Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: zeo2sYYbnUlvNs4xGVcu0YF84ai+2ZFYCiELBBi8qAw=
Subject key identifier: 9F:D8:79:FE:DB:60:D5:07:83:C9:D4:90:C4:07:E0:9E:CE:A7:9C:44
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 104F5D3AB7A491B3939651C1CE8C014375A5D58E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS205489.roa
Signing time: Thu 12 Nov 2026 18:49:14 +0000
ROA not before: Thu 12 Nov 2026 18:44:14 +0000
ROA not after: Thu 11 Nov 2027 18:49:14 +0000
asID: 205489
IP address blocks: 51.146.5.0/24 maxlen: 24
51.194.156.0/24 maxlen: 24
78.105.160.0/24 maxlen: 24
94.194.120.0/21 maxlen: 24
188.220.106.0/24 maxlen: 24
188.221.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:4f:5d:3a:b7:a4:91:b3:93:96:51:c1:ce:8c:01:43:75:a5:d5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 12 18:44:14 2026 GMT
Not After : Nov 11 18:49:14 2027 GMT
Subject: CN=9FD879FEDB60D50783C9D490C407E09ECEA79C44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:90:09:6b:ea:29:1c:ed:73:b0:ad:6f:03:
1c:cc:0b:77:47:4d:cc:6c:c8:de:65:d8:5f:7f:94:
d1:3c:80:8d:35:0d:8b:8b:83:6e:f5:bf:47:40:fd:
2d:92:56:89:ae:ff:fb:5a:4a:c7:e1:60:57:12:73:
18:5d:81:fc:b2:dd:93:8f:c4:d3:a7:64:a7:6e:9e:
93:31:2d:57:bb:78:9c:01:8e:17:4c:a2:da:c1:e1:
17:1f:ff:15:d7:0d:c0:ed:b4:e9:67:84:53:33:76:
e5:1f:62:90:50:8d:d4:ef:b7:cf:25:6f:ac:f9:3f:
e0:c3:c5:4f:ad:82:79:81:8c:d4:2a:3f:91:9a:c9:
9d:9e:6f:02:c3:a5:77:08:8c:89:41:7b:c0:8f:3a:
0d:b6:87:a3:4b:8f:1b:85:bf:e3:c0:ed:1c:2d:b9:
72:10:12:21:b9:be:ba:db:f3:ca:be:ef:8d:6e:3f:
ed:7f:64:e7:19:d1:04:50:2c:77:0d:10:9b:c6:11:
ae:05:24:ec:ef:9d:65:cd:7b:57:d8:25:af:83:fc:
ad:11:d9:33:d3:0d:98:14:fb:7e:7f:e9:75:3a:e5:
70:bd:3b:04:97:6f:d9:5a:89:bf:f2:a3:67:b9:f7:
b3:4f:20:c1:df:f8:23:b2:96:50:d6:14:46:19:11:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D8:79:FE:DB:60:D5:07:83:C9:D4:90:C4:07:E0:9E:CE:A7:9C:44
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.5.0/24
51.194.156.0/24
78.105.160.0/24
94.194.120.0/21
188.220.106.0/24
188.221.118.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a9:d5:3d:d5:c6:eb:e7:f9:32:c8:a2:06:e9:08:e2:75:45:
80:cd:98:e4:da:16:31:04:5e:4a:af:e8:e1:50:12:f5:ae:f1:
4c:1c:1d:14:55:ba:4d:a5:89:6d:c4:f7:a4:36:85:11:5f:ba:
ef:7f:ae:10:df:43:32:ad:e3:dc:96:64:5a:66:9a:eb:a3:12:
d4:bc:0e:ff:9e:78:2f:43:38:97:52:31:cb:87:25:69:5f:0b:
18:1f:8e:dd:45:ea:5b:73:d4:e4:32:20:87:ce:2c:b8:db:3e:
78:9d:c5:eb:60:a6:2a:87:71:d1:48:31:2d:60:08:50:57:13:
3a:4e:2c:a0:c8:a9:c6:72:72:35:58:62:34:33:8f:a3:5b:28:
55:f2:cd:9a:f5:92:3f:f6:f1:71:66:ae:f3:08:3f:6d:1c:19:
96:49:63:15:d4:d4:f3:1b:6a:02:02:66:ea:3b:82:86:49:60:
d4:4f:1e:fc:97:eb:e6:0f:c3:f9:35:0e:21:1d:13:29:23:a0:
1f:12:85:8f:d9:46:d4:c9:b5:ac:4d:92:e9:67:ed:af:79:9d:
93:7a:7a:11:5b:80:00:5b:92:ff:ea:11:37:21:97:07:99:2b:
b2:71:64:58:d9:f8:8b:ad:f1:f2:9b:d7:cd:2d:0a:ff:a0:5d:
52:31:13:ea
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUEE9dOrekkbOTllHBzowBQ3Wl1Y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjExMTIxODQ0MTRaFw0yNzExMTExODQ5MTRaMDMxMTAvBgNV
BAMTKDlGRDg3OUZFREI2MEQ1MDc4M0M5RDQ5MEM0MDdFMDlFQ0VBNzlDNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcIpAJa+opHO1zsK1vAxzMC3dH
TcxsyN5l2F9/lNE8gI01DYuLg271v0dA/S2SVomu//taSsfhYFcScxhdgfyy3ZOP
xNOnZKdunpMxLVe7eJwBjhdMotrB4Rcf/xXXDcDttOlnhFMzduUfYpBQjdTvt88l
b6z5P+DDxU+tgnmBjNQqP5GayZ2ebwLDpXcIjIlBe8CPOg22h6NLjxuFv+PA7Rwt
uXIQEiG5vrrb88q+741uP+1/ZOcZ0QRQLHcNEJvGEa4FJOzvnWXNe1fYJa+D/K0R
2TPTDZgU+35/6XU65XC9OwSXb9laib/yo2e597NPIMHf+COyllDWFEYZETI1AgMB
AAGjggIoMIICJDAdBgNVHQ4EFgQUn9h5/ttg1QeDydSQxAfgns6nnEQwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjA1NDg5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAM5IF
AwQAM8KcAwQATmmgAwQDXsJ4AwQAvNxqAwQAvN12MA0GCSqGSIb3DQEBCwUAA4IB
AQBCqdU91cbr5/kyyKIG6QjidUWAzZjk2hYxBF5Kr+jhUBL1rvFMHB0UVbpNpYlt
xPekNoURX7rvf64Q30MyrePclmRaZprroxLUvA7/nngvQziXUjHLhyVpXwsYH47d
Repbc9TkMiCHziy42z54ncXrYKYqh3HRSDEtYAhQVxM6TiygyKnGcnI1WGI0M4+j
WyhV8s2a9ZI/9vFxZq7zCD9tHBmWSWMV1NTzG2oCAmbqO4KGSWDUTx78l+vmD8P5
NQ4hHRMpI6AfEoWP2UbUybWsTZLpZ+2veZ2TenoRW4AAW5L/6hE3IZcHmSuycWRY
2fiLrfHym9fNLQr/oF1SMRPq
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:19 2026 by rpki-client