Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205987.roa
File: AS205987.roa (raw, json)
Hash identifier: xjvTUBXbsTmXfZ7SOP+n+ruTVnvLMGnqs7gtoLDpDgI=
Subject key identifier: F3:F8:5F:73:D4:C9:DF:4C:6A:38:9D:22:09:20:E4:31:3A:4B:2B:91
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3B0BA7DCE6DADDB090DA432C60DAB8194F39E0A4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205987.roa
Signing time: Fri 08 May 2026 16:20:45 +0000
ROA not before: Fri 08 May 2026 16:15:45 +0000
ROA not after: Fri 07 May 2027 16:20:45 +0000
asID: 205987
IP address blocks: 84.75.131.0/24 maxlen: 24
84.75.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0b:a7:dc:e6:da:dd:b0:90:da:43:2c:60:da:b8:19:4f:39:e0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 16:15:45 2026 GMT
Not After : May 7 16:20:45 2027 GMT
Subject: CN=F3F85F73D4C9DF4C6A389D220920E4313A4B2B91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:9b:8a:b8:1d:73:58:40:f6:a4:b2:47:13:
dd:66:a0:02:09:f3:89:c7:fb:94:ab:0b:f5:ba:45:
d2:23:f5:f6:39:54:74:24:78:3b:4a:40:57:a2:d2:
f5:02:53:48:c8:ae:5f:38:61:b3:5e:ec:6e:c0:b1:
cf:27:9a:94:78:60:cc:e7:38:d2:7a:f2:6c:f8:f7:
5f:85:b1:8a:85:d9:e6:82:af:2e:fd:d0:aa:8d:0f:
29:7a:48:00:29:e7:d8:c1:99:bf:6a:11:10:06:b7:
e1:d4:e5:ec:29:e5:50:a6:d0:6e:69:71:dc:90:5d:
c3:2a:a4:ad:ae:cc:a2:75:cc:2e:0a:97:a4:55:58:
50:84:52:2c:32:93:f8:12:ad:d0:16:13:05:60:6d:
c3:c5:d3:82:0b:23:0a:08:81:d6:dd:df:58:c6:73:
be:a6:3e:b5:e8:11:52:b9:01:f2:bf:5e:5e:db:03:
25:4e:39:12:94:f2:09:28:7a:53:00:ef:28:3f:43:
53:e4:7a:3e:c1:a9:40:b3:96:bf:d0:24:5a:32:56:
b7:71:cd:02:ee:9a:35:7d:41:62:35:19:6c:05:2c:
fd:08:f9:fd:4c:c9:ee:cc:49:e4:7c:45:9f:90:dd:
27:d6:37:84:2e:bb:57:8b:70:a8:a1:34:23:1e:39:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F8:5F:73:D4:C9:DF:4C:6A:38:9D:22:09:20:E4:31:3A:4B:2B:91
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.131.0/24
84.75.147.0/24
Signature Algorithm: sha256WithRSAEncryption
27:67:b1:8f:5d:1c:fd:fd:8d:38:62:f0:8c:07:16:73:4f:c0:
7a:d4:ec:db:8f:d0:f1:44:e4:1a:22:08:fc:4b:65:de:af:24:
55:30:ea:57:c8:f6:b0:41:8b:36:0b:b8:79:47:ce:00:38:0b:
85:b4:bd:68:6b:06:a2:2f:b0:4b:a1:34:2b:0b:05:12:53:c8:
c1:1a:ec:9d:e0:aa:45:b7:c4:34:86:ca:34:fc:37:7f:57:e4:
a5:aa:12:15:85:fe:c1:82:09:c7:c4:82:10:c5:3c:1f:51:aa:
c7:f4:fc:9d:43:c9:1a:c5:4e:f0:ee:f8:87:0a:ad:65:82:6f:
49:f2:b8:62:01:eb:94:3e:96:25:e8:b8:e1:c1:3f:5b:d1:1f:
3c:a0:37:e4:69:17:16:b5:fb:a3:d5:4a:4b:36:64:95:ac:a5:
f2:c9:03:18:7c:47:84:aa:cb:f3:49:13:1b:59:89:31:98:bb:
bd:95:b8:ad:45:e6:5f:18:f7:96:b8:d3:04:11:0b:fa:25:1e:
8b:4e:41:df:10:d4:77:03:8a:16:dd:d3:48:9d:63:12:9e:7e:
85:f8:0c:40:e4:ae:0a:32:10:e9:67:8c:12:ac:83:c3:7c:8c:
14:bd:de:c8:aa:f8:04:b9:65:2d:80:7e:d7:d5:c7:4e:a5:9e:
8a:09:fd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:18 2026 by rpki-client