Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205380.roa
File: AS205380.roa (raw, json)
Hash identifier: /tDR5uabWlcAYk7TyfaqAk4pK6qFptzjyq0Q1OCGbUw=
Subject key identifier: FD:9A:69:59:54:F8:5E:94:97:95:A1:0C:F9:D5:1A:AD:B8:B4:AF:28
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 70E8073124B866CA0CC752EB504546FF22EB6565
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205380.roa
Signing time: Sun 12 Oct 2025 09:19:38 +0000
ROA not before: Sun 12 Oct 2025 09:14:38 +0000
ROA not after: Sun 11 Oct 2026 09:19:38 +0000
asID: 205380
IP address blocks: 178.94.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e8:07:31:24:b8:66:ca:0c:c7:52:eb:50:45:46:ff:22:eb:65:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 12 09:14:38 2025 GMT
Not After : Oct 11 09:19:38 2026 GMT
Subject: CN=FD9A695954F85E949795A10CF9D51AADB8B4AF28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:30:10:9c:6c:cb:ab:a6:2e:20:ca:bc:62:
4a:b4:e9:56:68:fc:c8:41:c5:ba:4b:7d:ab:31:9d:
56:2f:48:bd:bd:0a:56:eb:5d:02:e4:91:7b:87:8e:
09:08:8a:8a:73:9c:11:e2:80:e7:4d:5b:d8:7e:54:
98:ed:ce:ce:a5:ef:39:88:ad:27:86:86:55:eb:af:
bc:50:13:da:5f:70:ba:88:18:d0:78:a2:35:ef:6f:
86:4d:f9:8e:1c:6e:11:67:50:13:f6:2c:95:c5:9c:
43:92:bf:04:88:cf:b8:af:c9:13:d8:44:4d:11:b1:
d9:11:6b:70:68:ff:47:db:e4:77:48:32:37:df:f1:
23:fc:37:24:50:94:b0:d0:8d:61:99:d4:5d:27:96:
fa:96:76:1f:ab:a9:02:71:17:84:f2:99:81:02:46:
52:13:63:97:64:c8:9b:ba:be:ab:fb:c0:84:0d:71:
52:48:b3:82:2b:de:88:20:1b:3b:62:45:37:c7:59:
03:36:73:18:94:93:0e:1b:9a:a2:b4:74:66:6b:c3:
18:eb:46:3d:71:36:ee:f0:09:c2:a5:10:9a:41:28:
a7:d5:cb:58:2a:db:6e:6c:38:2f:d4:a4:41:d7:6b:
02:0d:d3:70:0a:cd:d6:96:35:c3:88:54:c8:e8:cc:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9A:69:59:54:F8:5E:94:97:95:A1:0C:F9:D5:1A:AD:B8:B4:AF:28
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205380.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.206.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a5:ba:bb:0d:39:1d:96:0b:0e:66:68:ac:6c:89:73:c2:79:
cb:87:cf:c2:80:a6:d6:31:6b:62:b9:ba:4a:ef:7e:88:01:e5:
60:23:51:ee:50:fc:98:48:d3:5d:ad:3e:89:e2:63:68:1d:fa:
98:5e:a4:28:23:b5:f1:f0:97:5e:ed:32:f7:be:95:08:30:3a:
39:f1:38:bb:4f:4a:d8:67:b3:59:d3:67:9c:b2:2d:fd:89:b8:
bf:f9:98:f1:5e:07:69:65:9a:48:9d:99:8a:8c:d9:ba:8d:0c:
78:e8:c1:15:e1:5d:1f:a9:65:a8:ed:79:0e:d9:ef:d8:d0:be:
3c:9d:3e:ac:97:2d:45:12:c5:67:6e:7f:fa:95:5a:57:cb:3b:
3e:af:4c:95:1a:ed:4c:34:b3:2b:55:0d:50:4f:90:9d:22:e7:
7c:20:cd:e7:ac:46:3c:e0:d8:a2:7f:34:9f:91:42:a1:a4:da:
1d:91:e8:ed:74:4f:0b:92:71:9c:89:53:96:d1:84:b4:63:f2:
78:f6:a7:8e:08:36:c2:5d:fd:1c:9a:68:3a:45:5f:62:ac:fe:
e1:84:ec:7e:bd:ee:d2:86:b7:21:4a:9b:4f:45:cb:ef:8f:0d:
6b:6b:77:14:22:1a:03:da:64:0f:fc:24:c8:f2:0a:7d:14:d3:
a8:0e:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:33:11 2025 by rpki-client