Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa
File: AS205886.roa (raw, json)
Hash identifier: w80IkzWMjIgXo2GqwNyu+p3xUP0kYteWUoGn5WHvDCo=
Subject key identifier: 21:FE:06:6C:85:31:D5:F2:DB:90:F0:C2:C1:A2:A1:CB:61:29:B1:8C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 37BE21521AC46DAD81F3DFB947B01812F942DCDB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa
Signing time: Wed 05 Nov 2025 07:45:19 +0000
ROA not before: Wed 05 Nov 2025 07:40:19 +0000
ROA not after: Wed 04 Nov 2026 07:45:19 +0000
asID: 205886
IP address blocks: 46.202.40.0/24 maxlen: 24
46.203.35.0/24 maxlen: 24
46.203.55.0/24 maxlen: 24
46.203.57.0/24 maxlen: 24
46.203.61.0/24 maxlen: 24
91.124.237.0/24 maxlen: 24
92.113.45.0/24 maxlen: 24
95.134.43.0/24 maxlen: 24
95.134.51.0/24 maxlen: 24
95.134.96.0/24 maxlen: 24
95.134.135.0/24 maxlen: 24
95.134.228.0/24 maxlen: 24
95.135.7.0/24 maxlen: 24
95.135.30.0/24 maxlen: 24
95.135.50.0/24 maxlen: 24
95.135.126.0/24 maxlen: 24
178.92.123.0/24 maxlen: 24
178.92.142.0/24 maxlen: 24
178.92.165.0/24 maxlen: 24
178.92.178.0/24 maxlen: 24
178.92.187.0/24 maxlen: 24
178.92.191.0/24 maxlen: 24
178.92.192.0/24 maxlen: 24
178.92.194.0/24 maxlen: 24
178.92.234.0/24 maxlen: 24
178.93.90.0/24 maxlen: 24
178.93.139.0/24 maxlen: 24
178.93.146.0/24 maxlen: 24
178.93.150.0/24 maxlen: 24
178.93.177.0/24 maxlen: 24
178.93.182.0/24 maxlen: 24
178.93.200.0/24 maxlen: 24
178.93.201.0/24 maxlen: 24
178.93.223.0/24 maxlen: 24
178.93.231.0/24 maxlen: 24
178.93.250.0/24 maxlen: 24
178.94.204.0/24 maxlen: 24
178.94.235.0/24 maxlen: 24
178.94.248.0/24 maxlen: 24
178.94.249.0/24 maxlen: 24
178.94.251.0/24 maxlen: 24
178.95.25.0/24 maxlen: 24
178.95.52.0/24 maxlen: 24
178.95.85.0/24 maxlen: 24
178.95.160.0/24 maxlen: 24
178.95.184.0/24 maxlen: 24
178.95.187.0/24 maxlen: 24
178.95.206.0/24 maxlen: 24
178.95.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:be:21:52:1a:c4:6d:ad:81:f3:df:b9:47:b0:18:12:f9:42:dc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 5 07:40:19 2025 GMT
Not After : Nov 4 07:45:19 2026 GMT
Subject: CN=21FE066C8531D5F2DB90F0C2C1A2A1CB6129B18C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:a3:c0:e7:d2:47:df:3a:bb:f7:20:56:4b:
53:98:e3:d0:85:2d:81:36:7e:02:53:b8:eb:46:08:
66:64:52:ef:72:45:df:be:94:48:8f:66:92:a6:24:
5c:05:0e:c8:11:34:b0:77:c1:78:31:95:2e:50:21:
3e:55:a8:7c:96:b0:da:f8:49:21:27:54:bb:1f:a2:
1b:37:64:b5:1c:54:43:b3:2f:4a:14:d7:e8:6b:19:
8e:08:94:36:28:52:7a:16:06:a8:ed:03:13:83:80:
b5:1e:9b:2e:de:d3:54:57:2b:a4:4d:cc:27:34:cc:
d2:45:1d:1b:9c:04:15:41:dd:14:a7:68:81:79:d9:
0f:ce:60:12:e7:02:bd:99:4b:97:b0:68:f3:e3:f9:
e5:02:4d:a2:b2:ee:da:07:5e:bd:64:1b:30:bd:bd:
62:f3:2d:f1:cd:78:46:4f:27:55:0a:d2:33:bd:ed:
53:dd:5e:af:fc:4e:c8:0e:05:bf:2f:b0:88:48:c0:
3f:1d:cc:bf:fc:e3:48:8b:84:be:89:31:40:f4:da:
5f:f2:0d:f2:dc:9d:d7:01:cf:a5:38:5a:24:4d:7c:
46:7c:aa:91:c7:8e:3a:a7:52:3e:56:1f:3b:c8:00:
d7:0a:c4:23:6e:d1:3e:85:19:8c:c1:6a:70:0e:1b:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:06:6C:85:31:D5:F2:DB:90:F0:C2:C1:A2:A1:CB:61:29:B1:8C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.40.0/24
46.203.35.0/24
46.203.55.0/24
46.203.57.0/24
46.203.61.0/24
91.124.237.0/24
92.113.45.0/24
95.134.43.0/24
95.134.51.0/24
95.134.96.0/24
95.134.135.0/24
95.134.228.0/24
95.135.7.0/24
95.135.30.0/24
95.135.50.0/24
95.135.126.0/24
178.92.123.0/24
178.92.142.0/24
178.92.165.0/24
178.92.178.0/24
178.92.187.0/24
178.92.191.0-178.92.192.255
178.92.194.0/24
178.92.234.0/24
178.93.90.0/24
178.93.139.0/24
178.93.146.0/24
178.93.150.0/24
178.93.177.0/24
178.93.182.0/24
178.93.200.0/23
178.93.223.0/24
178.93.231.0/24
178.93.250.0/24
178.94.204.0/24
178.94.235.0/24
178.94.248.0/23
178.94.251.0/24
178.95.25.0/24
178.95.52.0/24
178.95.85.0/24
178.95.160.0/24
178.95.184.0/24
178.95.187.0/24
178.95.206.0/24
178.95.224.0/24
Signature Algorithm: sha256WithRSAEncryption
34:31:80:18:c0:a1:37:13:23:0d:36:23:0f:e9:81:ab:97:93:
d6:ce:86:b8:98:4f:dc:db:26:42:8f:19:8e:b6:f4:15:ee:93:
8b:75:c5:32:23:d8:4f:5f:8e:e0:0b:00:68:4d:dc:af:eb:18:
12:19:1c:04:a9:c6:e1:9b:8d:6d:fb:54:47:39:bb:61:46:9e:
7a:d0:f1:ac:17:c8:3b:43:4a:72:dd:97:61:c2:45:de:67:b1:
13:e2:ec:9f:e3:d7:5a:0a:c8:3b:17:0f:c7:a2:4e:df:35:ce:
27:ac:a1:43:8e:4c:eb:91:1d:fc:44:66:51:e4:16:67:9d:18:
52:84:17:a0:1d:22:e6:3e:2c:5e:04:78:eb:ef:99:48:a9:82:
94:9e:75:4a:96:4b:1d:80:4f:82:64:d4:d0:35:e8:e4:1f:03:
5d:a6:6b:7b:ad:d9:ee:7d:a3:e7:f8:98:cc:5c:21:90:d6:1d:
b1:57:be:b4:e3:57:5c:db:a4:ed:e1:96:35:54:49:c3:e8:89:
2f:17:f6:05:a0:b2:98:79:ee:ca:b5:0c:9e:13:07:9a:42:0a:
f3:c3:ab:71:5b:80:d6:01:74:9d:0d:25:56:a0:c0:c4:3e:88:
c4:f3:b9:4c:6c:7f:fa:27:d1:a7:63:bd:f6:35:df:4c:40:22:
f5:db:ad:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:49 2025 by rpki-client