Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: Y2608zDPJqAruUQTrrPnK+DRKS/YBDJLBP402fZWj4c=
Subject key identifier: 6D:37:8B:0D:05:FB:41:89:8B:6D:1A:8F:AB:25:C2:F3:25:D7:0A:EB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 77ED506B3EFF492382FD680D6F21E26989B783D1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205489.roa
Signing time: Wed 24 Jun 2026 14:15:25 +0000
ROA not before: Wed 24 Jun 2026 14:10:25 +0000
ROA not after: Wed 23 Jun 2027 14:15:25 +0000
asID: 205489
IP address blocks: 82.21.75.0/24 maxlen: 24
82.21.96.0/24 maxlen: 24
82.21.97.0/24 maxlen: 24
82.22.21.0/24 maxlen: 24
82.22.54.0/24 maxlen: 24
82.23.14.0/24 maxlen: 24
82.23.143.0/24 maxlen: 24
82.24.4.0/24 maxlen: 24
82.24.100.0/24 maxlen: 24
82.25.5.0/24 maxlen: 24
82.26.82.0/24 maxlen: 24
82.26.155.0/24 maxlen: 24
82.27.105.0/24 maxlen: 24
82.38.20.0/24 maxlen: 24
82.38.22.0/24 maxlen: 24
82.38.101.0/24 maxlen: 24
82.38.147.0/24 maxlen: 24
82.38.150.0/24 maxlen: 24
82.38.202.0/24 maxlen: 24
82.39.103.0/24 maxlen: 24
82.39.185.0/24 maxlen: 24
82.41.37.0/24 maxlen: 24
82.41.210.0/24 maxlen: 24
82.47.192.0/24 maxlen: 24
82.47.197.0/24 maxlen: 24
84.75.146.0/24 maxlen: 24
84.75.179.0/24 maxlen: 24
84.75.188.0/24 maxlen: 24
178.83.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ed:50:6b:3e:ff:49:23:82:fd:68:0d:6f:21:e2:69:89:b7:83:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 24 14:10:25 2026 GMT
Not After : Jun 23 14:15:25 2027 GMT
Subject: CN=6D378B0D05FB41898B6D1A8FAB25C2F325D70AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:df:43:38:50:88:02:fb:c0:30:d7:f0:ea:
d8:ec:f3:bc:f0:ee:4d:ff:ef:9e:f8:21:08:a8:f5:
c2:c8:76:6e:26:ac:e6:86:bd:58:88:6d:4d:58:86:
0d:42:0f:b7:58:21:b9:80:11:3e:54:7a:29:ea:f2:
e2:6f:22:ea:a5:82:64:0c:9a:ee:76:f4:08:a7:dc:
bf:1e:ea:b6:a7:a3:af:40:72:f6:a6:3f:15:eb:74:
35:40:c6:eb:25:b1:70:70:dc:5c:89:eb:da:da:c8:
40:33:e4:15:8e:cd:d9:2c:f1:6a:29:0c:ee:3e:91:
62:13:ff:d5:38:53:2e:69:39:b8:48:d7:bc:9e:d9:
bf:8d:57:32:9d:00:52:c0:78:93:66:25:99:4a:17:
36:07:b8:19:65:91:c3:8c:3d:86:29:7b:a2:01:c6:
88:1d:20:9e:26:51:a3:86:14:50:83:47:81:b8:88:
4e:cf:2c:36:ec:68:5c:5a:89:87:8b:c4:fe:23:ad:
0b:8d:5d:0e:9a:f9:32:e2:7a:7d:e8:0a:25:80:f3:
9f:f4:58:e9:85:52:ee:57:70:9e:59:cf:c4:40:e7:
c0:89:a1:3b:70:ba:7d:f7:9b:fd:f1:80:4e:be:96:
b9:b7:b3:95:a6:30:6a:38:96:28:d7:f4:21:cf:e6:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:37:8B:0D:05:FB:41:89:8B:6D:1A:8F:AB:25:C2:F3:25:D7:0A:EB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.75.0/24
82.21.96.0/23
82.22.21.0/24
82.22.54.0/24
82.23.14.0/24
82.23.143.0/24
82.24.4.0/24
82.24.100.0/24
82.25.5.0/24
82.26.82.0/24
82.26.155.0/24
82.27.105.0/24
82.38.20.0/24
82.38.22.0/24
82.38.101.0/24
82.38.147.0/24
82.38.150.0/24
82.38.202.0/24
82.39.103.0/24
82.39.185.0/24
82.41.37.0/24
82.41.210.0/24
82.47.192.0/24
82.47.197.0/24
84.75.146.0/24
84.75.179.0/24
84.75.188.0/24
178.83.115.0/24
Signature Algorithm: sha256WithRSAEncryption
34:62:dd:dd:98:24:6f:b8:06:c7:35:ce:89:9b:3f:cb:59:9f:
cd:4d:7b:6b:7a:10:7b:e8:b2:1a:7b:7c:fc:06:6e:be:8c:08:
4e:1f:21:e7:b6:e7:20:52:a9:a4:8b:e8:5d:58:68:1a:ad:c1:
16:74:6a:1d:97:45:0a:59:cf:ce:1d:26:20:b1:b2:09:e3:24:
b4:55:89:69:78:d4:96:78:f8:9a:3e:c3:2a:7e:62:58:9d:82:
58:89:41:95:7f:19:8b:ea:d1:18:76:e6:30:db:64:a8:9a:cf:
da:77:74:b1:29:b0:ae:91:57:5e:cb:36:b6:86:4c:71:c1:0a:
d3:6f:f5:c3:37:7f:2d:c9:48:fe:13:28:f1:04:db:ec:c0:a7:
81:25:25:d3:83:a7:42:b3:06:a5:60:5a:7c:ae:2d:48:37:6e:
27:bf:cc:82:ea:f7:26:98:c6:50:07:08:83:26:cb:6c:9a:88:
af:80:4c:c4:56:50:3d:e6:24:74:58:ae:b3:4c:d8:78:a9:4d:
f6:2b:61:d1:62:60:52:4f:0a:d2:19:c1:d2:4f:1a:53:d0:41:
0f:bb:02:e7:64:10:c5:b4:1d:f5:8c:ac:56:78:b1:23:0d:5a:
db:9b:83:d4:83:e2:32:5e:cf:ad:0c:fc:62:32:98:bf:92:2c:
b8:13:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:54 2026 by rpki-client