Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205733.roa
File: AS205733.roa (raw, json)
Hash identifier: b12iiDQIzppZ7UWd60g1fyR5/xbbOoHwEVv/ozt3nqQ=
Subject key identifier: ED:52:7D:B8:1B:D5:4F:EF:F9:1F:FC:42:AA:47:53:E9:9A:5B:86:3C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 28481CC5F6B638E386407BC6B66A321FEF9FED6A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205733.roa
Signing time: Thu 26 Jun 2025 19:04:53 +0000
ROA not before: Thu 26 Jun 2025 18:59:53 +0000
ROA not after: Thu 25 Jun 2026 19:04:53 +0000
asID: 205733
IP address blocks: 91.124.37.0/24 maxlen: 24
92.112.71.0/24 maxlen: 24
95.134.31.0/24 maxlen: 24
95.134.70.0/24 maxlen: 24
95.135.173.0/24 maxlen: 24
178.92.96.0/24 maxlen: 24
178.92.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:48:1c:c5:f6:b6:38:e3:86:40:7b:c6:b6:6a:32:1f:ef:9f:ed:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 26 18:59:53 2025 GMT
Not After : Jun 25 19:04:53 2026 GMT
Subject: CN=ED527DB81BD54FEFF91FFC42AA4753E99A5B863C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:fe:8c:e0:45:57:e6:c2:e0:ff:97:be:50:
2e:84:85:22:e9:9f:59:53:a6:af:a4:70:43:19:34:
2e:68:b4:81:e3:92:d6:f9:20:a0:06:23:e8:f2:e1:
1d:f7:20:67:08:f1:a9:c9:95:6c:aa:5c:52:36:c0:
18:d6:1c:6d:11:4e:dd:51:cc:7c:4d:11:92:5c:e3:
f4:00:85:b1:5a:e4:5c:77:ef:38:3a:ca:90:ba:96:
7d:84:4a:9a:05:8f:5b:b6:16:06:6e:fe:e6:d7:14:
85:59:0e:6a:1c:12:19:d8:94:e6:83:6e:c2:8c:90:
dd:dd:be:34:a5:99:76:63:85:e0:62:a3:55:0f:4e:
0e:23:78:14:de:1e:8b:17:9c:54:9f:b1:31:ef:74:
45:ee:f8:c3:0c:a2:7b:df:f9:56:88:cb:ee:39:1a:
b5:f0:83:4e:b2:64:a7:dc:23:6d:57:90:61:87:1f:
a6:74:af:80:bf:4d:69:75:9f:60:5d:4e:f8:3d:29:
dc:c4:1d:bd:79:bf:b2:8e:2d:54:6e:6a:e0:d2:2c:
cc:0f:03:15:a4:ea:76:37:4a:7f:e8:c0:da:87:8d:
c3:67:48:36:64:fb:a4:a0:67:25:fb:1a:6a:d5:a1:
71:cb:0f:77:94:e3:8a:47:b9:18:0e:f5:4d:3f:6d:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:7D:B8:1B:D5:4F:EF:F9:1F:FC:42:AA:47:53:E9:9A:5B:86:3C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.37.0/24
92.112.71.0/24
95.134.31.0/24
95.134.70.0/24
95.135.173.0/24
178.92.96.0/24
178.92.255.0/24
Signature Algorithm: sha256WithRSAEncryption
27:4f:6f:88:41:cf:03:46:d3:7b:10:98:de:00:5d:82:11:b7:
ee:c7:7d:0e:19:75:cd:c6:97:80:f2:d4:f7:34:6f:a8:f0:c4:
9b:de:5d:5e:bc:25:83:a5:df:cf:ca:d5:81:8d:67:e9:9f:72:
d9:6a:72:a0:5e:35:e9:03:b1:15:cd:20:bc:23:31:da:75:42:
be:18:96:9c:ba:67:09:e7:09:6c:12:0d:d9:1b:ff:77:fc:7c:
05:47:b0:cb:74:f5:26:f1:61:c6:56:dd:ca:8d:a8:ec:ef:2b:
86:49:8e:94:c8:b0:12:0e:3d:bd:29:63:2c:7d:88:ca:63:ca:
0b:13:84:42:64:6c:a5:62:5f:ed:8e:3c:cb:57:58:b2:71:70:
4c:71:0f:fd:b2:36:bb:a7:68:cc:4f:54:c5:4b:71:a1:a0:03:
79:4e:8d:4f:9a:fc:45:85:09:68:e6:94:c3:fd:c3:03:1d:69:
10:05:5c:ba:15:0f:1c:d0:14:c5:6f:ff:1b:a1:63:5c:77:2d:
32:05:cb:83:c3:98:ee:6c:dd:2d:73:cf:2e:49:75:1e:97:77:
d2:c3:f7:1a:af:60:21:5d:97:ce:84:32:94:99:4f:82:96:24:
38:2a:0b:5e:89:60:c5:91:43:25:6a:dd:46:87:33:61:a3:3d:
b0:66:2b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:04:43 2025 by rpki-client