Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205009.roa
File: AS205009.roa (raw, json)
Hash identifier: jH+Zc/tdspParriXTXJv6yDEr94R1yt5MrmYgiNXpDc=
Subject key identifier: F6:5C:FD:B7:97:F8:22:2C:BB:E2:4C:96:EF:85:D3:61:82:2C:83:C7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3AC5EB0F644727C4C0AFCE7B881FC56C12B04236
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205009.roa
Signing time: Thu 30 Jul 2026 06:36:21 +0000
ROA not before: Thu 30 Jul 2026 06:31:21 +0000
ROA not after: Thu 29 Jul 2027 06:36:21 +0000
asID: 205009
IP address blocks: 178.92.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 07:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c5:eb:0f:64:47:27:c4:c0:af:ce:7b:88:1f:c5:6c:12:b0:42:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 30 06:31:21 2026 GMT
Not After : Jul 29 06:36:21 2027 GMT
Subject: CN=F65CFDB797F8222CBBE24C96EF85D361822C83C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:c6:96:83:d0:c9:ff:f8:24:2c:9a:e9:f4:
fb:0e:b4:95:0c:3d:d2:a1:04:a0:c2:25:39:97:9b:
d4:16:d1:52:b0:18:e3:e3:5e:e5:bd:21:24:ef:70:
92:5b:ab:41:fd:c0:b6:72:12:0e:4f:5f:44:71:42:
a1:94:97:b8:43:a8:09:82:f8:5b:e2:cb:38:34:38:
8c:91:25:35:57:f7:b1:65:e8:39:2d:6d:08:c4:9e:
dc:d5:28:24:66:34:ad:1a:ca:08:2a:34:ab:17:9a:
45:26:61:51:c5:25:7d:12:4f:b5:ff:2e:20:27:9f:
9d:ef:f2:cf:8b:e7:07:70:cd:9e:d4:66:c6:4f:ab:
8f:f8:20:fe:c2:a7:37:14:6b:01:f0:b2:9f:15:26:
3d:57:74:07:93:38:64:c3:0d:d1:2e:4c:94:a8:9f:
72:59:aa:f1:40:2b:02:d8:df:22:af:f7:ad:35:a0:
6e:b0:2f:43:f7:7d:2f:f7:e4:9a:72:93:e0:a4:4a:
b4:0f:b8:35:92:ed:90:ba:e2:ce:f0:e1:8d:23:8f:
22:b0:bb:08:69:96:1b:6c:4d:97:57:04:73:e6:5e:
b0:ab:c4:02:4f:cb:a3:5d:d8:b7:9e:b0:40:99:45:
35:7a:c8:73:e1:53:8a:84:66:c4:e5:dd:c1:07:09:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5C:FD:B7:97:F8:22:2C:BB:E2:4C:96:EF:85:D3:61:82:2C:83:C7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.52.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d9:e2:f7:b0:5d:30:ae:d7:43:9d:6a:8a:0c:53:2a:21:6d:
15:6f:f9:12:f8:62:60:81:29:92:65:64:02:38:b6:4a:64:34:
b0:9a:51:65:5c:b6:c3:42:07:f4:ef:3f:f6:17:12:1e:41:75:
71:5a:36:67:bf:f9:04:05:76:91:88:c3:ad:aa:0e:39:9f:dc:
cb:58:77:c4:d2:59:0d:be:01:98:70:b1:25:42:6b:68:71:a1:
91:ed:8a:a1:34:82:da:9f:4b:b0:7c:1b:0f:25:0f:8b:54:5f:
7f:34:c4:ae:3b:8d:fc:78:07:0b:35:0c:96:5c:1b:8e:71:92:
0c:46:8a:b3:13:bc:dd:fe:dc:98:f9:33:a6:c5:63:84:a2:f2:
b5:59:ac:c3:58:2f:52:f3:fc:8d:cd:a8:03:a5:5b:64:39:cf:
4b:f4:87:7f:35:7e:76:52:bd:b4:89:89:09:3f:9c:01:b0:17:
3f:ec:5b:e2:14:29:14:d8:5b:c3:46:d1:4f:7e:e4:14:99:58:
5a:28:fd:0e:5e:de:a2:33:82:5f:5d:75:81:6a:76:74:81:77:
5e:a7:6e:c4:e9:8b:df:1a:ba:cc:12:e0:49:f2:30:56:4f:d7:
ad:53:42:ca:3a:1b:5f:ae:7e:e3:66:f2:63:8f:f8:1d:f0:f3:
ad:2d:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 11:58:15 2026 by rpki-client