Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205886.roa
File: AS205886.roa (raw, json)
Hash identifier: KX4Iv8GlP/y9wmqPLbSfI58BMhSf/g42Y1C7BtJwlkI=
Subject key identifier: D4:85:0D:54:A9:AF:C9:73:8C:0F:3E:38:58:D2:BC:D4:ED:C0:4D:2C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 37905C32663359930D2C627EDC1DE8FBACBE6F99
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205886.roa
Signing time: Sat 11 Oct 2025 03:39:38 +0000
ROA not before: Sat 11 Oct 2025 03:34:38 +0000
ROA not after: Sat 10 Oct 2026 03:39:38 +0000
asID: 205886
IP address blocks: 141.11.63.0/24 maxlen: 24
194.60.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:90:5c:32:66:33:59:93:0d:2c:62:7e:dc:1d:e8:fb:ac:be:6f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 11 03:34:38 2025 GMT
Not After : Oct 10 03:39:38 2026 GMT
Subject: CN=D4850D54A9AFC9738C0F3E3858D2BCD4EDC04D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:a5:fc:a4:41:98:3b:67:00:69:3d:54:b9:
95:e4:20:73:8c:3a:81:f7:9a:fe:53:0d:96:72:8f:
ff:2d:2d:fe:5c:79:fc:25:be:25:40:a5:c0:b6:b8:
5c:95:d6:ef:6e:93:d7:a7:9a:7c:20:44:98:3e:7e:
c4:a6:4c:a2:1f:1d:69:b2:0c:4c:7f:6a:fe:8d:82:
ba:9a:37:d6:90:4e:c7:bd:12:1f:82:e1:eb:d7:27:
70:f8:28:44:8c:fd:b7:22:7f:5b:e7:33:ba:22:5c:
ab:67:18:6d:6d:a2:22:ee:a6:1c:4d:7a:a7:45:af:
ce:9b:9b:37:29:ca:1b:e6:f4:6d:1a:7c:ce:8e:67:
99:25:48:c6:f6:b0:4b:92:11:8d:df:79:98:09:0f:
0c:74:43:45:93:56:c1:22:77:82:c8:19:b8:9a:b9:
cb:d5:b6:6e:16:e4:3b:73:ac:a6:fb:4b:ba:00:45:
80:9d:81:12:a2:d3:55:ab:d0:3e:be:01:1c:24:8f:
c9:72:2a:37:03:4d:ef:2f:00:07:ab:f0:ca:e2:1b:
1e:14:44:b0:8d:d4:b2:08:af:c9:fe:a1:aa:74:26:
ac:5c:fb:a7:03:80:ed:47:e4:0a:de:fe:91:54:08:
42:e9:c8:1e:97:c9:da:81:e2:dd:6e:df:df:60:e1:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:0D:54:A9:AF:C9:73:8C:0F:3E:38:58:D2:BC:D4:ED:C0:4D:2C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.63.0/24
194.60.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:6d:7d:8d:f0:b2:41:03:a8:be:e4:54:9a:2d:d2:55:4a:85:
8c:42:0d:73:f7:87:f1:d2:85:70:0b:35:2c:71:9f:26:0d:7b:
0f:bc:3a:11:f2:4e:c3:24:11:c1:84:58:ca:28:3d:98:c7:fd:
9b:1e:79:57:f6:c6:8a:f1:88:f8:aa:51:69:f4:f4:1c:76:1c:
32:34:fc:ee:95:2e:46:d7:df:bd:88:14:d6:a1:c4:23:56:73:
3d:17:94:14:b7:16:5d:c9:33:0a:c1:3e:45:4c:f5:1b:29:af:
f0:b9:3f:3f:10:11:a9:d8:83:70:9b:ed:0a:9f:9f:f3:20:95:
b9:ce:10:5d:10:87:f9:2e:a8:79:15:1b:50:7c:cc:67:7f:d1:
66:92:5c:4c:00:6e:0a:e0:31:1e:56:70:bd:60:29:6f:e8:c3:
0b:fb:8e:87:12:79:ca:33:52:26:57:d5:f8:ad:9d:8b:61:1e:
18:ec:f3:ea:ee:01:ef:85:a7:09:5d:2c:b6:ab:d7:2c:ed:4f:
86:55:9d:f1:51:7c:c4:65:dd:12:2f:73:f3:ad:61:16:4a:5e:
2c:75:9b:6d:11:11:c5:5f:cf:19:31:5a:e0:06:6c:26:1c:60:
62:ec:11:f8:94:ca:27:68:5a:0c:0c:59:fa:fe:9b:04:32:8d:
ae:d7:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:48 2025 by rpki-client