Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS205547.roa
File: AS205547.roa (raw, json)
Hash identifier: RtrZSPO8wEf4ZFRk1y2I9LCdp09JQxXCz5IrCSvdUjQ=
Subject key identifier: A7:71:78:36:0B:B1:9D:D4:9A:39:FA:76:D7:69:73:13:51:0F:28:41
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 78A9803090D077855F74B010D6ED70330F0DA4FF
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS205547.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 205547
IP address blocks: 5.199.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a9:80:30:90:d0:77:85:5f:74:b0:10:d6:ed:70:33:0f:0d:a4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=A77178360BB19DD49A39FA76D7697313510F2841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:ec:91:db:4f:70:dd:53:d5:26:26:24:d7:
41:1a:8e:c6:bf:28:83:c4:7a:1b:a2:a5:9f:df:31:
5b:d6:f7:5f:81:c8:38:7b:22:68:2c:20:92:a4:13:
75:11:31:4c:30:62:e0:07:98:1f:3b:c5:16:33:54:
22:c1:6d:bb:7d:be:dc:59:a1:01:18:ce:aa:af:e9:
ec:a9:08:31:1f:d1:a1:ed:91:c4:dc:9b:92:74:4e:
13:b1:4f:6f:59:79:c8:e6:d2:55:90:f2:f4:02:15:
13:8e:80:51:ac:45:1e:26:98:43:77:7a:5b:44:cd:
f8:c1:bd:21:89:ac:87:bf:e9:a3:26:ec:74:ea:43:
3c:cc:ee:a5:0b:a4:62:86:3f:24:49:57:83:bd:1e:
d3:0c:10:8f:ec:dc:3d:1d:59:aa:d1:a9:d9:60:ee:
71:e6:6a:4b:42:07:71:59:05:bb:a2:e1:20:b1:44:
e1:c6:ce:98:2b:a4:aa:e9:df:a6:4c:86:e3:33:58:
ba:63:a5:5e:a3:cb:b8:71:93:7a:44:9c:9a:5f:92:
5c:46:55:47:dd:1d:eb:e8:03:d8:2c:9f:b8:49:a1:
e1:1a:5f:7f:d1:78:33:32:1e:e6:e5:ec:7e:23:6d:
bc:c0:82:f4:43:76:46:4f:21:97:fe:90:ea:73:13:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:78:36:0B:B1:9D:D4:9A:39:FA:76:D7:69:73:13:51:0F:28:41
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS205547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.19.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c3:47:ae:25:28:ad:50:7e:b8:d7:83:24:19:8d:6e:dc:e6:
9a:a9:3e:76:a6:80:a9:e6:27:df:e2:b9:6b:20:3c:ea:1d:6a:
e3:26:17:66:6f:f6:cc:cc:56:3d:7c:f8:51:b7:10:88:de:48:
97:6f:af:71:26:ab:31:1a:52:5e:c0:b4:1c:44:8c:a8:0b:f0:
0e:ee:ac:7e:05:ba:3f:44:35:92:03:b1:ee:ef:2a:be:98:8b:
bd:98:f1:4f:cb:18:62:22:38:57:fa:fc:62:61:f9:f9:e4:ef:
06:72:f8:81:95:a5:30:82:c2:9b:9f:b3:c7:44:23:6b:20:25:
82:ea:94:7d:fb:4e:34:bf:35:27:14:e5:66:f9:15:94:10:72:
27:7e:24:b1:43:62:37:3d:ef:11:13:7d:1a:50:fa:21:e5:45:
2c:11:c7:65:79:41:4d:d0:dc:69:52:a5:1e:1f:07:2c:c4:fa:
8e:74:0d:54:a7:a5:54:94:4b:7d:da:c7:e4:e2:82:f8:fc:25:
d3:2f:87:d0:0f:f1:9f:23:e3:c9:12:4f:db:6b:d0:25:5b:0b:
02:4e:80:aa:ae:06:8f:42:10:eb:c0:8f:5e:0f:93:c1:72:21:
dc:45:b3:a7:21:ed:44:24:8d:ed:1c:42:21:92:d7:c3:91:0e:
d6:53:6d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:13:33 2026 by rpki-client