Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205896.roa
File: AS205896.roa (raw, json)
Hash identifier: TJ+6XcYXDB/+I8lJE9/nGQofQm5ItUrvePFkBbEsg9U=
Subject key identifier: FD:7E:AE:05:96:95:14:FC:0E:9E:7B:F7:B6:3D:C9:47:91:1F:0F:A4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 16EB9C2BB0BB6AE9D28E121AE6BCDBDE320726CA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205896.roa
Signing time: Wed 10 Sep 2025 09:41:51 +0000
ROA not before: Wed 10 Sep 2025 09:36:51 +0000
ROA not after: Wed 09 Sep 2026 09:41:51 +0000
asID: 205896
IP address blocks: 91.124.168.0/24 maxlen: 24
91.124.172.0/24 maxlen: 24
91.124.177.0/24 maxlen: 24
91.124.238.0/24 maxlen: 24
92.112.141.0/24 maxlen: 24
178.95.225.0/24 maxlen: 24
178.95.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:eb:9c:2b:b0:bb:6a:e9:d2:8e:12:1a:e6:bc:db:de:32:07:26:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 10 09:36:51 2025 GMT
Not After : Sep 9 09:41:51 2026 GMT
Subject: CN=FD7EAE05969514FC0E9E7BF7B63DC947911F0FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:58:a5:7a:4e:33:0c:cb:c6:43:88:10:92:
b0:8c:33:f7:ac:3a:1b:4c:84:2b:51:27:80:cf:a7:
28:0f:c7:d6:a9:56:f6:df:d8:ad:27:aa:10:c5:2b:
25:ab:b4:bf:9c:07:18:6d:80:a2:2f:a2:d8:7c:12:
a1:b3:8c:46:1d:4a:4b:44:1a:5c:db:db:96:3d:f2:
c9:58:e2:13:78:70:e5:5a:c1:f0:b3:c8:4f:78:8c:
b7:7c:d9:16:d8:63:b6:14:37:b5:38:e9:b4:44:e5:
3c:c7:e8:2d:b0:43:57:5e:36:e6:d1:eb:ba:2e:b4:
27:17:8f:44:26:09:dd:6d:1f:a1:8d:2f:74:26:93:
f6:44:b8:46:c6:97:a2:b1:db:47:13:d4:26:64:f3:
28:e6:b3:ea:06:b7:95:e5:37:9e:d5:17:34:f7:87:
50:80:a1:27:24:b0:1c:93:46:5c:0c:44:69:ac:14:
26:17:89:42:2d:1d:da:61:d9:52:34:13:0c:79:2a:
32:be:03:80:f3:17:ec:ff:7f:38:2d:d8:10:ca:e1:
d4:11:e0:bb:7d:c2:b5:cd:b1:e7:8b:f8:44:1e:21:
f3:e0:bd:2e:f4:83:6f:33:86:19:6f:b1:ea:bd:13:
97:cc:29:a1:a9:ee:b2:11:c8:8e:0b:bd:d5:8e:d4:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7E:AE:05:96:95:14:FC:0E:9E:7B:F7:B6:3D:C9:47:91:1F:0F:A4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.168.0/24
91.124.172.0/24
91.124.177.0/24
91.124.238.0/24
92.112.141.0/24
178.95.225.0/24
178.95.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:af:eb:63:25:0a:80:0e:16:28:51:a9:36:d9:e7:46:1a:a4:
29:42:b3:62:c6:38:02:4e:28:38:cf:23:18:d2:a5:75:58:28:
19:24:f0:20:3c:17:27:b7:04:5a:de:92:70:2d:ff:92:e2:2f:
a9:a1:90:fa:42:01:ba:96:fa:51:9b:23:30:45:b8:fa:dd:89:
31:cb:b4:40:d2:d5:71:b4:56:95:30:20:41:f4:72:ea:68:c0:
bc:84:e2:e3:06:be:41:44:0f:a8:b2:7e:14:42:6a:3a:19:0f:
61:39:78:32:89:45:a4:18:d0:a2:7b:40:57:e2:9c:04:86:8a:
68:c9:d2:ad:26:f2:f8:b7:ad:9c:e4:07:5d:13:99:56:3a:bd:
90:fe:5f:a4:48:ab:e8:0a:98:b6:f7:f1:00:47:8c:1e:f7:73:
36:4e:73:43:04:de:20:6d:74:bc:4d:27:db:ae:0b:84:8d:f2:
59:6d:32:47:14:a2:ca:29:bd:94:4a:3f:10:b4:a7:96:20:65:
ac:74:fa:2d:07:e3:6a:fa:a9:05:f4:30:8c:d1:f6:ef:e9:0e:
ba:15:08:0f:0e:62:01:00:4f:dc:04:51:9b:81:6d:67:a1:52:
9e:79:6b:ee:99:a5:5a:31:62:2b:0a:3b:0a:a2:e3:a9:14:4a:
29:c7:58:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:33:46 2025 by rpki-client