Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS205235.roa
File: AS205235.roa (raw, json)
Hash identifier: Lj5rzqs2ptm2SnLqlK5p+0Ii/ICPXB8XTmWaZ+3DOVc=
Subject key identifier: FC:5D:43:A0:5A:64:DE:FC:55:5C:3C:1D:76:A0:16:13:16:1C:EB:0C
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 1A33E9F8C8402692D9BB93F67CC47AB586AA4F3E
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS205235.roa
Signing time: Wed 04 Nov 2026 20:32:48 +0000
ROA not before: Wed 04 Nov 2026 20:27:48 +0000
ROA not after: Wed 03 Nov 2027 20:32:48 +0000
asID: 205235
IP address blocks: 2a0e:8f02:f059::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:33:e9:f8:c8:40:26:92:d9:bb:93:f6:7c:c4:7a:b5:86:aa:4f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:48 2026 GMT
Not After : Nov 3 20:32:48 2027 GMT
Subject: CN=FC5D43A05A64DEFC555C3C1D76A01613161CEB0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:cc:6e:75:e1:e4:55:df:1b:d0:eb:6f:d5:
45:b5:ef:d8:07:c9:25:9f:c2:72:56:52:31:f7:82:
55:0e:c5:dd:9f:fd:38:f3:e7:35:0b:e9:e5:a1:6e:
d5:75:1d:5f:97:33:6c:98:c3:39:fa:f2:d6:3c:0c:
fd:f1:21:f2:11:16:9a:89:ad:31:18:5d:bf:79:14:
bf:70:d5:43:e3:19:24:31:d3:7c:af:01:60:fd:a5:
68:c0:b9:ed:1b:96:60:d4:b7:0b:e4:7e:1a:45:88:
26:ac:2c:12:f4:f2:fa:ab:7b:32:1b:47:02:86:a0:
48:90:25:ad:bf:98:98:ee:c3:e6:cd:9d:e5:ee:4e:
4a:63:44:29:7c:c7:36:a3:16:71:6f:af:7d:4c:35:
fe:0e:06:2f:e3:a2:c2:26:f5:ec:60:7c:08:2c:ee:
f5:35:a5:68:dd:4b:db:c2:c7:a9:55:c9:28:38:f5:
f3:8e:69:b3:59:1d:2f:29:b4:6c:9c:8d:67:90:48:
0c:d7:84:af:71:80:7b:ab:b5:38:da:df:df:d3:dd:
5b:40:50:c3:55:6b:d9:3c:ea:38:e7:a2:d1:0e:4d:
8c:b2:a8:fe:b6:46:6d:76:f2:91:d0:6e:12:08:0d:
59:b0:ea:a3:a7:bb:61:a1:c6:84:27:b1:dd:66:48:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5D:43:A0:5A:64:DE:FC:55:5C:3C:1D:76:A0:16:13:16:1C:EB:0C
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS205235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f059::/48
Signature Algorithm: sha256WithRSAEncryption
94:87:e1:61:8e:0a:71:5f:68:43:8e:94:77:e1:35:13:2c:6c:
b5:ec:35:6c:23:86:c3:f9:7b:90:99:71:bc:66:2d:f4:62:5b:
67:9c:7f:34:44:72:ae:1e:22:2f:e9:0c:ec:2e:7d:c2:18:9f:
9f:c5:a7:cc:0a:cb:db:ef:bf:64:1c:f0:64:00:5e:29:2b:db:
6b:84:8e:bd:84:e8:10:5f:75:32:fd:bf:13:1a:35:7c:cc:ac:
bd:fe:1a:c7:06:6f:1d:63:cf:22:d7:f0:0b:e4:f1:63:53:51:
b1:a4:c3:a9:26:ee:b9:1b:ab:76:37:1b:a2:f8:3f:3e:3f:fb:
16:dd:00:e1:14:b5:31:04:73:5f:98:f4:cf:bc:9f:ef:ac:e2:
23:82:34:74:96:e2:e1:ed:70:9a:d8:63:fe:ef:f5:23:e2:d6:
18:71:c5:d8:d4:53:d4:a5:16:49:f8:b4:fe:f8:ac:e8:2c:c1:
82:b0:78:62:f6:0e:73:51:d6:23:e9:26:68:9c:1f:dc:8f:64:
92:8a:29:0a:25:3a:5e:18:c5:b2:37:c9:8b:6f:6a:bf:33:a4:
a2:a2:ec:57:e5:61:85:dd:8b:cb:a1:7a:7a:7a:06:72:99:f6:
3a:64:c6:b7:e6:89:72:11:b7:b7:4c:d2:bd:6e:51:69:5a:23:
5f:e9:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 09:12:54 2026 by rpki-client