Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205960.roa
File: AS205960.roa (raw, json)
Hash identifier: siXxU7uHlUSuSWpaEPsIfjTyEWVdnrNGyco2XMdnVis=
Subject key identifier: 02:7A:BF:9B:EE:0A:BD:57:63:D1:8C:6D:DB:8F:C9:AB:A2:80:23:5F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 377DCCD1A184845D169E72DEEF2B0BFCFE9273B9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205960.roa
Signing time: Sun 06 Sep 2026 15:07:37 +0000
ROA not before: Sun 06 Sep 2026 15:02:37 +0000
ROA not after: Sun 05 Sep 2027 15:07:37 +0000
asID: 205960
IP address blocks: 141.11.60.0/24 maxlen: 24
141.11.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:7d:cc:d1:a1:84:84:5d:16:9e:72:de:ef:2b:0b:fc:fe:92:73:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 6 15:02:37 2026 GMT
Not After : Sep 5 15:07:37 2027 GMT
Subject: CN=027ABF9BEE0ABD5763D18C6DDB8FC9ABA280235F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:cc:ba:e4:9a:4b:07:c5:94:d5:cd:14:84:
a0:3f:bd:cb:f6:d6:e6:90:f6:70:96:51:39:16:7f:
18:4d:46:00:c0:9f:c4:0b:d6:8f:88:1d:9a:9c:33:
aa:c5:a5:92:19:37:10:19:10:a2:1b:68:a5:18:ad:
da:97:09:5f:c9:64:cb:b7:20:2f:59:dd:f1:d9:39:
3e:37:e9:a2:c2:7a:94:9a:56:80:61:88:a7:6e:0e:
4b:6d:da:2d:86:41:16:fd:f1:c6:a6:ff:1a:c7:13:
cc:de:fc:44:81:0d:12:9e:d0:f6:45:4c:c9:b6:15:
1f:84:c7:49:99:a8:bb:44:96:bd:82:9f:5a:6c:f4:
01:ff:1c:25:0f:ae:cf:16:a5:5f:3d:db:38:4d:49:
95:c0:df:d5:63:a5:18:ac:4a:02:0d:36:47:eb:59:
0f:18:f2:c6:64:ed:6e:ec:5b:92:5e:c8:e6:2b:92:
21:dc:b0:02:31:2d:91:c6:98:f0:d7:80:d7:8f:0d:
45:e6:88:1c:98:55:50:8d:8b:8e:64:35:b1:c4:45:
83:47:e4:8f:bc:9d:84:3f:86:c8:db:da:54:7d:a7:
37:75:94:ac:33:50:b0:5c:f5:03:f1:fc:c4:76:35:
c1:00:02:c4:fd:aa:bf:ec:4a:da:6d:ce:a1:df:be:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7A:BF:9B:EE:0A:BD:57:63:D1:8C:6D:DB:8F:C9:AB:A2:80:23:5F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.60.0/24
141.11.244.0/24
Signature Algorithm: sha256WithRSAEncryption
02:18:a6:84:81:81:2d:46:d3:6b:db:65:cf:71:69:d0:8a:9a:
ce:e3:85:f7:fa:a3:75:00:e3:99:38:a7:b9:07:0b:7e:89:5b:
09:0d:17:19:f9:91:ac:5c:69:aa:47:ac:5f:42:d0:5b:57:6f:
3b:32:85:8a:86:3f:92:30:d4:e6:57:5c:2b:ae:d5:ce:56:39:
8c:f2:ea:23:cb:b8:40:a9:ca:62:a7:82:a7:2a:0d:b5:4e:d4:
45:47:33:c1:69:5b:7a:fa:ec:f7:ed:04:c4:36:db:1d:b8:aa:
b4:0b:33:db:e0:59:8f:69:40:34:63:77:87:6e:16:53:b9:aa:
c4:a3:7f:ce:1d:11:19:c2:6a:e4:6a:08:59:7c:8f:1d:c4:e8:
be:58:0d:8f:32:2e:90:b4:90:af:7b:20:4a:61:a3:c3:a2:1a:
93:a1:a8:f1:4a:a9:75:53:86:7a:68:8b:ef:27:ae:78:00:17:
ad:05:c8:c2:32:5e:b3:41:72:79:92:ca:bf:80:cf:6a:47:67:
97:02:9c:20:18:32:dd:95:d9:8b:31:12:55:09:21:fe:29:36:
f8:86:db:9d:87:31:7a:b0:16:88:43:ec:63:6d:e3:34:84:02:
05:92:eb:17:f9:b8:44:9a:6f:71:be:fc:7b:ca:aa:51:05:a5:
40:89:22:52
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUN33M0aGEhF0WnnLe7ysL/P6Sc7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA5MDYxNTAyMzdaFw0yNzA5MDUxNTA3MzdaMDMxMTAvBgNV
BAMTKDAyN0FCRjlCRUUwQUJENTc2M0QxOEM2RERCOEZDOUFCQTI4MDIzNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEE8y65JpLB8WU1c0UhKA/vcv2
1uaQ9nCWUTkWfxhNRgDAn8QL1o+IHZqcM6rFpZIZNxAZEKIbaKUYrdqXCV/JZMu3
IC9Z3fHZOT436aLCepSaVoBhiKduDktt2i2GQRb98cam/xrHE8ze/ESBDRKe0PZF
TMm2FR+Ex0mZqLtElr2Cn1ps9AH/HCUPrs8WpV892zhNSZXA39VjpRisSgINNkfr
WQ8Y8sZk7W7sW5JeyOYrkiHcsAIxLZHGmPDXgNePDUXmiByYVVCNi45kNbHERYNH
5I+8nYQ/hsjb2lR9pzd1lKwzULBc9QPx/MR2NcEAAsT9qr/sStptzqHfvqMZAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUAnq/m+4KvVdj0Yxt24/Jq6KAI18wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA1OTYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjQs8
AwQAjQv0MA0GCSqGSIb3DQEBCwUAA4IBAQACGKaEgYEtRtNr22XPcWnQiprO44X3
+qN1AOOZOKe5Bwt+iVsJDRcZ+ZGsXGmqR6xfQtBbV287MoWKhj+SMNTmV1wrrtXO
VjmM8uojy7hAqcpip4KnKg21TtRFRzPBaVt6+uz37QTENtsduKq0CzPb4FmPaUA0
Y3eHbhZTuarEo3/OHREZwmrkaghZfI8dxOi+WA2PMi6QtJCveyBKYaPDohqToajx
Sql1U4Z6aIvvJ654ABetBcjCMl6zQXJ5ksq/gM9qR2eXApwgGDLdldmLMRJVCSH+
KTb4htudhzF6sBaIQ+xjbeM0hAIFkusX+bhEmm9xvvx7yqpRBaVAiSJS
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:44:52 2026 by rpki-client