Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205305.roa
File: AS205305.roa (raw, json)
Hash identifier: rCIRMRH4DSbBgtBlu05GBjqLWuOZfB/AvD5Kc4VJ7WQ=
Subject key identifier: A4:27:34:D5:5F:52:DD:DD:35:CB:F4:A0:3E:09:62:55:01:32:C9:CD
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5EB5A6729BF1E5E0BFB5F69190724049AF456384
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205305.roa
Signing time: Fri 27 Feb 2026 19:09:49 +0000
ROA not before: Fri 27 Feb 2026 19:04:49 +0000
ROA not after: Fri 26 Feb 2027 19:09:49 +0000
asID: 205305
IP address blocks: 2a14:7584:a001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b5:a6:72:9b:f1:e5:e0:bf:b5:f6:91:90:72:40:49:af:45:63:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 27 19:04:49 2026 GMT
Not After : Feb 26 19:09:49 2027 GMT
Subject: CN=A42734D55F52DDDD35CBF4A03E0962550132C9CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:b7:da:66:69:b3:b4:41:e2:b4:9b:a3:16:
31:70:56:6a:98:99:9b:04:84:22:04:a7:fb:c5:92:
1c:12:87:9f:27:4a:99:ef:43:ec:50:3b:51:29:f0:
e6:ec:75:3a:8c:01:22:c8:d5:02:d1:34:6f:eb:19:
43:3e:b4:09:a0:ed:61:0a:49:9e:2b:bf:de:a9:ea:
76:1a:a1:ce:aa:58:be:5a:87:5f:34:41:ae:d3:12:
f4:9a:f4:0e:cb:1c:14:1c:25:32:2e:7e:94:88:23:
23:ef:07:c9:5a:3c:ad:cc:6d:56:d6:fc:8e:da:25:
07:a9:ad:04:2f:05:5f:94:3d:7f:df:0c:1c:5a:38:
c4:4e:d9:7e:8c:9a:be:2e:aa:35:b2:25:5a:9d:39:
82:c2:05:ea:06:25:d4:45:b2:26:73:06:f1:c4:67:
6a:70:27:a5:36:63:dc:d2:b7:b4:0c:ba:5b:f7:1f:
d7:a2:8b:0f:f6:69:28:0d:31:b6:bc:50:a6:69:a8:
83:b2:6b:b8:8e:ad:4f:c4:fc:9b:0d:e1:c6:22:bf:
9d:42:0e:fd:48:9c:06:25:63:52:40:d5:5e:8b:30:
3f:dd:51:67:e7:bd:a9:5d:8b:ee:23:8e:a3:51:d1:
5d:3b:a1:f3:3b:56:4a:33:17:56:7b:b5:b5:3d:1d:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:27:34:D5:5F:52:DD:DD:35:CB:F4:A0:3E:09:62:55:01:32:C9:CD
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:a001::/48
Signature Algorithm: sha256WithRSAEncryption
7c:db:27:92:77:63:89:08:b7:e5:20:b3:28:c3:5d:bb:58:9e:
cb:be:ce:90:4c:e5:ca:0f:f7:5e:dd:f0:9f:50:95:66:ee:30:
d3:1b:09:a5:40:04:e9:e4:51:de:bf:54:19:8d:7a:d1:07:7c:
1a:e4:78:15:59:89:13:86:da:8a:e3:2a:e7:56:f8:7e:21:b6:
0e:29:9b:38:ec:1c:27:fd:b7:c2:c3:f2:00:13:0d:f0:b5:7f:
87:ce:ad:c6:ce:60:51:5e:d2:d9:64:5d:77:48:3c:ba:54:65:
9a:ce:ba:c0:9c:9a:19:a6:df:ef:27:aa:bc:b2:4d:3c:a8:ba:
1f:17:f8:fc:6d:66:fe:0d:61:f9:58:4a:51:df:54:0c:a8:1d:
32:d5:13:f9:2d:77:79:a0:30:d2:27:71:e5:16:66:7b:b3:2c:
5a:21:f3:70:e3:e1:9a:7b:63:df:5b:31:e1:a4:29:51:cf:3a:
80:e5:f9:38:6c:b2:2c:ef:bd:8e:69:87:b8:9d:4d:4a:71:cb:
49:30:67:f3:63:2d:d0:38:d2:60:ff:30:b7:00:de:89:85:22:
33:85:28:dc:58:64:08:0f:b4:91:a5:ac:d7:d9:3d:d9:df:0d:
db:95:e1:0f:68:a0:bb:b4:f2:c4:a3:b4:4a:ab:86:5d:14:b9:
66:ff:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:20 2026 by rpki-client