Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: 9oqqa/AHSjpw2SFDCuT2yiRWq2v+ADUdQDXHrcyH2K4=
Subject key identifier: 6D:EB:A2:44:6F:8B:D0:A9:7C:CD:D4:00:4C:97:71:C6:16:26:52:4A
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 3077E48AF5298A00CED15AC826D3C554A7E257FB
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS205489.roa
Signing time: Fri 18 Sep 2026 11:57:17 +0000
ROA not before: Fri 18 Sep 2026 11:52:17 +0000
ROA not after: Fri 17 Sep 2027 11:57:17 +0000
asID: 205489
IP address blocks: 5.199.7.0/24 maxlen: 24
5.199.8.0/24 maxlen: 24
5.199.10.0/24 maxlen: 24
5.199.14.0/24 maxlen: 24
5.199.16.0/24 maxlen: 24
5.199.25.0/24 maxlen: 24
5.199.27.0/24 maxlen: 24
5.199.30.0/24 maxlen: 24
5.199.38.0/24 maxlen: 24
5.199.40.0/24 maxlen: 24
5.199.57.0/24 maxlen: 24
5.199.59.0/24 maxlen: 24
5.199.61.0/24 maxlen: 24
5.199.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:77:e4:8a:f5:29:8a:00:ce:d1:5a:c8:26:d3:c5:54:a7:e2:57:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 18 11:52:17 2026 GMT
Not After : Sep 17 11:57:17 2027 GMT
Subject: CN=6DEBA2446F8BD0A97CCDD4004C9771C61626524A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:18:42:b6:80:c2:52:9b:8f:d2:99:c6:f0:
7f:37:a7:31:6e:5d:ba:fd:9c:c1:c8:56:ea:c3:66:
99:cf:a8:93:53:4c:3e:15:e8:d5:bc:37:4a:e0:1b:
90:21:93:01:67:8a:c0:6a:02:b2:37:91:57:80:f3:
c6:e7:de:f8:98:fe:f3:bd:24:29:12:5d:48:44:c8:
27:55:19:9a:9c:3c:06:43:aa:a7:7c:b9:ea:8a:3a:
80:b8:95:2b:8a:8a:a7:6f:1c:e5:21:18:09:e4:f4:
9e:50:6d:9a:bf:b1:55:93:aa:f7:f5:4a:fc:7c:a4:
e2:cf:27:71:c1:fe:ac:43:81:6a:89:0d:7d:53:b8:
81:52:71:b7:69:87:1b:5c:2d:17:2c:86:fd:e4:f9:
d1:61:4f:bd:ba:f5:39:d3:98:a5:0a:74:4e:32:eb:
ce:5e:92:74:8a:57:47:b8:dc:45:85:90:b0:37:f9:
f0:0e:98:9d:0c:53:4a:a0:6d:c2:c0:ef:e3:fd:26:
df:35:8f:5a:86:b0:89:61:52:1b:d0:89:3b:59:7a:
f9:f7:82:e8:ea:7c:db:77:0d:91:ff:d6:1e:48:33:
b8:0d:82:2a:ff:21:9b:2d:97:90:5a:99:b9:71:c6:
81:bd:03:f8:0e:00:7e:c2:89:cc:4c:59:a6:0d:2d:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EB:A2:44:6F:8B:D0:A9:7C:CD:D4:00:4C:97:71:C6:16:26:52:4A
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.7.0-5.199.8.255
5.199.10.0/24
5.199.14.0/24
5.199.16.0/24
5.199.25.0/24
5.199.27.0/24
5.199.30.0/24
5.199.38.0/24
5.199.40.0/24
5.199.57.0/24
5.199.59.0/24
5.199.61.0-5.199.62.255
Signature Algorithm: sha256WithRSAEncryption
a0:43:32:91:68:ee:1f:3a:c1:40:4e:51:fe:f2:7a:ec:1a:34:
17:ab:48:78:75:61:b7:3e:ec:b9:cc:54:86:00:02:18:42:1d:
84:56:ae:1a:ba:e3:af:4e:50:fb:8d:b1:b7:8e:0c:d1:8a:5c:
0d:8c:e5:5b:f7:8b:dd:2f:94:ef:0b:05:2e:60:88:d8:a2:33:
0a:51:4c:6b:f4:b4:de:5a:2d:7e:4c:d2:73:e5:e1:9a:ec:eb:
f4:4c:27:4d:8e:78:ba:7b:bb:bd:59:98:3b:13:63:76:3a:41:
e0:58:1b:1a:ea:55:62:32:6f:f9:c2:75:4c:8b:ab:a1:4e:b7:
17:7e:a0:0f:98:f0:f2:ac:82:87:bf:d0:e3:86:c8:d3:13:4c:
bc:a3:5f:ef:fc:07:fc:ae:cb:19:66:f9:bd:94:81:86:ff:bd:
b8:a9:18:89:42:81:31:56:f3:10:2e:da:b9:2a:1d:44:55:a4:
4a:ed:a6:22:61:7d:a9:39:7d:98:5f:d0:2d:de:51:92:95:d3:
6a:90:1c:a7:9a:7e:d5:cb:2f:09:2f:0c:89:f9:aa:d1:6c:92:
e2:19:ed:2e:e2:44:a2:6f:95:0c:05:b7:ac:82:7a:31:93:c0:
ac:05:9f:ce:d4:a2:e2:ec:ea:33:f6:0a:c6:a1:74:b1:b5:ef:
f0:11:70:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:33 2026 by rpki-client