Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa
File: AS205886.roa (raw, json)
Hash identifier: 24+mXHbV+cIOrOEjPCn2Nf88Cmvi3y3og+yHeKRsHkE=
Subject key identifier: A3:17:92:5D:58:F2:07:5F:64:66:5B:15:71:B9:E8:3B:FB:A8:28:8E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2A691710A6D72CF9E22CE1FF05A1F97A0BC37BD5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa
Signing time: Sat 11 Oct 2025 10:16:30 +0000
ROA not before: Sat 11 Oct 2025 10:11:30 +0000
ROA not after: Sat 10 Oct 2026 10:16:30 +0000
asID: 205886
IP address blocks: 95.134.43.0/24 maxlen: 24
95.134.51.0/24 maxlen: 24
95.134.96.0/24 maxlen: 24
178.92.130.0/24 maxlen: 24
178.92.165.0/24 maxlen: 24
178.92.178.0/24 maxlen: 24
178.92.192.0/24 maxlen: 24
178.92.194.0/24 maxlen: 24
178.92.221.0/24 maxlen: 24
178.92.240.0/24 maxlen: 24
178.93.150.0/24 maxlen: 24
178.93.182.0/24 maxlen: 24
178.93.200.0/24 maxlen: 24
178.93.231.0/24 maxlen: 24
178.93.250.0/24 maxlen: 24
178.94.204.0/24 maxlen: 24
178.94.236.0/24 maxlen: 24
178.94.248.0/24 maxlen: 24
178.95.25.0/24 maxlen: 24
178.95.85.0/24 maxlen: 24
178.95.156.0/24 maxlen: 24
178.95.160.0/24 maxlen: 24
178.95.184.0/24 maxlen: 24
178.95.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:69:17:10:a6:d7:2c:f9:e2:2c:e1:ff:05:a1:f9:7a:0b:c3:7b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 11 10:11:30 2025 GMT
Not After : Oct 10 10:16:30 2026 GMT
Subject: CN=A317925D58F2075F64665B1571B9E83BFBA8288E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:79:60:b1:c5:5f:29:82:1d:66:0d:98:fa:
9d:ac:77:90:36:67:86:e7:3d:aa:b3:f5:1d:0e:b4:
b5:d9:1c:a7:c0:dd:6e:ca:71:ac:83:a4:ba:c8:49:
96:c9:32:bc:42:01:09:db:08:7c:b1:0e:71:42:6f:
dc:e2:1f:be:50:5d:46:93:69:52:6e:81:97:00:1f:
e5:a1:65:b5:9e:58:80:7c:5a:d3:53:61:3f:ca:95:
e3:0d:97:06:18:7d:ee:0e:ac:5d:e8:b5:0d:40:52:
d9:3b:23:a0:08:36:4f:62:4b:15:d1:3d:ed:66:00:
6a:6a:c3:6a:b4:2b:b0:71:86:44:2c:3c:f1:5b:a8:
d3:74:fd:16:06:f5:7d:30:ba:71:fe:27:7b:ac:f3:
0b:b1:30:eb:32:28:b9:b1:f7:76:37:91:8e:07:84:
cf:ce:49:12:4e:ee:3b:d8:4d:2c:b0:d1:0f:a9:74:
e0:64:89:a9:31:14:9e:23:1f:9b:d5:2c:ab:30:49:
10:f3:04:12:da:7d:f2:2f:1e:00:fe:f2:b3:64:13:
bf:20:49:49:9c:81:2a:1b:71:bb:96:79:d0:ce:b1:
e1:d5:78:82:96:b9:61:d3:52:21:40:62:6c:48:aa:
ba:5b:d6:10:c3:19:cb:95:03:b4:59:59:a6:43:27:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:17:92:5D:58:F2:07:5F:64:66:5B:15:71:B9:E8:3B:FB:A8:28:8E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.43.0/24
95.134.51.0/24
95.134.96.0/24
178.92.130.0/24
178.92.165.0/24
178.92.178.0/24
178.92.192.0/24
178.92.194.0/24
178.92.221.0/24
178.92.240.0/24
178.93.150.0/24
178.93.182.0/24
178.93.200.0/24
178.93.231.0/24
178.93.250.0/24
178.94.204.0/24
178.94.236.0/24
178.94.248.0/24
178.95.25.0/24
178.95.85.0/24
178.95.156.0/24
178.95.160.0/24
178.95.184.0/24
178.95.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:88:f6:3a:d3:d8:91:24:88:77:ec:bd:15:11:29:af:02:7a:
b6:62:41:53:44:40:f4:c1:0c:56:5c:75:e8:76:66:d3:43:c9:
39:d4:f5:d4:2f:3c:c8:97:e7:25:fc:07:af:b7:ab:16:4b:a0:
65:de:a4:94:8f:b5:3d:de:a3:82:2f:f6:d2:0e:7f:3d:bb:ed:
3a:71:c5:6c:18:7f:74:08:75:d7:1b:c9:50:fe:8a:04:5f:df:
d7:16:b6:6a:e0:5d:ca:e8:c9:2e:5c:99:cb:65:1e:5e:59:ef:
3c:ef:bc:b7:e0:c4:f8:a6:8d:73:62:bf:4d:d5:0d:93:95:2d:
54:a1:fe:e9:22:87:ac:9d:06:65:e5:0f:93:e7:c5:b6:b7:b1:
1b:97:39:bf:36:1f:ea:01:70:f4:a7:41:59:45:8f:a8:18:c9:
eb:00:cd:bf:83:bc:d8:72:5d:2c:fe:cd:94:6f:02:ac:72:db:
43:07:55:31:5e:d9:56:ce:62:85:40:9b:cc:49:9a:f8:20:84:
c5:58:26:69:3f:50:5f:ec:64:25:72:a0:cf:fd:d4:6f:58:da:
36:f2:50:99:00:97:47:d0:de:91:15:41:c4:e9:0d:39:43:ad:
70:ac:70:88:40:96:84:58:66:0c:58:82:c3:03:99:89:d7:15:
69:1e:4a:57
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUKmkXEKbXLPniLOH/BaH5egvDe9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTEwMTExMDExMzBaFw0yNjEwMTAxMDE2MzBaMDMxMTAvBgNV
BAMTKEEzMTc5MjVENThGMjA3NUY2NDY2NUIxNTcxQjlFODNCRkJBODI4OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRF3lgscVfKYIdZg2Y+p2sd5A2
Z4bnPaqz9R0OtLXZHKfA3W7KcayDpLrISZbJMrxCAQnbCHyxDnFCb9ziH75QXUaT
aVJugZcAH+WhZbWeWIB8WtNTYT/KleMNlwYYfe4OrF3otQ1AUtk7I6AINk9iSxXR
Pe1mAGpqw2q0K7BxhkQsPPFbqNN0/RYG9X0wunH+J3us8wuxMOsyKLmx93Y3kY4H
hM/OSRJO7jvYTSyw0Q+pdOBkiakxFJ4jH5vVLKswSRDzBBLaffIvHgD+8rNkE78g
SUmcgSobcbuWedDOseHVeIKWuWHTUiFAYmxIqrpb1hDDGcuVA7RZWaZDJ5D7AgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUoxeSXVjyB19kZlsVcbnoO/uoKI4wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZAD
BABfhisDBABfhjMDBABfhmADBACyXIIDBACyXKUDBACyXLIDBACyXMADBACyXMID
BACyXN0DBACyXPADBACyXZYDBACyXbYDBACyXcgDBACyXecDBACyXfoDBACyXswD
BACyXuwDBACyXvgDBACyXxkDBACyX1UDBACyX5wDBACyX6ADBACyX7gDBACyX84w
DQYJKoZIhvcNAQELBQADggEBADuI9jrT2JEkiHfsvRURKa8CerZiQVNEQPTBDFZc
deh2ZtNDyTnU9dQvPMiX5yX8B6+3qxZLoGXepJSPtT3eo4Iv9tIOfz277TpxxWwY
f3QIddcbyVD+igRf39cWtmrgXcroyS5cmctlHl5Z7zzvvLfgxPimjXNiv03VDZOV
LVSh/ukih6ydBmXlD5Pnxba3sRuXOb82H+oBcPSnQVlFj6gYyesAzb+DvNhyXSz+
zZRvAqxy20MHVTFe2VbOYoVAm8xJmvgghMVYJmk/UF/sZCVyoM/91G9Y2jbyUJkA
l0fQ3pEVQcTpDTlDrXCscIhAloRYZgxYgsMDmYnXFWkeSlc=
-----END CERTIFICATE-----
Generated at Thu Oct 16 21:29:43 2025 by rpki-client