Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205548.roa
File: AS205548.roa (raw, json)
Hash identifier: 7EPs5bzQ3q55B1nbvfmew6jZnUWEduk5ABorNbks9X0=
Subject key identifier: 56:22:BF:81:58:96:AD:79:AD:CC:9C:01:BF:5A:57:AD:99:E7:FB:D6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 647C0FD088EF039A9285C28B828FB603A4CA305D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205548.roa
Signing time: Thu 25 Sep 2025 15:40:23 +0000
ROA not before: Thu 25 Sep 2025 15:35:23 +0000
ROA not after: Thu 24 Sep 2026 15:40:23 +0000
asID: 205548
IP address blocks: 140.150.236.0/24 maxlen: 24
143.14.189.0/24 maxlen: 24
155.117.82.0/24 maxlen: 24
155.117.224.0/24 maxlen: 24
162.141.117.0/24 maxlen: 24
167.148.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:7c:0f:d0:88:ef:03:9a:92:85:c2:8b:82:8f:b6:03:a4:ca:30:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 25 15:35:23 2025 GMT
Not After : Sep 24 15:40:23 2026 GMT
Subject: CN=5622BF815896AD79ADCC9C01BF5A57AD99E7FBD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:06:6d:d9:c3:ff:e8:d3:11:e7:d4:af:b7:
97:20:da:26:5d:61:cc:e3:48:52:bb:11:51:30:0a:
28:5d:3b:25:99:05:f6:64:ce:a0:8b:76:f4:bc:63:
b9:55:be:7c:23:51:71:bb:24:d1:0d:da:02:65:c5:
f7:cc:52:3a:4a:93:c5:ec:fb:f1:82:18:20:81:4e:
13:8f:c9:b6:a2:74:cb:e1:f3:4e:92:75:ab:81:e8:
f0:57:90:b2:21:21:7a:a5:a5:2a:94:bd:e6:17:4b:
42:d7:b7:ca:4e:38:25:5e:9e:48:83:8a:b3:19:90:
77:f8:08:77:2c:8b:26:f0:7f:fa:90:c1:aa:9d:ca:
d6:08:58:ec:ad:18:4b:11:d1:9c:4e:0e:ff:13:6f:
e0:89:fe:a1:f8:da:5d:cb:20:e4:22:e9:60:54:56:
6e:6f:47:e7:57:83:99:5f:f4:a7:d1:21:de:40:91:
73:03:9a:fb:f7:10:bd:06:99:53:be:44:05:29:97:
77:40:c5:bd:6d:99:a6:d8:79:28:3a:0b:a5:ac:d6:
f3:d8:73:fb:ee:c6:1b:4c:89:45:69:10:88:d7:62:
fc:ed:f9:5e:fc:ee:96:e0:fe:72:71:b9:3f:3b:1e:
46:b0:c1:6c:4e:cb:51:94:08:4d:2a:cd:dc:66:03:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:22:BF:81:58:96:AD:79:AD:CC:9C:01:BF:5A:57:AD:99:E7:FB:D6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.236.0/24
143.14.189.0/24
155.117.82.0/24
155.117.224.0/24
162.141.117.0/24
167.148.203.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6d:fc:e7:73:76:46:66:45:87:5c:64:8e:44:52:5a:59:e2:
4f:1b:10:d9:63:20:33:b2:36:fa:8a:5d:f9:95:bc:b9:d1:d6:
14:a7:97:eb:87:d4:67:41:d5:55:32:74:63:e0:22:c0:3b:60:
7d:8f:7b:2d:0c:ac:d1:94:bf:98:18:ed:91:11:1f:aa:d9:74:
54:d9:e6:fd:b5:c0:af:d4:21:fd:36:b5:3c:dd:31:8a:11:56:
ca:bb:9b:3e:e9:4d:67:e5:e1:ff:05:a6:31:1c:07:9d:3b:4b:
bf:84:69:48:be:51:3b:f4:1b:8e:06:f9:71:d6:cd:f0:3f:35:
d6:98:0f:be:f1:d4:10:f7:9b:cc:1f:17:24:55:16:ba:15:42:
5b:ad:8f:21:37:66:eb:35:cc:dd:f4:97:ac:65:42:f0:b3:44:
68:45:92:3c:d8:ba:e0:23:40:dc:35:75:fb:d7:ee:c4:ef:9b:
5c:4a:e9:89:89:10:eb:ea:62:9b:de:41:04:5e:c9:fa:a8:cd:
e4:c6:a1:85:a0:f0:77:d1:c5:e9:ac:9a:60:ea:6a:6a:1f:ac:
3b:8b:00:bb:ce:c6:4a:bc:69:7c:98:27:a9:e5:50:6f:0f:1d:
bf:01:b7:c8:7b:ab:52:42:bb:ac:52:c0:58:bf:05:c3:84:06:
0a:e9:a8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:12:13 2025 by rpki-client