Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205502.roa
File: AS205502.roa (raw, json)
Hash identifier: BlsvDMZl75XPhJy3jxjqLDp6+SbH9f3J1KyLV6jeg1k=
Subject key identifier: A3:9A:24:21:2B:CF:0F:2F:75:06:F2:E0:CB:AC:76:C8:2A:AD:CC:D9
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2242F41691AAFF451C3565FB494F8CC754FCBC7B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205502.roa
Signing time: Sun 27 Sep 2026 12:59:33 +0000
ROA not before: Sun 27 Sep 2026 12:54:33 +0000
ROA not after: Sun 26 Sep 2027 12:59:33 +0000
asID: 205502
IP address blocks: 92.112.106.0/24 maxlen: 24
92.112.107.0/24 maxlen: 24
92.113.173.0/24 maxlen: 24
92.113.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 22:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:42:f4:16:91:aa:ff:45:1c:35:65:fb:49:4f:8c:c7:54:fc:bc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 27 12:54:33 2026 GMT
Not After : Sep 26 12:59:33 2027 GMT
Subject: CN=A39A24212BCF0F2F7506F2E0CBAC76C82AADCCD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3c:42:ea:4b:b9:41:81:f7:19:a4:6a:7a:44:
b2:49:2f:00:3c:62:28:38:c4:9b:46:95:cc:f7:3e:
42:21:f8:65:06:b9:73:b6:87:19:24:2a:a8:c3:5d:
6f:c2:ba:f1:57:8a:12:15:f1:a5:c5:19:d1:d7:91:
27:14:5e:97:4c:1c:ae:03:10:20:db:18:88:fa:ce:
ba:c1:70:de:cb:e7:7b:11:74:77:1e:ca:24:22:6f:
86:93:b8:47:9b:67:0e:50:19:d7:b0:6e:df:e3:94:
0f:79:41:08:9d:25:a6:d8:f6:bc:82:c1:a9:2e:77:
53:3a:a6:7f:36:b0:2f:6b:29:a4:d7:79:da:32:1e:
f4:39:f5:0e:14:1c:eb:89:d0:c8:bd:c6:b4:fa:1c:
3c:ec:d5:ba:89:53:8f:5b:ef:cb:58:c6:34:b6:a5:
d8:82:35:cd:8b:07:4a:eb:3a:ce:fa:22:6f:77:47:
26:a8:8a:4b:dd:30:cf:4e:fd:f1:8e:af:11:95:aa:
7d:15:48:f8:84:d9:bf:a3:04:38:49:ba:6c:4c:94:
08:7e:fe:d5:71:92:d9:2b:c0:2d:ea:d5:8b:51:b2:
af:31:fc:d5:01:3a:fc:11:74:7f:d5:6c:16:61:12:
12:ad:be:e6:2f:c9:fa:7f:86:de:d2:ba:53:cb:d2:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9A:24:21:2B:CF:0F:2F:75:06:F2:E0:CB:AC:76:C8:2A:AD:CC:D9
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205502.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.106.0/23
92.113.173.0/24
92.113.250.0/24
Signature Algorithm: sha256WithRSAEncryption
75:42:23:21:12:20:6a:a1:5f:28:77:25:96:e5:06:c7:f3:82:
71:52:3a:0e:8b:85:36:46:42:4c:08:32:7c:b1:e6:d7:55:f5:
0c:30:8c:d2:0b:52:55:32:f2:57:aa:21:94:10:e3:a3:a4:30:
61:d3:1a:62:89:d2:f6:4b:65:d5:f5:93:77:ba:5a:7c:f5:9d:
58:37:72:db:52:e4:38:2a:33:fb:29:34:16:f5:98:1d:0f:70:
d1:30:48:b2:79:bf:6f:b4:0f:8d:1a:6b:b3:5f:6e:bd:74:91:
ce:32:a0:1f:bd:4c:66:38:b2:37:34:a4:40:46:45:a4:88:ba:
01:06:1a:26:1a:8a:08:b9:39:f7:b3:b0:11:c7:80:c1:09:b7:
3d:87:d9:40:88:92:ff:eb:e0:aa:06:ce:25:f0:af:f0:1b:84:
2f:2b:1b:c3:c4:1f:7d:91:92:cf:23:34:41:03:68:2a:f0:7b:
26:cf:71:02:6f:69:17:f4:66:2a:e7:8c:51:92:37:c1:d9:a7:
2f:4f:f7:93:53:cd:c1:fe:cf:80:f5:30:d4:93:28:ee:a3:73:
57:38:45:8b:e4:7d:30:86:c6:03:58:4c:46:06:e2:b7:53:64:
9c:06:e5:a9:44:8b:cb:c1:ec:35:82:a9:0a:a6:cd:06:bc:66:
3e:5f:df:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:23:34 2026 by rpki-client