Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa
File: AS205838.roa (raw, json)
Hash identifier: BpPpIoJ9vI4lIRkr/UbNYr1kRFX/2gDPzxQzjx0tG+s=
Subject key identifier: F9:B3:06:D4:78:CC:31:32:D7:7C:2B:10:AA:CC:F5:55:6A:CA:9C:4C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 46BCD64CC79CA6C3C78B25A2AC02F337A53FBB07
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa
Signing time: Wed 23 Sep 2026 17:00:52 +0000
ROA not before: Wed 23 Sep 2026 16:55:52 +0000
ROA not after: Wed 22 Sep 2027 17:00:52 +0000
asID: 205838
IP address blocks: 82.24.91.0/24 maxlen: 24
2a13:9500:1e2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:bc:d6:4c:c7:9c:a6:c3:c7:8b:25:a2:ac:02:f3:37:a5:3f:bb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 23 16:55:52 2026 GMT
Not After : Sep 22 17:00:52 2027 GMT
Subject: CN=F9B306D478CC3132D77C2B10AACCF5556ACA9C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:48:c6:13:c3:be:86:5b:0f:6a:10:4f:94:5a:
65:08:97:5d:da:06:a9:e7:00:6f:3c:64:2a:13:3a:
38:11:7a:f7:bc:eb:6e:d2:24:e7:8c:b0:2a:ad:f8:
85:57:7f:d3:2b:d5:b4:df:ed:9b:08:8d:2a:36:de:
72:71:03:a7:cd:8f:4f:a4:df:15:22:bf:24:48:55:
fb:e0:d4:cf:81:09:f6:69:ed:84:b2:44:df:b9:d9:
6d:92:36:15:10:30:24:a8:b4:48:f5:e3:7c:82:e1:
68:9b:a9:0c:08:8e:fe:b8:d7:9d:9d:35:85:02:6a:
cf:bc:3a:4c:69:fa:7b:b8:7e:d5:a0:eb:61:41:17:
14:d1:b5:5b:5f:16:02:87:31:1f:f7:c9:c3:37:d8:
3a:71:f6:4b:f0:85:e3:b2:70:70:a0:90:3d:df:c7:
1d:f2:c4:f1:6b:0a:30:1e:b7:62:e8:3a:43:08:ca:
95:5f:64:e3:34:0a:2b:78:2b:91:dc:eb:2d:08:e6:
c3:3c:24:49:57:b1:7c:56:1e:9a:30:5c:28:8d:7a:
ab:a3:2f:d0:77:94:3d:b1:e5:38:81:18:41:9a:d0:
26:4d:6c:67:b6:b1:c4:bc:64:60:96:7d:e4:04:ca:
a9:77:92:df:eb:03:a0:91:0d:08:1b:7a:f5:65:f3:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B3:06:D4:78:CC:31:32:D7:7C:2B:10:AA:CC:F5:55:6A:CA:9C:4C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.91.0/24
IPv6:
2a13:9500:1e2::/48
Signature Algorithm: sha256WithRSAEncryption
11:fa:bf:08:d4:49:ef:02:f1:d0:54:58:be:bb:d6:c2:cb:bb:
55:8f:87:95:9e:af:88:32:5e:bb:f6:c4:fb:45:e4:18:75:9b:
64:1c:03:7f:eb:cf:f9:a8:7a:68:9d:89:38:19:15:c5:ff:75:
7b:d1:2f:70:4a:0a:51:f0:ea:e5:18:9e:09:1e:c8:46:3f:04:
89:a4:fa:4d:32:46:21:13:17:2f:04:c7:07:59:e4:be:e4:d8:
e1:79:d1:9e:5c:66:63:6e:1f:c8:53:50:5b:37:85:ec:5d:b7:
0d:94:3e:45:ec:22:8b:e3:91:9b:39:ab:87:45:37:dc:b9:ef:
b0:82:7e:f9:5f:a6:b0:a8:c0:69:59:71:62:a7:ed:47:a2:64:
ee:3e:b3:84:5b:2b:95:9b:e2:dd:b4:e0:59:77:55:ff:15:f8:
c6:c0:de:4e:30:da:47:8c:15:14:c6:9d:86:06:f0:73:b1:c9:
0b:2c:34:38:86:d2:e8:c2:4c:53:2e:ce:b1:0c:b3:32:00:83:
04:49:b9:90:69:3e:d4:69:a2:3a:de:1c:d6:99:94:1a:5b:4c:
7d:2f:ac:e6:8f:61:a5:00:55:2d:cf:71:71:d6:8e:ea:bf:6c:
19:7b:de:15:fa:b8:40:54:ed:9b:d3:a3:c7:b2:b9:33:fe:53:
ed:34:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:38:30 2026 by rpki-client