Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205960.roa
File: AS205960.roa (raw, json)
Hash identifier: byt0J/ddIcTBPreMlGzU4hGyOiCV6qZKF1t1Wu6bBDk=
Subject key identifier: 98:38:2D:BE:F8:58:C5:88:B2:2F:8D:7D:82:D4:E5:6A:54:1E:6B:D5
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5C7210063BEBC733E4F9C32001CAE000526D8577
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205960.roa
Signing time: Sun 06 Sep 2026 15:07:37 +0000
ROA not before: Sun 06 Sep 2026 15:02:37 +0000
ROA not after: Sun 05 Sep 2027 15:07:37 +0000
asID: 205960
IP address blocks: 143.20.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:72:10:06:3b:eb:c7:33:e4:f9:c3:20:01:ca:e0:00:52:6d:85:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 6 15:02:37 2026 GMT
Not After : Sep 5 15:07:37 2027 GMT
Subject: CN=98382DBEF858C588B22F8D7D82D4E56A541E6BD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:a1:e5:66:65:ad:f9:c2:c1:c7:60:7d:11:
d6:0c:36:29:b8:0a:9a:32:ea:61:c4:0e:79:ae:5a:
73:7a:7b:3c:1a:48:3c:d0:69:38:51:d4:c9:e2:7e:
41:87:6e:3e:06:8d:4c:0e:b2:f0:2e:b0:24:a7:60:
55:a9:27:71:fb:36:54:07:3d:42:58:9f:8e:de:8e:
1b:79:9d:02:11:ab:39:99:9c:c8:a5:a9:30:75:4d:
22:ff:71:24:f7:bd:ad:10:ae:64:16:68:24:3b:55:
3e:28:94:9b:5f:86:8a:fd:94:a8:0a:74:10:a2:ab:
bd:e3:1a:29:6f:22:bd:e9:bd:fc:c9:fe:2e:4c:44:
37:7a:7b:64:2c:35:58:5b:3c:13:70:94:17:3b:9d:
04:66:7f:c0:bf:0d:c9:45:92:f0:d3:a4:2e:d5:58:
08:e9:fc:5c:c5:db:93:01:c3:35:09:db:ca:28:43:
7c:ef:bd:07:6b:bd:17:22:ab:b2:d8:d9:63:c5:94:
f4:a7:6a:d2:5b:b7:b2:f8:58:53:4f:a3:c7:90:c3:
c5:1a:5d:96:fa:eb:3e:58:e8:4a:65:5f:a7:fe:13:
0f:23:1e:d8:92:05:38:a6:32:7b:7e:64:fd:a4:45:
14:fd:4f:5f:a0:3d:d5:8b:f6:b1:6c:b7:12:91:bd:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:38:2D:BE:F8:58:C5:88:B2:2F:8D:7D:82:D4:E5:6A:54:1E:6B:D5
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.57.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:8c:24:e8:f6:86:59:c3:76:9c:96:d2:22:b7:43:09:89:3c:
29:f9:52:14:08:44:be:6e:cb:31:50:a6:1e:3b:7a:62:aa:7c:
79:9e:a9:9c:ce:df:0c:d2:c4:bd:f7:2c:cf:13:1f:41:0b:8c:
80:53:e8:d7:dd:a4:0f:fa:55:14:99:08:0a:ed:41:8d:13:51:
fb:d4:d3:76:3f:4d:c0:61:c9:42:0b:f5:7b:da:a7:e0:d8:21:
f9:17:48:e9:b3:23:2e:6d:bd:2d:a1:aa:41:eb:fa:61:df:1e:
81:28:a4:0e:cb:e4:f7:29:84:ca:7e:53:21:ed:1e:4b:23:51:
3d:89:2f:c5:dd:5e:70:68:12:43:11:8e:1f:82:3f:06:9c:96:
7e:01:96:55:02:92:e9:53:8e:e5:a4:0b:81:40:4b:70:7c:e8:
6d:83:4e:a1:fc:3c:3d:33:68:4a:b4:98:22:86:91:fc:d6:8c:
0b:95:f3:32:a6:f6:b6:e2:ff:ef:2f:27:84:7c:1e:e4:99:4f:
a5:47:48:2b:0b:d0:6e:14:d7:b8:a3:8b:a7:25:e3:91:16:5c:
31:a3:df:c3:9c:97:89:75:0c:cd:e6:6f:ee:1f:e0:be:ec:77:
ad:18:1a:b4:03:7b:79:c8:a5:1b:71:05:c1:2a:62:6f:54:e2:
12:98:cf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:22:03 2026 by rpki-client