Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: dxCNEvWQx5bpIo+WFAX7lFyBEmWS9jNPdi6Qji2yCoM=
Subject key identifier: 30:EB:E2:7F:6E:63:DB:B3:45:68:CF:D5:7A:9A:69:6D:75:82:B9:26
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2B6569D19EACA860742D2EF0476AD59566D496C0
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205489.roa
Signing time: Wed 11 Nov 2026 23:53:37 +0000
ROA not before: Wed 11 Nov 2026 23:48:37 +0000
ROA not after: Wed 10 Nov 2027 23:53:37 +0000
asID: 205489
IP address blocks: 141.11.37.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:65:69:d1:9e:ac:a8:60:74:2d:2e:f0:47:6a:d5:95:66:d4:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 11 23:48:37 2026 GMT
Not After : Nov 10 23:53:37 2027 GMT
Subject: CN=30EBE27F6E63DBB34568CFD57A9A696D7582B926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:57:9d:72:8b:1a:49:9e:b7:9b:99:87:e2:
98:61:a5:2f:11:21:e1:fe:ec:da:ee:cd:ea:a4:d1:
47:99:a0:e9:82:d8:48:45:2e:68:ae:1a:21:99:fe:
00:0f:13:55:79:4b:df:a6:39:06:b1:dd:8b:e7:64:
3d:ac:ef:2c:66:08:66:0e:5b:be:bc:5b:0a:34:d4:
4a:b7:f0:b4:6b:e0:bf:24:22:2c:35:99:f9:47:d7:
10:4a:9f:46:a1:60:7f:f2:20:17:16:ab:d0:fd:38:
5f:d7:08:9a:75:5e:85:eb:92:01:3e:96:4c:56:73:
3f:72:fe:00:a7:87:72:be:87:a2:27:1e:b8:a1:5a:
54:54:e4:31:09:91:0f:8f:60:de:97:fe:74:42:45:
2a:b2:50:3c:c8:6e:bb:81:c1:cd:d5:f4:ba:c4:d9:
15:c2:bb:d9:6d:85:ca:9d:54:4f:01:da:9d:2c:7f:
b0:c1:4c:58:63:83:33:bf:18:da:0b:17:9a:f2:c4:
b0:ef:c7:ac:c9:25:3a:48:0f:4d:e1:6a:b5:93:c6:
6f:61:cf:2d:b3:42:42:f2:e8:69:7d:c0:d6:56:1c:
c5:53:cd:5a:d8:72:bf:9d:31:ec:70:f7:2f:ea:e8:
13:75:11:dc:e4:d6:75:98:3b:19:79:2a:08:27:40:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EB:E2:7F:6E:63:DB:B3:45:68:CF:D5:7A:9A:69:6D:75:82:B9:26
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.37.0/24
141.11.47.0/24
Signature Algorithm: sha256WithRSAEncryption
49:51:46:9a:8f:b1:2a:73:d6:7d:0c:69:ff:70:b7:8d:ec:c1:
f8:1c:e7:b5:3c:7c:b2:30:7a:60:2d:46:ab:fc:73:43:33:0c:
38:c1:07:cd:d7:bc:4d:c5:25:ed:6b:2d:e2:96:11:21:b8:0d:
6c:4c:34:b0:8c:fd:83:38:eb:07:81:8c:74:c1:bc:2b:59:e5:
36:07:47:54:a7:a5:16:88:0d:38:9e:51:cb:18:be:12:07:98:
9c:c8:1a:51:60:40:64:7e:cf:f9:54:6b:38:8b:4c:9d:57:d3:
4e:66:91:87:97:c2:b5:49:d2:44:db:e8:fd:94:cf:39:6f:ea:
0a:38:bd:19:5f:e8:82:24:ab:d2:2d:df:ef:4e:e7:df:24:7d:
33:32:5e:82:cf:6d:5a:ec:ef:48:3b:69:c0:a0:a2:a9:aa:c3:
60:8c:9b:1d:46:84:27:d7:61:13:37:8c:f7:d8:26:0b:d1:5a:
0c:04:b0:a9:1a:b8:64:e0:ee:b6:31:86:93:4d:a4:f8:ed:4d:
0c:2f:d5:be:95:2d:df:ba:84:d0:28:98:e8:be:7f:e0:da:ac:
f5:3d:ce:9e:7a:94:2b:d9:35:d9:bc:fd:18:d7:3c:64:b1:d9:
e3:9b:ba:c8:79:0c:8a:76:db:50:dc:d1:e2:a6:06:91:ca:0d:
b6:44:71:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:14 2026 by rpki-client