Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205220.roa
File: AS205220.roa (raw, json)
Hash identifier: CuqYMYghFnJ2bAkUom6WvQUG/dqXcU5Ym3+Ya8MvwwI=
Subject key identifier: 5D:6E:08:8D:1C:2D:B5:C9:77:C7:B4:75:28:D6:C1:E8:7E:98:24:7F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 17E0D62D2F04EBDA3EC729EF3D38D95AB6CC63BF
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205220.roa
Signing time: Tue 30 Sep 2025 15:55:07 +0000
ROA not before: Tue 30 Sep 2025 15:50:07 +0000
ROA not after: Tue 29 Sep 2026 15:55:07 +0000
asID: 205220
IP address blocks: 141.11.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e0:d6:2d:2f:04:eb:da:3e:c7:29:ef:3d:38:d9:5a:b6:cc:63:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 30 15:50:07 2025 GMT
Not After : Sep 29 15:55:07 2026 GMT
Subject: CN=5D6E088D1C2DB5C977C7B47528D6C1E87E98247F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:90:8b:dd:8b:25:fb:36:4d:b0:8f:f1:12:59:
b2:ee:91:70:d7:56:b0:cf:ff:6f:e1:18:c8:24:68:
fb:14:c1:86:b3:65:d0:da:b5:88:9a:55:bb:a2:22:
cb:f5:ba:b6:07:a7:fa:00:c5:58:be:5c:bd:83:05:
99:5a:a7:94:75:55:3b:47:de:24:54:ff:19:ed:7d:
69:c8:76:90:37:14:0b:36:55:d6:06:c6:50:1d:12:
76:8b:f9:88:9a:f5:6e:f8:84:eb:96:23:33:ae:a5:
2b:59:43:9d:b8:c5:1a:ef:fe:c8:07:17:18:bf:b1:
f4:1a:53:ca:58:5a:c1:92:f9:d0:14:ff:03:2d:09:
27:38:d1:1f:c0:5a:e5:3a:84:06:4c:a4:2b:5e:b5:
dc:b6:e7:b5:74:3f:79:19:36:39:a0:58:f5:e9:62:
fc:1b:3a:da:a3:49:f2:22:3c:d1:0a:63:04:ad:24:
87:ae:ec:a4:d8:88:e0:b6:c7:5a:59:f4:d5:28:1b:
08:52:08:eb:a7:b3:d7:15:ce:3c:28:29:56:1e:e2:
5c:cb:48:d4:48:46:70:9f:45:07:d0:96:9d:c6:d2:
7a:94:41:57:89:79:37:27:de:d3:db:12:33:30:d8:
a6:3f:5a:ea:6c:8f:52:70:ec:46:a6:4f:c3:72:dc:
60:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:08:8D:1C:2D:B5:C9:77:C7:B4:75:28:D6:C1:E8:7E:98:24:7F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205220.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.88.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a5:7b:8a:af:4a:cc:fb:62:82:5a:85:60:6f:d2:3b:d2:82:
18:f4:55:2c:3f:a8:82:7c:56:92:1c:29:dd:ba:01:fb:4c:4b:
c3:dd:55:f8:d3:01:3e:be:b0:3b:f0:2a:95:e6:48:8c:c6:07:
26:fe:98:6c:a9:8f:53:58:21:b5:f4:8d:b3:65:11:c3:72:c7:
cb:8d:39:b2:e0:fa:36:88:ef:fd:69:24:99:56:2b:f2:51:7c:
99:a7:d3:cf:ad:b1:e1:6a:40:8e:91:d9:f8:0f:db:02:c0:96:
3c:c8:92:70:e3:8a:76:da:ed:a0:eb:ac:84:18:f8:b3:fe:b9:
6a:c9:51:fd:b8:53:48:fb:a6:2b:e3:b7:f3:fd:31:bc:12:f2:
e3:1b:be:da:e7:68:f5:5e:9d:9e:f2:8c:86:1d:50:e2:25:74:
67:e1:6e:71:59:7a:43:19:09:4c:12:9f:dc:dd:f5:00:30:06:
6c:3d:97:fd:62:c3:4f:fd:77:67:e6:77:fd:a9:a8:25:46:7f:
f3:3b:ca:ea:cd:28:8b:94:44:91:63:6d:36:1b:2d:c4:21:6b:
63:e9:d5:39:a3:b5:86:3b:00:c4:05:23:32:ef:60:ac:0c:74:
f5:e3:57:69:25:be:0a:7c:13:08:7e:b2:64:28:0f:fa:f4:d8:
54:e6:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:50 2025 by rpki-client