Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205772.roa
File: AS205772.roa (raw, json)
Hash identifier: Z9GDTM/FqA/xoYIlBGxLSHcRbgGR+qHDpuebfi4D4Xs=
Subject key identifier: 29:06:4C:54:B3:4E:17:6E:84:A0:B2:C8:40:B2:7A:71:46:20:84:65
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1237E79A82C3F3AF70B97D14FC26D72F46CAC48E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205772.roa
Signing time: Fri 27 Mar 2026 17:34:59 +0000
ROA not before: Fri 27 Mar 2026 17:29:59 +0000
ROA not after: Fri 26 Mar 2027 17:34:59 +0000
asID: 205772
IP address blocks: 82.22.49.0/24 maxlen: 24
178.83.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:37:e7:9a:82:c3:f3:af:70:b9:7d:14:fc:26:d7:2f:46:ca:c4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 27 17:29:59 2026 GMT
Not After : Mar 26 17:34:59 2027 GMT
Subject: CN=29064C54B34E176E84A0B2C840B27A7146208465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:dd:d6:a3:f0:ee:71:90:39:69:89:ea:29:
d9:b8:e6:72:89:24:38:cb:f9:c6:a7:48:6b:01:fd:
42:c4:93:d8:57:a1:36:57:a3:69:97:9d:5b:e5:8f:
49:49:1d:1b:0e:b0:5a:35:8f:69:d2:10:cc:b9:f4:
e8:63:4f:46:60:45:3d:41:ad:03:8b:ab:02:a5:95:
4a:af:e6:39:3f:83:60:96:b5:19:ef:8d:5c:0d:1d:
22:fc:d9:16:56:4b:62:fb:b5:7e:98:8a:00:e1:4a:
c1:0f:b6:05:13:bd:8d:fb:ec:e7:41:c5:3c:b3:fc:
69:3f:3a:a6:e2:58:b6:06:5c:94:b1:4f:43:f6:dc:
3e:08:b8:4b:5b:9d:6c:a4:22:e4:61:83:3b:1e:d0:
b8:4e:9a:10:fe:39:d5:9a:c1:d3:f2:b3:ca:16:ee:
83:fb:af:2d:dc:c7:5b:7b:92:ce:7c:a7:ed:6c:76:
b5:95:c5:b9:32:d8:0d:a7:35:80:e8:1c:4b:2f:92:
3d:9c:d4:d6:04:c5:c9:fb:64:73:44:ac:05:0e:7a:
5b:cb:aa:eb:25:7e:9f:b2:0a:47:ab:b3:0a:14:bc:
49:8e:45:e9:0c:66:63:3f:ab:3f:ee:e0:4e:62:a0:
32:5f:7b:0d:36:49:a6:cc:29:67:1e:44:53:3a:cc:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:06:4C:54:B3:4E:17:6E:84:A0:B2:C8:40:B2:7A:71:46:20:84:65
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.49.0/24
178.83.110.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:11:b6:81:ee:66:b7:bc:4d:b4:20:b0:6e:9e:cc:3e:bd:b8:
fb:ff:bc:da:e8:4b:50:c6:8c:47:82:be:fd:f8:dd:56:7f:f1:
fd:cd:e6:b7:8e:97:cc:f4:3e:5c:ac:8f:84:80:8e:1e:f4:41:
c3:ae:80:e9:4a:19:d7:f0:39:1c:9d:c6:23:1b:cd:17:ee:92:
48:26:7a:54:79:30:a2:83:ca:51:e6:04:25:ac:e9:f9:31:1c:
66:20:60:41:35:4a:da:05:fa:c0:6f:e1:61:fe:08:a5:5f:ea:
00:c7:2c:b6:4f:99:62:f5:cf:5c:3c:a0:2e:80:2c:57:7f:30:
28:25:1e:91:19:65:10:10:8a:25:02:ff:59:1e:b3:64:fd:5a:
18:ff:5d:be:62:f3:12:70:8b:38:d4:37:d7:1d:ec:49:f0:51:
31:54:47:2f:55:aa:7f:88:d1:a5:09:6e:c8:68:7f:a5:b8:0a:
a8:17:9e:8b:e6:f6:30:6b:b7:ba:14:48:60:e0:8c:9d:97:8a:
e3:0b:e9:f4:44:0e:fc:5a:cc:84:a6:40:78:19:bd:5b:96:1e:
bd:98:d4:e2:16:a8:b1:ba:8b:11:9e:2e:5c:39:8b:a6:88:90:
cf:50:c1:fb:a7:a1:80:01:42:78:ef:de:69:2e:39:6a:bc:c7:
f6:01:6e:f2
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUEjfnmoLD869wuX0U/CbXL0bKxI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMjcxNzI5NTlaFw0yNzAzMjYxNzM0NTlaMDMxMTAvBgNV
BAMTKDI5MDY0QzU0QjM0RTE3NkU4NEEwQjJDODQwQjI3QTcxNDYyMDg0NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0I93Wo/DucZA5aYnqKdm45nKJ
JDjL+canSGsB/ULEk9hXoTZXo2mXnVvlj0lJHRsOsFo1j2nSEMy59OhjT0ZgRT1B
rQOLqwKllUqv5jk/g2CWtRnvjVwNHSL82RZWS2L7tX6YigDhSsEPtgUTvY377OdB
xTyz/Gk/OqbiWLYGXJSxT0P23D4IuEtbnWykIuRhgzse0LhOmhD+OdWawdPys8oW
7oP7ry3cx1t7ks58p+1sdrWVxbky2A2nNYDoHEsvkj2c1NYExcn7ZHNErAUOelvL
quslfp+yCkerswoUvEmORekMZmM/qz/u4E5ioDJfew02SabMKWceRFM6zCmhAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUKQZMVLNOF26EoLLIQLJ6cUYghGUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1NzcyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhYx
AwQAslNuMA0GCSqGSIb3DQEBCwUAA4IBAQBqEbaB7ma3vE20ILBunsw+vbj7/7za
6EtQxoxHgr79+N1Wf/H9zea3jpfM9D5crI+EgI4e9EHDroDpShnX8DkcncYjG80X
7pJIJnpUeTCig8pR5gQlrOn5MRxmIGBBNUraBfrAb+Fh/gilX+oAxyy2T5li9c9c
PKAugCxXfzAoJR6RGWUQEIolAv9ZHrNk/VoY/12+YvMScIs41DfXHexJ8FExVEcv
Vap/iNGlCW7IaH+luAqoF56L5vYwa7e6FEhg4Iydl4rjC+n0RA78WsyEpkB4Gb1b
lh69mNTiFqixuosRni5cOYumiJDPUMH7p6GAAUJ4795pLjlqvMf2AW7y
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:08 2026 by rpki-client