Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205987.roa
File: AS205987.roa (raw, json)
Hash identifier: ddAFnsneH6YYnOcgmB0QaxeK5rp+KnKrsstHp8Fq2Wc=
Subject key identifier: DD:A3:21:17:1E:8D:CC:B4:35:17:5B:03:3B:D6:95:3F:59:BE:7D:AD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6655047435FA118E9667591416A3494B53A1A5C3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205987.roa
Signing time: Thu 09 Apr 2026 14:28:19 +0000
ROA not before: Thu 09 Apr 2026 14:23:19 +0000
ROA not after: Thu 08 Apr 2027 14:28:19 +0000
asID: 205987
IP address blocks: 150.241.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:55:04:74:35:fa:11:8e:96:67:59:14:16:a3:49:4b:53:a1:a5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 9 14:23:19 2026 GMT
Not After : Apr 8 14:28:19 2027 GMT
Subject: CN=DDA321171E8DCCB435175B033BD6953F59BE7DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:1a:86:15:cf:73:90:90:56:35:23:ab:ae:
e4:26:3c:0f:43:8a:45:a1:4e:31:a7:af:96:e3:45:
7d:6e:10:82:e5:e4:01:b0:70:fb:34:69:81:21:e6:
b6:9e:9c:54:e2:80:7c:35:24:05:d2:07:4e:88:91:
3c:96:42:5b:98:22:fb:4b:f6:cd:e0:82:27:fc:d6:
ac:40:e1:1b:6f:f5:4c:8c:cd:d3:31:85:54:47:8b:
df:9a:a7:7d:fb:92:b6:75:58:bd:4a:ba:5b:98:4a:
ba:6f:99:95:85:58:05:43:25:78:4b:ab:14:ad:33:
bf:4c:62:d0:37:c4:8a:2c:75:89:d7:d7:22:76:4b:
f4:66:0c:67:86:77:94:89:ce:ce:b5:13:d4:8a:1b:
6e:9e:0d:4d:5b:66:6b:cd:9f:1f:06:8f:65:a8:3d:
84:bb:0f:68:eb:cf:58:d8:bf:73:0e:81:97:d1:72:
76:f1:fb:09:f4:3a:a3:96:ce:87:40:15:97:ce:16:
5a:c8:fd:58:53:28:8a:6d:25:32:1a:d0:4e:4e:82:
a3:d1:94:1d:df:07:61:72:15:ba:cd:b0:2d:1a:84:
c6:2f:1b:01:dd:a7:b3:6b:49:93:a4:5f:d8:14:b7:
79:52:e9:0a:f6:f9:72:7f:64:c4:a3:f0:0e:23:25:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A3:21:17:1E:8D:CC:B4:35:17:5B:03:3B:D6:95:3F:59:BE:7D:AD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.254.0/24
Signature Algorithm: sha256WithRSAEncryption
94:af:ec:44:0b:5b:15:0f:cb:e7:d1:d3:9e:ce:cf:b0:e8:64:
a7:f2:ea:0f:2c:6a:8b:4f:1e:d4:3f:fb:7c:c4:58:ef:e4:e0:
58:0c:42:29:b8:2e:62:59:95:39:58:05:a7:a2:b6:59:aa:be:
67:92:b5:e7:1d:12:35:31:b3:43:db:30:0c:97:16:a5:c0:92:
03:0f:f0:25:82:f9:69:96:b9:c2:07:ca:85:69:da:9f:7b:85:
3b:0f:3b:78:2a:fc:c2:9f:51:4c:72:df:c8:e3:4b:ed:9a:4e:
b9:ba:b9:67:82:7a:fc:28:10:8b:fc:c7:df:64:50:be:1d:10:
aa:85:2e:9c:c5:32:f2:db:77:a8:68:12:0e:0f:d7:88:d8:8a:
ce:bf:ad:cd:ed:fc:02:2d:c4:38:a1:36:4a:01:12:77:b6:e9:
e1:61:65:b4:11:79:15:39:59:b8:96:a0:88:1b:77:58:d8:a1:
e4:db:c8:96:de:89:d4:18:58:0f:61:cd:58:49:30:d6:1f:04:
9c:88:bb:6b:30:fb:ad:14:da:9e:1b:52:47:e6:83:66:a0:46:
6d:67:47:dd:34:68:1e:31:35:67:2b:ca:5b:86:e5:cf:8c:79:
29:36:3f:45:9a:48:ec:80:68:2f:26:32:a9:fb:06:81:53:ff:
fe:9b:4c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:08 2026 by rpki-client