Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205705.roa
File: AS205705.roa (raw, json)
Hash identifier: C1Rf8V2faaJI/0MYkqQfj5u48ZSAMboRTLWxdmZN8E4=
Subject key identifier: FA:A3:AB:11:39:0B:B0:3B:AB:50:DC:CF:AA:F1:3E:03:E6:0F:F7:0A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 61BCF026156D39AF74FCEA925D91FE59E9DC7E29
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205705.roa
Signing time: Sat 01 Aug 2026 23:49:16 +0000
ROA not before: Sat 01 Aug 2026 23:44:16 +0000
ROA not after: Sat 31 Jul 2027 23:49:16 +0000
asID: 205705
IP address blocks: 143.14.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:bc:f0:26:15:6d:39:af:74:fc:ea:92:5d:91:fe:59:e9:dc:7e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 1 23:44:16 2026 GMT
Not After : Jul 31 23:49:16 2027 GMT
Subject: CN=FAA3AB11390BB03BAB50DCCFAAF13E03E60FF70A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:bc:f4:c1:1f:b5:82:cb:68:7e:15:9f:d1:
b6:66:64:65:dd:58:33:cc:ba:ba:72:f1:0c:a5:fc:
4e:ad:7d:25:6e:0f:80:96:49:47:d4:95:22:80:cd:
14:47:21:18:8f:5f:86:3b:66:8f:48:a5:d6:f7:f8:
71:b3:fd:60:64:6c:8c:a5:1f:75:75:96:48:ba:e3:
25:ea:73:c4:d5:1c:7a:53:53:64:b9:58:0c:e3:33:
a6:b4:63:3c:6e:d6:36:3c:03:88:09:36:36:8a:7a:
a0:18:0a:e3:27:58:13:14:ad:f4:01:de:98:46:c5:
79:9d:86:62:6d:23:e2:a8:df:f9:b8:15:ac:2c:88:
83:c0:b5:6f:16:cb:48:8d:f4:5d:6f:aa:99:1b:c2:
6f:ad:09:e6:a2:93:9e:49:f2:4d:7e:53:f3:c8:f3:
34:c2:c6:77:b8:a6:4d:ca:ef:48:2f:5c:cb:96:01:
3d:5f:b3:e2:52:2e:32:f5:9f:59:d7:b3:ac:a7:67:
55:8b:93:55:08:8b:8c:b8:24:ab:3a:ac:d4:d5:3e:
84:87:fe:41:50:7e:69:d4:ad:45:2e:cf:3b:ab:7b:
07:06:27:03:ea:63:52:79:ee:c9:f9:91:54:a8:34:
e9:a3:c7:3f:c7:73:dc:fa:3c:6a:3e:f6:84:01:41:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A3:AB:11:39:0B:B0:3B:AB:50:DC:CF:AA:F1:3E:03:E6:0F:F7:0A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205705.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.69.0/24
Signature Algorithm: sha256WithRSAEncryption
08:83:92:9e:0b:ab:64:a5:1b:0e:b2:ad:f5:04:81:9f:8f:a6:
24:ce:7c:bc:f3:50:cc:35:ec:37:0f:78:79:0d:e7:4c:fe:9b:
c8:ea:40:72:f4:36:22:5e:ba:1d:b4:82:e8:b3:d2:a9:84:e7:
ca:66:78:6d:3f:99:f6:e3:7f:4f:36:c7:48:bc:3f:a7:a9:86:
a9:fe:96:f4:71:cd:8d:17:a0:eb:d4:e4:15:d7:fc:1a:f2:35:
92:5e:98:87:69:43:1e:f6:51:24:a0:ee:8f:5f:cf:14:ff:67:
6b:2a:56:8f:87:3c:11:46:e0:72:e0:67:8c:05:1d:03:cc:e8:
df:70:de:d2:5f:c2:3e:66:7b:92:f2:e1:f8:aa:03:62:6f:20:
dd:d5:ab:6d:20:4f:d5:72:96:60:a0:32:99:f3:c6:32:71:2d:
58:05:3f:42:ae:08:57:41:0c:07:e5:67:42:1b:83:3e:5c:94:
22:e0:04:73:95:0d:98:0d:b5:ef:a5:d4:cb:7e:be:99:5e:f7:
f7:78:0f:5a:b1:4e:7f:9f:de:ea:a7:2b:2f:4e:38:2c:11:bf:
dc:db:32:46:b7:e0:16:a0:95:a3:0b:48:27:17:bc:d8:4b:33:
39:6a:42:fa:0c:92:f9:e3:4b:ba:b4:8d:c0:db:7d:c4:85:81:
c6:50:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:58:26 2026 by rpki-client