Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa
File: AS205838.roa (raw, json)
Hash identifier: YUpwjt+RWOpqFcjO5RgjHiyS4GNZc11FUZBPtlItYLg=
Subject key identifier: 81:26:4E:B7:9F:27:9E:92:B1:5A:41:DF:26:60:B5:00:50:1C:63:46
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 72A27CE68C0BC97AA76EDABFC6D4C9195BBA9513
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa
Signing time: Thu 07 Aug 2025 14:48:07 +0000
ROA not before: Thu 07 Aug 2025 14:43:07 +0000
ROA not after: Thu 06 Aug 2026 14:48:07 +0000
asID: 205838
IP address blocks: 82.24.19.0/24 maxlen: 24
82.24.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a2:7c:e6:8c:0b:c9:7a:a7:6e:da:bf:c6:d4:c9:19:5b:ba:95:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 7 14:43:07 2025 GMT
Not After : Aug 6 14:48:07 2026 GMT
Subject: CN=81264EB79F279E92B15A41DF2660B500501C6346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:29:c3:67:6c:c4:70:eb:88:74:ed:17:93:
38:f5:b0:f9:90:df:1c:55:bc:3d:92:f2:fa:b8:23:
ad:a9:22:81:18:eb:b7:d8:ec:1c:d2:9f:68:6c:1a:
bb:17:c5:2d:e9:f3:f5:6c:7b:f8:c8:73:24:30:57:
2d:9e:90:af:0a:2a:0a:47:3f:86:29:24:e3:93:ef:
77:9f:a1:32:13:a8:bd:c8:7e:ba:0f:a2:f3:33:0b:
25:92:8f:b6:28:f8:4e:45:5d:95:09:71:38:05:2b:
6a:d5:93:c4:7f:c9:4e:59:ac:4a:0e:c1:df:66:5e:
d1:c2:f3:92:81:a2:2a:8d:f2:4c:9e:3b:0e:2c:ac:
d5:b6:a4:5d:e9:58:15:16:2b:ec:5b:a5:72:8a:e9:
ad:f3:b6:df:f8:49:08:80:3a:f1:d8:79:b3:eb:da:
da:06:ca:34:2e:73:60:5e:92:ac:78:4d:c4:e8:11:
58:3b:6b:70:72:b5:42:6e:79:af:ee:74:ce:a0:df:
13:a4:25:50:8b:7f:88:a1:de:3a:87:1d:a5:06:8a:
4f:99:89:df:c0:1d:72:c0:52:bb:a7:42:fd:62:2b:
44:cb:82:11:f5:2c:4c:d5:52:98:62:9e:26:bd:b0:
d1:0f:f2:02:c8:0a:39:ca:ef:e1:c5:e7:70:a4:26:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:26:4E:B7:9F:27:9E:92:B1:5A:41:DF:26:60:B5:00:50:1C:63:46
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.19.0/24
82.24.91.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d8:39:eb:15:f1:ee:5b:4b:94:3a:00:61:15:53:1b:23:de:
77:e3:b7:94:6e:88:72:0c:f1:76:21:1a:42:24:39:5f:f8:7a:
46:98:a7:5a:bd:8c:7f:4e:1c:ff:4e:4b:7b:65:f4:43:87:b2:
ac:0b:87:11:ae:f1:66:a9:f8:a4:d3:04:49:f3:29:12:51:48:
40:89:0e:e3:0b:ac:bd:dd:85:c6:a2:fa:24:02:4a:05:8b:fa:
e0:e9:c1:c3:8c:94:63:b1:75:98:54:04:12:8f:be:b9:e8:94:
a6:01:3f:d8:9d:53:1d:2c:73:2b:9e:85:f3:cf:9d:af:6e:1b:
29:52:db:9b:ad:c7:17:c6:f6:7b:a6:46:59:66:e7:76:da:79:
90:c5:de:b3:ac:48:64:dd:f2:87:77:04:89:c5:13:2e:d1:de:
97:c8:98:fd:50:cd:27:24:bd:3a:36:be:45:7d:1b:b7:bb:19:
fa:ac:1a:bc:ec:62:19:42:0c:b5:65:dc:01:55:c3:d3:69:e9:
dd:54:89:dc:80:af:f9:43:a2:73:e9:d1:ef:a4:ad:6e:18:b3:
01:f2:6e:6a:75:2a:21:7a:b2:4e:22:30:56:e2:2d:bc:2c:08:
3f:42:ab:84:61:fc:33:c0:4d:c9:b7:6c:b3:d8:33:e2:75:8e:
02:36:a6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:43:25 2025 by rpki-client