Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205733.roa
File: AS205733.roa (raw, json)
Hash identifier: Z8TCW8hqY8ovzdUbLKewlTAct/Pzp8KTOqbhAwapQFo=
Subject key identifier: 7E:B7:60:D1:74:9D:BC:C8:26:6C:DF:1A:60:A8:32:CE:13:A3:F9:82
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4A571E24B93F27C81B91F5A3E7C8C934C35922E0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205733.roa
Signing time: Sat 01 Nov 2025 00:14:56 +0000
ROA not before: Sat 01 Nov 2025 00:09:56 +0000
ROA not after: Sat 31 Oct 2026 00:14:56 +0000
asID: 205733
IP address blocks: 91.124.37.0/24 maxlen: 24
92.112.71.0/24 maxlen: 24
95.134.70.0/24 maxlen: 24
95.135.228.0/24 maxlen: 24
178.92.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:57:1e:24:b9:3f:27:c8:1b:91:f5:a3:e7:c8:c9:34:c3:59:22:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 1 00:09:56 2025 GMT
Not After : Oct 31 00:14:56 2026 GMT
Subject: CN=7EB760D1749DBCC8266CDF1A60A832CE13A3F982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:30:ea:65:89:17:95:a9:d9:09:37:2c:18:
d0:b1:df:64:1e:e6:88:fe:10:2c:81:0f:6f:6e:ec:
3e:91:94:a5:ac:c3:7d:f4:f2:bd:ae:37:29:b4:ff:
6a:a5:9a:bc:d0:a7:11:ed:c7:ef:fa:d7:69:8e:69:
8b:99:e7:d9:db:58:d9:88:8e:ae:bf:c9:0b:c4:34:
ea:39:7a:1e:50:6f:55:a5:52:a2:f3:ea:c3:cf:e6:
87:ca:8b:a2:fb:1d:85:e9:85:b2:6a:37:e0:12:13:
cf:ba:7e:de:37:e4:d2:75:1e:f7:6a:a6:e2:f5:93:
1f:eb:57:80:8a:d8:a3:53:bc:ee:63:e9:fe:62:9f:
3f:3a:d6:9d:9c:9c:00:05:f8:96:f0:60:cb:92:84:
ba:0b:05:a7:86:9b:7d:75:c2:32:c8:0e:3b:ff:48:
9f:9d:e9:b0:f9:d8:f1:e3:bb:9b:2d:54:7a:f8:4e:
b7:5c:9f:25:6b:86:48:04:a5:9d:16:e0:e4:a3:9f:
6e:ee:4c:74:95:b1:e6:0d:dd:ce:1d:92:51:6b:96:
20:6e:5d:87:ce:a1:0e:e1:0b:a7:2c:30:f3:95:cc:
c1:e1:cc:91:b6:c8:47:3f:de:7a:c4:72:9b:57:57:
82:33:a4:bc:7f:35:02:d8:94:bf:62:2c:a0:94:24:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:60:D1:74:9D:BC:C8:26:6C:DF:1A:60:A8:32:CE:13:A3:F9:82
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.37.0/24
92.112.71.0/24
95.134.70.0/24
95.135.228.0/24
178.92.255.0/24
Signature Algorithm: sha256WithRSAEncryption
65:5e:44:36:da:b9:9e:51:1f:f9:90:21:9f:ea:12:6f:93:6f:
84:f9:6f:2f:9b:ff:69:a5:c6:9c:33:77:10:e1:24:ad:4a:a2:
97:97:33:b1:68:70:fe:06:16:0d:d6:d5:5a:ac:57:3d:75:99:
2f:57:73:68:c2:56:74:21:cf:fd:ad:5f:23:78:f0:3f:44:b5:
29:2a:7c:29:dd:9a:da:64:12:89:c0:69:fb:e1:5c:d4:5b:54:
a3:0e:6c:e2:f8:1a:7c:1f:cb:8f:4e:b7:e0:90:37:e3:26:11:
69:41:1d:76:0c:24:85:40:fb:3f:0c:10:01:65:6a:14:36:0b:
86:cc:60:3c:e0:58:bb:9d:48:58:5b:3a:96:65:e2:09:60:0d:
2d:46:9a:35:ff:ba:9d:37:14:2c:fa:0d:1c:cf:e6:86:6c:4b:
96:0b:25:25:6c:7f:e3:22:94:71:2f:d0:40:dc:3e:48:3f:83:
97:6c:04:f4:91:72:19:51:75:22:ad:73:f7:1b:dd:09:d4:56:
76:50:1c:c8:f2:e8:6d:76:1a:eb:b9:23:3b:48:27:d3:aa:25:
23:56:35:25:93:de:8f:4a:f6:03:ac:ed:89:30:8c:3e:bd:ca:
dd:52:95:2e:f8:b8:28:66:54:7e:f3:7d:08:42:3e:86:69:bb:
b1:fa:c9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:12:46 2025 by rpki-client