Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: Lgb76h+ADYuglZlNeci+GASyZ8KogCh2MxEmH8s4Wag=
Subject key identifier: 49:68:33:16:CF:FB:41:3A:38:10:FE:A5:B5:7F:DA:22:36:89:AE:9F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7C4D756A714E760ABE39FCF3B8ED83DA2F414633
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205489.roa
Signing time: Thu 12 Nov 2026 18:49:22 +0000
ROA not before: Thu 12 Nov 2026 18:44:22 +0000
ROA not after: Thu 11 Nov 2027 18:49:22 +0000
asID: 205489
IP address blocks: 46.202.100.0/24 maxlen: 24
178.93.11.0/24 maxlen: 24
178.94.180.0/24 maxlen: 24
178.95.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4d:75:6a:71:4e:76:0a:be:39:fc:f3:b8:ed:83:da:2f:41:46:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 12 18:44:22 2026 GMT
Not After : Nov 11 18:49:22 2027 GMT
Subject: CN=49683316CFFB413A3810FEA5B57FDA223689AE9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:1d:c5:62:86:1f:86:b7:7d:35:fc:7b:6e:
61:31:95:94:12:c4:9f:bf:67:1c:17:1f:03:e9:60:
99:3e:48:3b:1b:72:7d:4b:fb:89:e1:db:dd:05:ad:
30:1c:80:ce:1a:e7:c8:41:91:d3:c0:2c:75:34:33:
88:b0:df:ab:eb:c1:52:73:da:03:93:6f:c9:78:26:
31:5f:8a:f2:29:07:f3:0a:f0:74:6b:58:ae:1d:ee:
68:ba:18:23:35:f7:45:cb:83:4f:98:f6:d4:76:b4:
6e:21:7b:99:dd:9d:f6:4c:37:50:7d:21:a0:c0:64:
3a:62:91:b2:0e:b9:4a:59:a0:b3:fa:1b:b6:7a:72:
c4:a0:fc:fd:b2:d2:84:fb:03:2c:ba:90:b4:64:c0:
80:35:78:f2:ba:ca:ec:64:41:ff:9d:2d:bf:6e:a1:
de:ef:13:8a:e8:85:a4:f3:b1:ec:76:5a:29:ee:42:
cf:6c:99:3c:7a:6b:61:be:92:13:44:22:8f:ad:e2:
b2:f7:34:fa:7f:53:65:f7:00:c2:37:f3:1a:1d:c2:
69:72:a9:31:b9:50:df:85:2d:6e:80:d1:d1:34:15:
75:cb:9f:ec:68:f8:dc:df:0a:9b:c9:68:97:a9:df:
7d:34:d8:b4:90:e7:e0:5f:5e:ad:7e:8b:af:63:86:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:68:33:16:CF:FB:41:3A:38:10:FE:A5:B5:7F:DA:22:36:89:AE:9F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.100.0/24
178.93.11.0/24
178.94.180.0/24
178.95.10.0/24
Signature Algorithm: sha256WithRSAEncryption
50:83:0a:e9:2e:67:ea:81:0f:91:bb:de:8c:e8:cc:7c:f0:09:
fb:a3:a9:fa:c6:2e:54:b1:2e:e3:25:94:4b:46:49:c6:71:bc:
d4:0e:9f:ed:57:95:f9:f6:29:a1:c1:c7:a0:92:04:d2:8c:02:
f7:b2:36:28:72:0d:1a:f7:4c:b6:29:b3:8a:5a:80:8e:35:c1:
1e:15:1b:84:c4:77:a2:af:a1:8a:17:ac:0f:0b:0e:f0:b1:3d:
36:64:66:08:8a:9b:cb:95:fe:05:d9:55:ca:43:9c:b8:d3:8a:
40:5f:c8:76:00:bd:14:dc:14:03:2c:0d:10:90:44:7b:d4:59:
dc:39:5d:38:24:cd:31:25:55:16:17:b8:ae:69:2f:0e:4f:73:
4c:cf:76:b0:02:ce:e6:bc:11:c1:2d:e0:d4:79:c7:71:6d:dd:
db:f1:e9:cf:ab:99:85:83:3c:b5:15:d0:5a:43:13:69:76:ca:
fc:b7:ba:e8:8c:03:5b:95:07:11:fb:5d:f3:d2:f9:04:f0:86:
38:3b:0e:6a:e7:40:d7:7d:27:82:e7:09:b1:eb:02:68:75:94:
8c:21:fa:32:ab:d7:ee:98:2c:1b:7f:b1:ca:f4:57:ff:b1:1c:
67:af:75:68:2f:14:c9:eb:ee:7d:23:8e:64:9f:fe:d3:17:22:
ac:0f:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:54:24 2026 by rpki-client