Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa
File: AS205838.roa (raw, json)
Hash identifier: Xx4zwklppcS3S24HTHEI2hkp498daQqJoknfeLgzQkA=
Subject key identifier: FF:E6:28:27:32:9D:CB:D4:8C:6B:F5:77:FF:C4:CA:89:07:16:F2:6D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 39DC213140A2B4E95FE0267B95BA1C6BF6DB0004
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa
Signing time: Sat 14 Mar 2026 16:11:20 +0000
ROA not before: Sat 14 Mar 2026 16:06:20 +0000
ROA not after: Sat 13 Mar 2027 16:11:20 +0000
asID: 205838
IP address blocks: 82.24.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:dc:21:31:40:a2:b4:e9:5f:e0:26:7b:95:ba:1c:6b:f6:db:00:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 14 16:06:20 2026 GMT
Not After : Mar 13 16:11:20 2027 GMT
Subject: CN=FFE62827329DCBD48C6BF577FFC4CA890716F26D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:95:56:37:cf:55:c8:10:55:46:a8:6f:99:
6c:70:22:1a:79:76:05:3e:ae:2c:9b:78:4a:2f:73:
6c:07:42:ac:6a:e3:69:83:ad:f7:b0:90:64:c3:06:
18:3f:ff:c2:a9:c1:da:d4:e2:95:f0:da:e7:29:17:
50:ea:ed:23:12:64:a9:ff:eb:ed:f0:26:b5:66:d3:
ac:c4:03:80:77:1e:7a:cb:b2:27:77:e6:4b:b8:88:
4d:5a:44:9d:1a:fc:a8:63:55:4b:e3:f2:3b:11:00:
7d:51:57:a8:0b:25:15:55:df:7c:76:ec:e7:9f:ec:
59:ad:ad:52:27:ce:e3:6e:3c:45:e4:d3:14:b2:0c:
10:9b:5d:27:00:0b:42:8e:4c:6c:e6:7b:fe:3c:09:
d6:d1:b8:4a:6f:62:d9:d2:58:8f:04:dc:a8:e7:68:
25:ec:f1:45:8a:0b:d6:45:a8:d8:a1:65:ad:09:39:
d0:1d:31:d0:80:e0:d4:9b:a4:94:f0:e2:11:1a:ee:
1c:82:44:a8:8d:00:a7:a8:d5:1d:3f:1d:b8:e6:c0:
81:58:be:37:7a:44:88:2a:e8:4d:a3:f0:51:69:ac:
3a:6c:bd:4e:48:d1:65:33:f0:e6:4d:ea:a5:d7:bc:
a7:52:14:14:7b:7a:98:04:37:46:19:b0:82:bd:6f:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E6:28:27:32:9D:CB:D4:8C:6B:F5:77:FF:C4:CA:89:07:16:F2:6D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b1:12:a0:a7:cd:16:57:af:4d:f5:1c:02:5e:60:33:fb:bb:
27:f9:16:75:11:15:18:d3:3d:19:77:40:45:8c:ed:45:40:14:
48:54:ed:bb:ba:6b:94:ff:b2:bd:da:13:d5:28:bf:b9:b8:2b:
85:85:1b:e9:49:0d:78:18:e2:39:0c:0a:a1:11:b1:9a:91:04:
de:21:af:9f:eb:b1:3d:9a:21:b3:66:15:10:45:a3:8a:48:d4:
dc:ab:8d:6e:95:ad:ed:41:0c:19:a5:86:f0:de:51:46:86:62:
22:de:5f:90:29:1d:22:71:9a:d6:06:4a:cf:92:c9:c6:09:4e:
f6:26:8b:34:7f:b1:ea:db:f1:17:76:5b:e2:a7:06:e7:d0:85:
98:03:92:88:5b:b8:b1:86:b7:45:0d:03:4d:a9:5e:a4:2e:8f:
14:36:32:ad:77:ff:13:92:8a:e6:52:bd:84:7f:c8:b2:14:b4:
93:aa:1b:62:ae:25:3d:22:9c:23:c7:d0:b6:33:f7:ff:b3:fc:
1b:74:fc:a1:27:3d:b5:e0:4e:5c:2d:7d:96:d8:8a:da:b3:63:
b3:83:48:eb:c3:f9:a3:52:1b:50:8d:ff:17:88:0e:c0:72:6f:
65:5e:88:94:9c:38:f9:74:a6:9c:44:24:c7:87:97:24:af:c0:
9e:98:36:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:29:14 2026 by rpki-client