Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205418.roa
File: AS205418.roa (raw, json)
Hash identifier: tOBJ02gJkzRJqHVlefwKyT7VYxgiwVBs/voJN28HuTw=
Subject key identifier: 29:20:8A:9C:CB:FA:41:5A:AE:7F:A2:CD:BE:96:54:F6:82:49:33:6F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0DE296C55AA0CDAAC6101FC49354D433E6660AEE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205418.roa
Signing time: Sat 28 Feb 2026 06:11:17 +0000
ROA not before: Sat 28 Feb 2026 06:06:17 +0000
ROA not after: Sat 27 Feb 2027 06:11:17 +0000
asID: 205418
IP address blocks: 155.117.164.0/24 maxlen: 24
162.141.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e2:96:c5:5a:a0:cd:aa:c6:10:1f:c4:93:54:d4:33:e6:66:0a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 28 06:06:17 2026 GMT
Not After : Feb 27 06:11:17 2027 GMT
Subject: CN=29208A9CCBFA415AAE7FA2CDBE9654F68249336F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:18:68:47:cd:fa:ce:10:b3:ad:f9:10:27:
97:8c:82:e8:1c:82:7e:60:8d:77:5e:82:51:9c:09:
59:eb:6d:9c:bd:48:fd:1a:3a:da:1b:b2:ef:32:a3:
13:7b:92:7e:12:2e:74:14:b1:56:e3:ab:75:2d:bb:
92:f2:34:9a:5c:2a:6c:bd:d3:f2:ed:8c:65:1d:3d:
9f:a6:48:90:98:97:bc:fe:fb:1b:99:ae:7f:e2:d5:
18:11:79:04:52:d1:fe:28:8b:b4:65:fd:39:52:23:
52:af:ac:99:26:88:a0:ea:e9:bf:c5:37:ba:3f:51:
21:9c:2b:58:78:ad:bd:d7:43:5a:41:7e:24:5a:53:
72:93:bf:24:d3:42:fe:05:62:7f:3e:fb:e4:3b:46:
7f:58:74:de:6c:12:f1:91:7a:a0:34:21:77:fb:d7:
1c:90:3b:44:37:e6:f2:f8:50:b8:fd:7d:b9:94:b8:
04:b6:c3:a3:1c:d1:9a:86:e3:32:9d:9e:97:17:2c:
b1:59:b5:51:34:18:e0:b4:fe:b6:49:ec:09:14:31:
60:30:25:d0:25:df:34:1c:89:cd:7c:33:d6:81:42:
ed:21:ea:55:66:0b:de:16:6b:93:45:e7:67:47:d3:
f3:ef:f8:a0:19:eb:c7:12:6d:35:b5:d0:c2:be:f8:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:20:8A:9C:CB:FA:41:5A:AE:7F:A2:CD:BE:96:54:F6:82:49:33:6F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205418.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.164.0/24
162.141.4.0/24
Signature Algorithm: sha256WithRSAEncryption
58:79:d9:ff:87:19:9a:1b:59:25:85:88:e6:9a:57:d5:04:b2:
3f:ba:8f:82:61:f9:d9:5d:15:ff:3c:cf:79:f3:b5:e6:b7:2f:
49:2a:19:ee:4b:ff:73:fd:0f:9f:15:da:20:f0:3a:99:de:3a:
5c:92:7c:72:13:2f:e4:82:7e:36:ae:41:98:2d:7b:5c:a3:d4:
13:26:db:8a:13:e1:3b:06:55:86:aa:0a:ce:4f:1e:41:13:ed:
aa:04:7a:3e:94:89:d2:10:65:79:a3:7d:fb:79:96:24:43:55:
a6:61:3b:a1:5e:94:60:e0:0b:c6:88:01:9f:59:47:5b:a5:2e:
2e:6f:ed:21:e6:7b:b9:4f:ea:31:c8:15:5b:64:fe:c6:14:b6:
af:9c:a5:6d:a5:42:3a:c6:70:60:8d:a1:ba:ec:d2:95:60:75:
3e:9f:72:6a:c9:f8:99:b4:db:d0:84:7e:42:92:2e:0e:0c:2e:
89:a5:b7:d8:13:75:7c:10:fe:2a:bf:52:62:92:ec:37:9d:f1:
d5:4a:4d:55:79:29:10:44:ae:61:d1:1a:22:be:75:7f:ee:6d:
9b:53:9f:a0:ef:9f:d1:ca:48:de:da:3d:9a:05:ee:b9:22:c3:
1e:61:46:63:80:3e:85:ed:97:2f:7d:59:42:c0:c5:99:4c:6c:
2d:a7:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:31 2026 by rpki-client