
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa
File: AS205886.roa (raw, json)
Hash identifier: VqUAKPk5zqFQUXD4DnVxBrKCX71yoQMhnIFpA2Mh4cc=
Subject key identifier: 0C:5E:8A:65:39:BB:21:6A:F9:AE:09:4E:FC:32:01:FE:EA:13:B8:9B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5DDE4C9C545910B85407FEE04A9E2AE72A93F444
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa
Signing time: Sat 18 Oct 2025 09:16:07 +0000
ROA not before: Sat 18 Oct 2025 09:11:07 +0000
ROA not after: Sat 17 Oct 2026 09:16:07 +0000
asID: 205886
IP address blocks: 140.150.152.0/24 maxlen: 24
140.150.154.0/24 maxlen: 24
143.14.157.0/24 maxlen: 24
143.14.199.0/24 maxlen: 24
143.14.248.0/24 maxlen: 24
143.14.249.0/24 maxlen: 24
155.117.34.0/24 maxlen: 24
155.117.76.0/24 maxlen: 24
155.117.99.0/24 maxlen: 24
155.117.108.0/24 maxlen: 24
155.117.166.0/24 maxlen: 24
155.117.214.0/24 maxlen: 24
155.117.220.0/24 maxlen: 24
162.141.5.0/24 maxlen: 24
162.141.8.0/24 maxlen: 24
162.141.66.0/24 maxlen: 24
162.141.136.0/24 maxlen: 24
167.148.33.0/24 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.105.0/24 maxlen: 24
167.148.184.0/24 maxlen: 24
167.148.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:de:4c:9c:54:59:10:b8:54:07:fe:e0:4a:9e:2a:e7:2a:93:f4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 18 09:11:07 2025 GMT
Not After : Oct 17 09:16:07 2026 GMT
Subject: CN=0C5E8A6539BB216AF9AE094EFC3201FEEA13B89B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:ce:f2:68:ca:eb:a6:9f:7b:6a:a1:1c:7f:
ce:37:47:a7:5e:2b:fc:88:3b:e7:34:0f:f7:48:0d:
88:0a:53:56:f5:4d:70:c0:74:91:80:13:2b:88:df:
6c:09:85:93:7e:d4:e4:df:0e:96:bd:cc:1b:8f:7f:
ba:63:56:75:af:fe:37:2a:89:f3:3a:c4:b7:c0:f1:
16:41:68:98:a4:95:79:60:2d:17:0c:61:63:d5:96:
09:d5:2a:c9:84:61:06:46:78:84:2c:af:3a:75:d8:
5c:76:f0:29:61:e5:f0:32:dc:54:a4:7d:3a:84:11:
19:3a:9f:a2:64:ab:4a:6e:fc:3e:36:b9:ce:be:c6:
21:f5:5b:bc:e9:61:77:7d:d3:b6:65:86:c3:41:92:
e5:9e:4a:a4:94:a1:43:16:62:e9:65:6b:c3:c3:73:
64:d9:75:9c:4c:af:7c:76:d4:64:b1:51:45:61:62:
f8:80:e7:d2:34:cf:e7:f3:03:55:12:60:33:fd:96:
19:79:7d:ee:4b:e7:8e:88:66:f1:39:9c:9a:ac:9b:
81:07:d1:ce:97:53:a0:ba:63:6c:52:18:d2:5c:10:
b1:9e:11:63:ad:47:49:f7:88:e2:28:05:e2:67:ee:
26:2d:90:5a:20:4f:7e:fc:f4:eb:b8:48:dd:d2:01:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5E:8A:65:39:BB:21:6A:F9:AE:09:4E:FC:32:01:FE:EA:13:B8:9B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.152.0/24
140.150.154.0/24
143.14.157.0/24
143.14.199.0/24
143.14.248.0/23
155.117.34.0/24
155.117.76.0/24
155.117.99.0/24
155.117.108.0/24
155.117.166.0/24
155.117.214.0/24
155.117.220.0/24
162.141.5.0/24
162.141.8.0/24
162.141.66.0/24
162.141.136.0/24
167.148.33.0/24
167.148.75.0/24
167.148.105.0/24
167.148.184.0/24
167.148.194.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:97:5a:19:ac:c7:cb:4a:42:84:c7:07:e3:46:fc:b2:c1:2b:
2b:7d:a8:1a:ab:d9:05:2c:30:07:ce:76:19:59:e3:07:bd:d7:
cc:7f:4b:d9:08:6a:89:27:4a:94:07:23:b7:36:29:12:4c:a4:
60:b3:ae:34:0a:c3:e1:52:2c:7c:ca:39:58:62:60:af:f4:ee:
de:a2:2e:91:c2:23:e2:d9:5b:8e:ee:af:3e:6e:ce:7b:f2:0f:
b7:40:e5:9c:31:26:c3:eb:93:46:9c:a3:b1:85:30:ec:c4:d0:
b5:09:e2:3e:c0:1c:eb:24:f8:28:1e:93:33:3f:9f:39:5f:b1:
d5:c8:b4:d4:d9:9d:ab:ba:f6:e7:4d:0c:cb:50:62:ac:0f:98:
4f:db:00:4b:c4:db:65:ea:6f:cf:8c:40:91:45:2f:8c:43:0c:
1f:5f:24:b8:89:2f:b6:5b:15:ca:1f:ab:f0:13:b9:fe:ec:c0:
93:18:e7:23:57:7c:8f:d9:6a:81:4a:df:ee:f3:25:50:f2:f8:
8a:09:cf:e6:81:97:6f:45:13:41:7b:7c:0d:8c:ed:fb:e9:d4:
be:b1:7b:41:e9:13:c8:32:16:cb:aa:1d:69:fe:2e:ef:0e:e3:
15:75:12:dd:94:04:29:82:e9:7e:3f:c2:b7:61:7d:1c:a5:ac:
ca:d1:54:38
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIUXd5MnFRZELhUB/7gSp4q5yqT9EQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTEwMTgwOTExMDdaFw0yNjEwMTcwOTE2MDdaMDMxMTAvBgNV
BAMTKDBDNUU4QTY1MzlCQjIxNkFGOUFFMDk0RUZDMzIwMUZFRUExM0I4OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdZs7yaMrrpp97aqEcf843R6de
K/yIO+c0D/dIDYgKU1b1TXDAdJGAEyuI32wJhZN+1OTfDpa9zBuPf7pjVnWv/jcq
ifM6xLfA8RZBaJiklXlgLRcMYWPVlgnVKsmEYQZGeIQsrzp12Fx28Clh5fAy3FSk
fTqEERk6n6Jkq0pu/D42uc6+xiH1W7zpYXd907ZlhsNBkuWeSqSUoUMWYulla8PD
c2TZdZxMr3x21GSxUUVhYviA59I0z+fzA1USYDP9lhl5fe5L546IZvE5nJqsm4EH
0c6XU6C6Y2xSGNJcELGeEWOtR0n3iOIoBeJn7iYtkFogT3789Ou4SN3SAUMrAgMB
AAGjggKGMIICgjAdBgNVHQ4EFgQUDF6KZTm7IWr5rglO/DIB/uoTuJswHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgME
AIyWmAMEAIyWmgMEAI8OnQMEAI8OxwMEAY8O+AMEAJt1IgMEAJt1TAMEAJt1YwME
AJt1bAMEAJt1pgMEAJt11gMEAJt13AMEAKKNBQMEAKKNCAMEAKKNQgMEAKKNiAME
AKeUIQMEAKeUSwMEAKeUaQMEAKeUuAMEAKeUwjANBgkqhkiG9w0BAQsFAAOCAQEA
vJdaGazHy0pChMcH40b8ssErK32oGqvZBSwwB852GVnjB73XzH9L2QhqiSdKlAcj
tzYpEkykYLOuNArD4VIsfMo5WGJgr/Tu3qIukcIj4tlbju6vPm7Oe/IPt0DlnDEm
w+uTRpyjsYUw7MTQtQniPsAc6yT4KB6TMz+fOV+x1ci01Nmdq7r2500My1BirA+Y
T9sAS8TbZepvz4xAkUUvjEMMH18kuIkvtlsVyh+r8BO5/uzAkxjnI1d8j9lqgUrf
7vMlUPL4ignP5oGXb0UTQXt8DYzt++nUvrF7QekTyDIWy6odaf4u7w7jFXUS3ZQE
KYLpfj/Ct2F9HKWsytFUOA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:20 2025 by rpki-client