Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205489.roa
File: AS205489.roa (raw, json)
Hash identifier: rVZh02WzVhnXfOe/CaOIlSTcAsOhxEh2mYuMdKaXnCA=
Subject key identifier: D4:B3:52:7C:D1:DD:6C:93:D8:B9:62:F5:62:5C:62:EF:7E:16:86:AC
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 19860497C232CDBF1555BC1B87C9C1ECEDAE729E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205489.roa
Signing time: Thu 12 Nov 2026 18:48:56 +0000
ROA not before: Thu 12 Nov 2026 18:43:56 +0000
ROA not after: Thu 11 Nov 2027 18:48:56 +0000
asID: 205489
IP address blocks: 193.142.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:86:04:97:c2:32:cd:bf:15:55:bc:1b:87:c9:c1:ec:ed:ae:72:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 12 18:43:56 2026 GMT
Not After : Nov 11 18:48:56 2027 GMT
Subject: CN=D4B3527CD1DD6C93D8B962F5625C62EF7E1686AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:ad:27:52:53:07:54:6a:36:dc:d9:cb:04:
c7:cf:ec:34:78:14:65:08:a3:e6:a0:d9:1c:2c:fa:
db:3f:57:0b:3f:39:1d:69:74:9a:78:83:8a:19:53:
69:ce:8c:f2:fe:07:f8:81:3b:b9:be:f1:d0:46:da:
50:b0:36:e2:b5:12:a0:5a:91:90:94:b7:cc:26:82:
04:1a:bd:04:c7:db:92:f8:af:76:c7:8e:3a:ed:76:
ed:64:fd:c8:50:e2:64:21:f0:06:20:6d:34:ec:3e:
6a:2e:1c:0b:77:1a:05:a6:36:94:a4:f6:ca:a8:48:
51:5b:fa:b2:6a:d6:31:44:d0:c1:4c:30:3b:8e:48:
f8:b7:ba:0d:6d:cc:bb:e5:36:05:52:f2:0e:ba:3b:
88:10:77:17:1d:1e:4f:1d:a5:74:0e:c3:b2:c5:56:
c0:5e:f8:5a:15:b1:e5:f1:ac:c1:e5:6d:5a:2b:5b:
23:62:3e:63:34:69:89:73:b8:06:af:b4:c4:26:c3:
1a:3a:59:83:d2:1a:ac:81:82:b9:4a:a5:73:78:8e:
34:12:82:f2:f6:de:0b:46:7b:32:a6:be:db:93:7e:
29:0d:e0:88:dd:75:53:0d:72:32:26:48:83:1b:b4:
ac:98:4a:a4:aa:55:ff:05:8f:72:22:2e:87:43:9f:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:52:7C:D1:DD:6C:93:D8:B9:62:F5:62:5C:62:EF:7E:16:86:AC
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.18.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0e:31:c6:bc:7f:82:ad:0a:ff:dc:01:70:00:cd:a1:4e:14:
81:7b:ac:45:c8:7e:0c:08:ce:fc:c9:7f:36:a2:cb:67:c4:a5:
b2:e6:93:00:b1:2a:60:49:41:40:63:fc:4e:16:f0:4e:ff:b3:
e1:a7:f4:2a:5f:f8:cb:4a:3d:db:f9:68:9b:ea:39:12:28:20:
ca:64:a7:27:96:28:76:a4:ec:88:59:5b:f1:33:08:d6:0c:e2:
56:29:bc:12:93:90:b1:7b:7f:ac:4d:b3:d8:12:54:de:1e:05:
4b:05:90:02:12:ed:93:2b:2c:7b:96:f2:a4:72:75:ae:49:b0:
d6:fa:c4:9d:fd:22:83:50:bc:49:fa:ee:00:ee:27:5a:a9:6e:
19:a9:7d:13:1e:cd:03:10:27:1b:2a:e7:1f:73:ec:0a:9c:0a:
bc:fb:b7:bd:40:5c:58:08:33:ed:3a:73:19:97:52:2b:fd:fa:
a9:c0:db:c8:f4:f9:57:29:df:d0:26:8e:90:fd:23:30:fb:ce:
09:6b:84:29:5c:c7:77:47:17:50:7f:55:b9:99:42:ed:85:38:
3c:40:15:96:53:bc:c8:eb:fa:e0:81:e7:4b:3d:5e:aa:fc:63:
2d:75:37:9c:b5:5d:73:04:7b:00:54:e0:e5:a0:2e:b0:bb:30:
05:fb:92:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:42:10 2026 by rpki-client