Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205684.roa
File: AS205684.roa (raw, json)
Hash identifier: uWfF5+voKuCreKpUYelQdqm4yMGWGWUcIVFENiO+Y+0=
Subject key identifier: CA:19:51:24:1D:27:77:66:E5:59:AB:D6:1A:FB:1C:31:8D:EE:8B:64
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 63382EE26D3436F228DD9598AA6F24DC00DBCB68
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205684.roa
Signing time: Tue 01 Sep 2026 16:49:31 +0000
ROA not before: Tue 01 Sep 2026 16:44:31 +0000
ROA not after: Tue 31 Aug 2027 16:49:31 +0000
asID: 205684
IP address blocks: 141.11.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:38:2e:e2:6d:34:36:f2:28:dd:95:98:aa:6f:24:dc:00:db:cb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 1 16:44:31 2026 GMT
Not After : Aug 31 16:49:31 2027 GMT
Subject: CN=CA1951241D277766E559ABD61AFB1C318DEE8B64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:c0:f1:90:cb:20:b2:dc:55:7b:11:95:f5:
0d:11:f8:c7:55:d1:fd:74:55:48:1b:47:dd:14:6d:
78:34:ee:36:dd:9c:26:f6:5c:6e:c0:27:0b:06:aa:
20:fe:d4:c2:eb:d3:ee:2a:88:3c:35:e8:f7:42:de:
e8:5e:f0:5f:b2:93:45:70:7f:64:79:16:de:e0:f9:
9e:19:6e:c5:8e:02:22:e0:31:dc:d2:4e:87:aa:36:
e7:e3:66:1d:93:95:30:96:7e:88:75:ef:4a:4d:86:
c7:75:72:06:0b:28:4e:ed:42:b6:74:49:35:c6:f8:
b3:4e:71:73:ef:05:86:e1:33:78:a6:95:92:87:57:
d3:48:59:aa:eb:16:37:41:93:60:e8:42:32:43:15:
b0:9c:2d:ed:53:bd:27:03:48:1a:29:43:5b:7c:33:
02:74:f3:21:51:bd:e0:29:f3:0c:4e:db:71:84:d0:
75:b3:20:03:8a:e9:4a:83:b7:f2:87:21:ba:9c:c4:
77:d0:3c:73:d3:cf:6b:96:fe:62:7f:03:4f:0b:2b:
55:07:95:b6:2b:02:ed:3c:51:73:96:95:c3:f8:ad:
ba:c7:d5:2b:3a:b5:43:5e:a1:5e:9f:05:bf:d5:b1:
de:c8:b7:b3:b8:4f:35:65:72:e1:c8:4a:d2:b3:14:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:51:24:1D:27:77:66:E5:59:AB:D6:1A:FB:1C:31:8D:EE:8B:64
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205684.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.110.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c6:00:77:48:9e:e9:de:4b:d8:5a:86:c1:ba:0c:65:2e:bd:
b1:03:73:f6:c6:23:79:9b:ce:b8:b1:a3:9d:ac:c0:50:d3:30:
98:83:dd:7f:2b:fe:d7:0e:21:4b:fb:c1:dc:cc:80:13:33:a2:
4c:f8:2d:1e:10:62:02:01:57:01:4d:65:3d:4f:ab:70:12:9a:
c8:3c:d5:e3:fa:4a:ea:db:f1:16:1c:71:4e:84:f1:48:73:61:
22:c3:7f:66:a3:c2:19:98:20:6e:8b:50:0b:1e:24:54:f0:9a:
d5:b5:6a:3d:ed:81:45:2d:c1:2f:dc:38:26:e7:dd:9a:40:66:
c1:c8:26:f5:16:0b:59:9e:39:09:f6:9f:93:22:ca:ec:c8:ae:
ee:e0:9d:17:3f:97:3e:dc:da:82:ab:7a:e6:69:dc:e0:2d:44:
46:a0:b4:1c:84:c7:4b:cc:77:01:35:73:6a:11:d7:d5:7a:7a:
e2:b2:41:d8:3a:42:ab:46:97:5a:d6:eb:92:4d:dc:53:c1:01:
00:4c:a4:42:9f:4e:17:a5:31:52:0d:0e:cf:4d:e8:93:67:ec:
ee:b8:57:7d:df:03:c0:85:d3:ec:85:69:01:b0:ba:01:9b:d1:
fb:25:3e:63:7b:1c:af:e1:e9:e8:fb:dd:61:b2:4e:42:fc:a6:
3f:60:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:11 2026 by rpki-client