Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: LkzbcLCcIlXp8ttIEqxh++SKWrkw70uQwD3a6n8pv/0=
Subject key identifier: 52:2A:1C:D9:F5:CC:7B:8B:27:FC:C3:00:D5:6E:08:88:7B:61:4F:FA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 13145F33957937AB5E7AEDBC44429F0ADB05E257
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205489.roa
Signing time: Thu 12 Nov 2026 18:49:17 +0000
ROA not before: Thu 12 Nov 2026 18:44:17 +0000
ROA not after: Thu 11 Nov 2027 18:49:17 +0000
asID: 205489
IP address blocks: 96.62.127.0/24 maxlen: 24
143.14.111.0/24 maxlen: 24
143.14.123.0/24 maxlen: 24
147.79.56.0/24 maxlen: 24
155.117.143.0/24 maxlen: 24
162.141.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:14:5f:33:95:79:37:ab:5e:7a:ed:bc:44:42:9f:0a:db:05:e2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 12 18:44:17 2026 GMT
Not After : Nov 11 18:49:17 2027 GMT
Subject: CN=522A1CD9F5CC7B8B27FCC300D56E08887B614FFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:c7:23:47:6f:85:72:4a:50:a8:93:d8:0b:
d9:db:52:fd:a9:aa:88:ed:62:8e:8a:7b:04:43:8e:
c2:c2:62:6b:a0:e3:41:77:30:f3:85:8b:e6:9c:e3:
cc:87:31:0a:ca:5e:0e:49:64:9c:59:eb:d1:ef:88:
17:fa:7c:cf:f1:d5:0b:35:42:82:dc:bf:9e:a4:9f:
f7:c6:04:b6:e1:ba:be:36:5d:e2:e5:3d:6d:6a:83:
43:19:7e:c8:d5:32:d9:dc:d3:f5:15:bd:b8:cd:c1:
03:d3:28:80:27:2e:d6:02:15:8d:6a:3e:b8:73:93:
ed:db:bf:f2:c1:d1:3a:43:d8:c3:bb:1f:65:8a:be:
f4:8b:4b:83:44:d2:d6:e7:87:59:a2:ea:b3:c9:84:
24:e9:70:64:f4:07:b7:de:73:e3:f3:1b:48:47:29:
62:a8:5d:78:88:33:36:1e:f6:d9:47:12:3e:3a:9a:
8c:2c:c1:c0:f6:7d:9b:7c:36:05:e7:ee:cc:5a:50:
78:03:5f:c7:cd:8d:2b:1f:b7:7a:d2:b2:6b:79:9a:
dd:25:5e:51:04:9d:d9:d0:e2:db:97:ff:aa:43:b5:
82:e7:5a:0f:0e:37:6a:8f:c5:58:d7:54:ac:f6:e9:
f2:83:7b:82:06:c3:0d:e7:ae:46:f5:3a:38:44:f9:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2A:1C:D9:F5:CC:7B:8B:27:FC:C3:00:D5:6E:08:88:7B:61:4F:FA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.127.0/24
143.14.111.0/24
143.14.123.0/24
147.79.56.0/24
155.117.143.0/24
162.141.96.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:99:70:77:f9:57:2e:89:68:8e:b4:64:70:3b:15:77:f8:aa:
bb:a8:72:ab:87:05:52:2d:89:53:89:4c:a0:66:c1:8f:4f:25:
57:db:20:f9:0f:6f:0e:51:9a:ac:dd:4f:c7:e5:5b:e3:44:29:
e7:d4:19:8f:a8:98:86:25:45:c9:90:1f:a9:65:52:74:8b:94:
a9:d4:00:55:79:9a:a1:a1:03:7a:38:2f:cd:86:14:b6:4f:3c:
20:9e:3e:1c:16:44:bc:7f:94:a5:bb:5a:01:cd:ef:9a:3c:02:
07:3f:62:18:cf:ab:0c:f3:0c:e8:bd:f7:83:f5:28:84:4f:35:
b0:8d:5b:7e:c2:46:c8:6b:59:f0:2f:ff:29:8f:3c:25:66:57:
a0:97:51:7e:13:bd:2c:87:58:f2:f8:4e:14:0a:2b:5d:5e:e5:
73:bc:31:21:91:5b:d5:70:41:60:ce:e0:42:f6:10:d6:88:7a:
21:b1:92:e3:64:66:31:03:f5:d7:08:45:2d:c8:05:77:6b:7f:
81:c0:91:70:b8:e9:b1:27:5a:13:36:94:95:43:02:9f:19:44:
16:41:a1:a3:0f:c6:34:29:bc:5e:ef:0c:af:93:b1:61:12:dd:
10:a0:40:65:ce:4d:77:62:94:5a:dc:9e:01:55:1e:8c:32:a5:
7f:aa:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:19 2026 by rpki-client