Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: dzt358M8N8NNuBFoYLVa7IrM8C48oOtVCgXaC8qyoEM=
Subject key identifier: FA:B8:27:43:74:1D:1D:39:06:77:E2:BA:E3:EF:87:42:60:94:73:25
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 32A9E3843FE5BD0CDD670B75F709870C5F5AE027
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205489.roa
Signing time: Fri 18 Sep 2026 11:57:15 +0000
ROA not before: Fri 18 Sep 2026 11:52:15 +0000
ROA not after: Fri 17 Sep 2027 11:57:15 +0000
asID: 205489
IP address blocks: 5.252.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a9:e3:84:3f:e5:bd:0c:dd:67:0b:75:f7:09:87:0c:5f:5a:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 18 11:52:15 2026 GMT
Not After : Sep 17 11:57:15 2027 GMT
Subject: CN=FAB82743741D1D390677E2BAE3EF874260947325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:f8:f4:56:2c:e8:a6:cb:e0:91:a0:c0:b7:
28:51:a3:b5:89:37:58:0d:1f:1d:fa:5d:3d:3a:ce:
23:7d:a6:52:89:5f:d2:58:1a:09:8c:12:05:7b:dd:
59:2c:e6:82:fb:de:d8:8c:08:af:ac:48:55:ca:69:
d8:54:b5:3e:9a:88:f2:e8:72:85:e1:e5:d2:ee:3c:
ed:0e:15:84:69:15:88:c1:ac:4b:56:81:c3:c8:0a:
de:42:5f:d2:48:16:f5:40:31:72:71:53:57:a2:10:
ee:63:a4:a5:7c:dc:89:c5:3d:51:79:fc:f1:92:03:
d3:38:64:53:bf:2c:75:71:64:0d:ba:62:bc:9e:87:
9c:ba:9c:bf:f0:1c:47:d3:04:3f:3d:7e:53:38:78:
5b:b4:33:79:18:e5:52:45:31:02:16:1d:4d:2e:e0:
2d:7a:99:11:34:71:b9:db:c8:b3:68:22:9f:c8:1f:
a2:57:0c:e2:41:03:3d:38:b5:58:eb:a6:90:d6:8c:
95:b9:bf:c2:b7:79:db:1d:8e:ce:97:05:29:ae:5f:
5d:56:3b:ec:a8:b1:8e:c6:fd:f2:4e:b1:4c:e3:ce:
b7:b5:b6:92:c8:b3:c7:19:13:b4:2e:e9:9c:3a:5f:
b4:f6:4b:e3:4f:2c:26:30:97:71:2a:10:99:bf:70:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B8:27:43:74:1D:1D:39:06:77:E2:BA:E3:EF:87:42:60:94:73:25
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.74.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:16:61:87:7d:a5:c1:f4:2d:53:8b:9b:9f:c6:f9:08:af:41:
1c:d0:21:66:43:e6:2d:ec:dd:58:17:9f:fc:64:64:1d:47:d8:
b2:01:89:16:bf:fa:d2:a7:3d:57:db:49:29:68:65:7b:0a:c3:
ce:71:92:56:17:b7:a9:d7:2c:cb:27:c1:9f:df:d0:a0:ae:59:
83:6e:a8:12:34:25:9d:0d:b6:a6:a2:fe:13:85:17:8d:7b:e7:
67:dc:d1:c3:91:e4:de:2a:0c:d4:2c:ec:b2:cf:ae:08:58:9a:
a4:21:92:b3:86:29:d9:7c:cc:cc:61:dc:40:29:cd:87:c4:5d:
7e:ec:cf:c6:64:f1:f9:89:5d:33:57:07:48:f2:cd:9f:dc:78:
55:1b:47:6b:f4:86:57:f9:4d:07:09:96:47:23:bb:dd:58:78:
c5:8e:c1:0e:24:a4:fd:f0:90:08:b0:90:bb:ea:73:f8:c0:f8:
10:34:ed:e2:eb:5a:a7:3c:73:40:19:ec:d4:aa:62:9c:e7:6d:
9b:09:e1:fb:89:b5:33:24:37:fa:d9:73:e6:43:5f:08:38:da:
a1:0a:6d:15:94:c2:c7:2f:a3:a0:7c:d5:36:44:c4:40:dd:8b:
0a:70:c0:af:b1:5b:06:24:81:0d:9e:9a:d4:7b:19:0f:4a:46:
f5:6e:8f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:51:19 2026 by rpki-client