1:F7:E3:E6:CF:34:EA:5D:7E:48:B7:EA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 01D8B33FB00CDC6E5A90FC08BC03A561D0E0467D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205009.roa
Signing time: Thu 25 Sep 2025 20:03:11 +0000
ROA not before: Thu 25 Sep 2025 19:58:11 +0000
ROA not after: Thu 24 Sep 2026 20:03:11 +0000
asID: 205009
IP address blocks: 178.92.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d8:b3:3f:b0:0c:dc:6e:5a:90:fc:08:bc:03:a5:61:d0:e0:46:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 25 19:58:11 2025 GMT
Not After : Sep 24 20:03:11 2026 GMT
Subject: CN=22B765D9D7113839C1F7E3E6CF34EA5D7E48B7EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:26:43:d2:21:fd:b8:a8:01:51:f2:31:65:
ab:be:4a:87:56:31:c1:41:1a:60:d1:d0:0d:fe:d1:
5e:3c:87:e2:2f:99:90:eb:f0:cc:35:46:3d:65:32:
b5:30:2e:a6:7d:43:27:4d:71:97:01:38:fa:d0:23:
f8:70:b1:fd:df:6a:b0:3f:9e:ce:e8:99:6a:a3:af:
d5:d0:73:30:ae:72:68:5d:a7:ec:79:9e:e1:c6:1f:
15:13:ce:44:d6:94:dd:b2:fa:27:06:75:0c:21:8e:
46:f1:1b:e4:94:86:cd:21:bf:b1:a1:39:db:dd:ec:
1c:58:de:fb:6a:83:24:6e:56:2a:51:fd:dc:c2:97:
cd:9a:8d:63:e1:30:94:c6:d6:7d:3c:14:dc:11:8c:
08:0a:62:4d:fe:67:fb:24:9d:2f:06:13:fd:c8:30:
d7:f4:55:dc:b0:f2:c0:eb:41:5f:bb:34:3b:4c:01:
68:44:c8:fc:49:13:9e:c0:73:e2:31:e0:fe:f8:ac:
32:e1:bb:ac:42:4a:68:8a:47:3c:c3:e7:84:bc:d7:
98:7f:26:56:45:e6:f0:25:9e:6e:f0:18:39:3d:af:
30:6b:6a:1f:db:f5:83:4d:dd:2f:40:9a:b2:14:99:
7d:f3:0a:9a:9d:b1:d1:4c:80:d1:a3:1f:ca:79:37:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B7:65:D9:D7:11:38:39:C1:F7:E3:E6:CF:34:EA:5D:7E:48:B7:EA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.52.0/24
Signature Algorithm: sha256WithRSAEncryption
51:20:34:55:77:b1:0a:e9:02:0b:09:91:ff:aa:8f:24:c6:7a:
e4:ce:5b:a2:da:e2:c9:61:ae:2a:29:ec:a6:28:cf:7d:e9:8e:
3c:8f:aa:3a:73:24:13:42:05:33:a9:98:e3:f0:d6:7e:77:0e:
d3:3a:e4:e7:87:ad:74:3d:c5:3a:c1:eb:f3:87:db:97:d3:23:
dc:ca:f9:8d:53:cc:8d:e9:91:57:2e:06:2b:e4:03:29:62:86:
4b:2f:7e:f9:6a:68:a4:a9:2c:d0:76:e2:1a:2f:77:c3:e0:4f:
31:03:b2:f4:b3:6c:09:96:d5:21:d3:c7:94:49:52:7a:48:53:
e7:bf:6b:4b:b5:ad:02:c1:48:da:ab:ff:98:f0:b0:36:31:8c:
08:c7:76:a6:f1:51:f7:5b:9b:32:15:c7:56:71:82:a4:d7:b1:
a6:ea:18:2c:a8:d7:eb:dd:c2:20:d6:b6:01:09:77:33:08:57:
d1:63:d5:66:6d:85:ad:3d:41:5d:47:80:db:b5:4e:b1:0a:b0:
52:6c:f0:4f:df:92:b0:1d:29:a0:09:a1:e9:78:a5:57:55:c8:
3b:c9:49:f7:fe:58:58:9f:21:85:51:cd:d2:a0:0a:b3:f0:e2:
06:ff:14:07:09:45:0b:d8:26:35:3e:6f:b4:9e:d7:49:18:eb:
da:f9:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 21:36:28 2025 by rpki-client