Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205275.roa
File:                     AS205275.roa (raw, json)
Hash identifier:          QGZeTWLY6/dsYSwj+5aMir+p8TvQnhEwgDnhMlLLoAY=
Subject key identifier:   76:05:94:D0:75:C7:2F:EB:3A:3B:F1:EF:E0:B7:A5:A7:20:07:59:50
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       05360DE06CDF4AF6A85E11AC4F79DF7AF2CFF14B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205275.roa
Signing time:             Wed 03 Jun 2026 17:44:33 +0000
ROA not before:           Wed 03 Jun 2026 17:39:33 +0000
ROA not after:            Wed 02 Jun 2027 17:44:33 +0000
asID:                     205275
IP address blocks:        178.83.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:36:0d:e0:6c:df:4a:f6:a8:5e:11:ac:4f:79:df:7a:f2:cf:f1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jun  3 17:39:33 2026 GMT
            Not After : Jun  2 17:44:33 2027 GMT
        Subject: CN=760594D075C72FEB3A3BF1EFE0B7A5A720075950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:07:1f:82:69:ff:d0:6f:11:6b:25:d0:fc:
                    80:95:30:17:d0:bd:5c:58:6e:d8:22:96:b1:08:b0:
                    af:b3:b3:7b:c1:d4:c2:88:e7:7b:2e:69:c7:a3:4c:
                    41:2e:92:45:4e:61:c4:30:b9:e8:3f:df:8b:81:4e:
                    22:1a:18:06:46:bb:82:63:52:29:0c:1f:c4:1b:5d:
                    9a:8e:0c:01:cc:1c:e6:52:8d:5d:20:24:57:00:31:
                    51:7f:62:c7:0d:56:0c:8d:e0:36:3c:ff:5a:a5:c4:
                    d5:1b:76:a3:06:c2:67:49:ae:4d:e8:53:53:88:ca:
                    f6:57:2e:84:c9:7e:12:6e:9f:f2:3e:b4:e1:4a:cc:
                    86:31:1e:e9:34:f7:17:f9:2a:66:d9:97:cd:5a:6f:
                    ab:fb:c9:42:c1:5a:a6:28:ba:76:58:90:3f:30:1c:
                    06:89:b1:e6:8a:58:57:5a:68:f3:0e:f8:40:f5:27:
                    54:ba:d0:19:3f:e3:de:00:77:31:c1:94:f8:9d:d6:
                    07:e2:54:4f:d1:4f:4f:7f:a3:99:de:57:9f:78:7a:
                    05:3f:a6:ab:aa:67:1e:db:26:e4:88:b3:46:c1:b1:
                    1a:51:e9:dd:bf:bd:b2:57:e2:55:2f:d1:a3:29:7a:
                    80:ee:46:22:59:cc:62:b5:6b:79:2a:e0:77:e8:37:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:05:94:D0:75:C7:2F:EB:3A:3B:F1:EF:E0:B7:A5:A7:20:07:59:50
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205275.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.83.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:56:af:00:75:15:ce:5b:96:ff:d9:6f:05:ac:7a:5d:58:53:
         e3:1a:e5:6b:e7:d8:fd:4c:58:28:14:a1:81:10:59:bb:3d:c4:
         91:46:41:f1:ec:1e:96:8a:fb:32:f5:5a:c9:df:08:08:69:2e:
         95:cb:72:d9:a9:5b:fb:86:78:73:6e:18:74:d1:2f:93:63:c7:
         26:db:7d:8f:27:03:44:70:2c:f9:90:06:52:d0:a6:bb:f3:ad:
         47:8d:3e:08:68:01:1d:6a:c5:55:93:98:61:08:a7:5c:7f:26:
         3a:1d:30:2f:0f:8b:53:2d:99:a6:27:12:d2:3c:d4:04:74:f8:
         00:de:97:f9:77:bd:37:50:91:39:9c:d1:29:eb:b4:13:99:38:
         f8:4b:3f:d6:97:52:23:de:d3:d3:f9:03:a5:0f:4b:e6:0b:f6:
         ff:3f:f3:0d:a6:13:38:8e:d4:ec:f8:32:14:32:42:8c:04:55:
         83:26:15:7d:d9:38:f4:f1:8b:f6:bd:0e:f5:50:88:87:26:00:
         d7:44:46:2d:48:86:69:66:54:93:6b:06:ae:e5:4b:1b:20:23:
         6f:99:00:18:77:ac:5b:28:de:17:cf:fb:e9:33:55:a3:ea:e4:
         f8:d7:6b:51:97:b2:e8:7a:d4:49:35:39:73:59:42:2c:51:4e:
         a2:02:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:42 2026 by rpki-client