Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205502.roa
File: AS205502.roa (raw, json)
Hash identifier: ffVG/Ic26zl8upvHKr9abN56Bl9FSFP4U+4xqMz95vA=
Subject key identifier: 6B:1C:FB:EA:C1:A6:7B:3D:99:A7:ED:7F:F2:EC:38:04:A9:81:CC:9E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 11AC5B5EE1B36FDF6DF24D762EE2C14B36D3231A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205502.roa
Signing time: Fri 24 Apr 2026 04:18:57 +0000
ROA not before: Fri 24 Apr 2026 04:13:57 +0000
ROA not after: Fri 23 Apr 2027 04:18:57 +0000
asID: 205502
IP address blocks: 82.26.131.0/24 maxlen: 24
82.38.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ac:5b:5e:e1:b3:6f:df:6d:f2:4d:76:2e:e2:c1:4b:36:d3:23:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 24 04:13:57 2026 GMT
Not After : Apr 23 04:18:57 2027 GMT
Subject: CN=6B1CFBEAC1A67B3D99A7ED7FF2EC3804A981CC9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:4c:ff:f4:10:95:5c:ab:f4:91:0b:ea:7a:
fc:99:1d:db:33:e1:82:ec:0d:fe:c5:d6:5e:f7:23:
fa:e0:47:cb:b5:83:e7:fc:2b:a0:74:e8:95:19:42:
f9:8b:bb:dc:56:54:9f:07:fc:7e:cc:48:e9:4f:cd:
6b:0b:54:bd:cc:7a:bd:d0:8b:11:3b:7e:b4:72:ec:
f9:a3:47:13:9c:9c:d1:34:04:68:3f:61:80:8b:08:
ce:34:dd:b3:80:26:ff:e6:9a:de:10:3a:39:a2:df:
ba:65:90:63:14:78:c6:c4:5a:fb:36:e9:02:5b:57:
4b:4f:7e:5e:23:bd:6c:ac:ea:68:a9:fa:59:98:6f:
83:82:32:f8:2f:17:d0:34:7c:ed:8d:c2:88:e5:93:
67:e0:bf:bd:29:e7:a1:ef:e6:b8:e2:59:f9:19:9d:
83:68:05:2b:09:1a:ee:40:fb:fb:d9:b4:33:3d:d9:
60:7e:9c:b4:5d:b2:db:38:a5:1c:12:63:e2:ce:1e:
f6:0b:fe:34:02:3b:93:11:81:84:2f:92:a7:73:96:
13:4e:02:0c:d9:63:91:78:ac:a8:8f:d7:51:b4:49:
d9:71:ee:5c:0a:0e:ca:33:83:70:55:68:52:51:62:
28:e7:9f:47:af:e9:9b:1d:f4:c8:2b:f7:ca:44:b5:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1C:FB:EA:C1:A6:7B:3D:99:A7:ED:7F:F2:EC:38:04:A9:81:CC:9E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205502.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.131.0/24
82.38.61.0/24
Signature Algorithm: sha256WithRSAEncryption
50:7f:c2:6b:31:71:84:85:65:48:43:69:f3:73:23:1e:7d:40:
08:b9:83:db:76:b1:98:76:7a:8a:b9:52:2e:9b:a0:f6:00:08:
d4:24:49:e5:19:61:8f:09:ea:9a:a6:7f:b1:4b:b7:11:6d:59:
54:d0:9d:94:a0:d8:b5:14:d4:5f:b5:3d:7a:ba:f2:d3:44:31:
ca:e7:4f:f0:64:dc:ac:db:17:47:e3:3e:eb:c3:09:18:25:e7:
a0:55:37:62:ea:3e:01:4c:c8:23:51:8a:79:6a:b2:a6:9c:b3:
69:fb:0e:38:00:0a:5d:92:4c:3a:40:c5:5e:13:03:a3:d0:25:
74:cd:24:09:51:21:c5:a6:66:f8:a9:c7:43:37:65:cc:78:cc:
93:7a:b2:ea:20:8b:ba:da:ee:14:f0:98:ec:b1:60:a5:a3:ff:
f1:56:5c:d2:51:67:80:fa:ad:f8:57:ab:73:a2:e8:b9:03:78:
e1:d6:be:ac:1b:7d:ce:e6:01:38:16:93:aa:6f:cd:3b:6d:e5:
90:10:36:b2:7a:46:4a:48:cd:0d:f7:e4:d9:2a:1d:b3:4a:8c:
e0:a8:38:9e:78:3a:ed:5e:6f:2c:0b:14:66:c1:d2:f5:ef:d1:
3e:4c:8e:51:12:36:75:b2:da:68:75:ea:5d:4f:d3:2d:5b:cd:
e7:cc:04:1a
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUEaxbXuGzb99t8k12LuLBSzbTIxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA0MjQwNDEzNTdaFw0yNzA0MjMwNDE4NTdaMDMxMTAvBgNV
BAMTKDZCMUNGQkVBQzFBNjdCM0Q5OUE3RUQ3RkYyRUMzODA0QTk4MUNDOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0YEz/9BCVXKv0kQvqevyZHdsz
4YLsDf7F1l73I/rgR8u1g+f8K6B06JUZQvmLu9xWVJ8H/H7MSOlPzWsLVL3Mer3Q
ixE7frRy7PmjRxOcnNE0BGg/YYCLCM403bOAJv/mmt4QOjmi37plkGMUeMbEWvs2
6QJbV0tPfl4jvWys6mip+lmYb4OCMvgvF9A0fO2Nwojlk2fgv70p56Hv5rjiWfkZ
nYNoBSsJGu5A+/vZtDM92WB+nLRdsts4pRwSY+LOHvYL/jQCO5MRgYQvkqdzlhNO
AgzZY5F4rKiP11G0Sdlx7lwKDsozg3BVaFJRYijnn0ev6Zsd9Mgr98pEtdZBAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUaxz76sGmez2Zp+1/8uw4BKmBzJ4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1NTAyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhqD
AwQAUiY9MA0GCSqGSIb3DQEBCwUAA4IBAQBQf8JrMXGEhWVIQ2nzcyMefUAIuYPb
drGYdnqKuVIum6D2AAjUJEnlGWGPCeqapn+xS7cRbVlU0J2UoNi1FNRftT16uvLT
RDHK50/wZNys2xdH4z7rwwkYJeegVTdi6j4BTMgjUYp5arKmnLNp+w44AApdkkw6
QMVeEwOj0CV0zSQJUSHFpmb4qcdDN2XMeMyTerLqIIu62u4U8JjssWClo//xVlzS
UWeA+q34V6tzoui5A3jh1r6sG33O5gE4FpOqb807beWQEDayekZKSM0N9+TZKh2z
SozgqDieeDrtXm8sCxRmwdL179E+TI5REjZ1stpodepdT9MtW83nzAQa
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:54 2026 by rpki-client