Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206781.roa
File: AS206781.roa (raw, json)
Hash identifier: CsMUwrCtVnMZZ4cYl8jzDOyyyVEDnBSe3PNmoQn+K7Q=
Subject key identifier: C8:4D:78:7B:18:72:79:0F:6A:8E:C1:3D:89:1B:F5:91:1C:F6:FD:01
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7193ADE4B2E273168FAC8BB631A7D7E866550B59
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206781.roa
Signing time: Sun 29 Jun 2025 16:05:37 +0000
ROA not before: Sun 29 Jun 2025 16:00:37 +0000
ROA not after: Sun 28 Jun 2026 16:05:37 +0000
asID: 206781
IP address blocks: 179.61.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:93:ad:e4:b2:e2:73:16:8f:ac:8b:b6:31:a7:d7:e8:66:55:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 29 16:00:37 2025 GMT
Not After : Jun 28 16:05:37 2026 GMT
Subject: CN=C84D787B1872790F6A8EC13D891BF5911CF6FD01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:a0:cf:df:d2:72:f9:cd:56:7d:85:f4:0b:
51:47:83:0a:00:d8:8d:dc:ba:41:d0:cb:9f:49:6c:
6b:d2:9d:1f:55:ea:d2:04:e2:3d:d4:c7:6a:35:31:
75:13:c8:bc:e7:5e:d4:31:18:e9:59:8a:d2:6e:a9:
19:c9:4c:0f:56:88:1a:41:bf:cb:e2:e6:b7:41:c2:
fb:e8:0d:50:d4:ee:c4:34:0d:bd:68:72:7a:89:4d:
55:dd:98:2a:71:d7:b9:3e:c8:63:cc:f4:d5:39:51:
d4:21:8e:03:53:c5:0d:2f:18:67:86:ad:07:3b:fd:
54:de:ce:72:48:a4:c0:93:38:df:ad:c6:18:37:51:
fe:bb:91:d4:94:00:4c:12:1c:ed:78:ac:46:8d:63:
ef:b9:e1:77:20:fb:43:dc:ca:76:77:85:20:9b:8d:
9c:9f:a8:5f:ef:68:1f:75:6b:30:a3:74:5c:07:a0:
a2:d2:cc:6d:e6:b7:83:25:0d:b4:78:8e:f1:86:02:
95:c4:15:4e:16:da:aa:df:04:4b:14:20:29:90:d0:
8a:e7:62:44:d0:91:40:a0:31:ba:6e:3a:ee:50:d5:
35:1f:e6:5f:dc:58:21:75:ba:38:25:6f:03:e2:80:
83:8f:d1:d6:65:ea:f6:b9:2f:b4:4c:01:18:92:37:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:78:7B:18:72:79:0F:6A:8E:C1:3D:89:1B:F5:91:1C:F6:FD:01
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7e:78:af:e2:7d:18:2d:30:f8:2d:28:58:a2:3d:e7:62:9b:
cd:97:72:93:72:70:d0:1b:d1:2e:c2:5e:a2:73:a6:8b:0d:37:
60:c7:61:0f:ba:ca:1f:dd:e1:a3:59:21:1f:e4:7a:78:f7:98:
dc:f9:5e:d4:d8:bf:bc:db:fd:ed:2d:c7:90:70:c3:b1:7a:60:
b2:e9:f5:86:17:9a:b8:fa:ab:c7:84:79:92:94:28:a6:44:20:
be:13:b1:73:66:f6:00:38:46:56:ed:ac:09:0a:52:7c:8f:99:
72:fa:29:b3:a2:6f:e7:90:29:44:b2:e1:1b:d1:33:37:ab:c5:
82:15:6c:bf:0d:15:08:af:59:28:b0:2f:71:82:61:18:e0:4f:
fb:12:70:c7:a1:99:0f:6f:7a:02:df:81:bc:cc:bc:40:a4:2f:
12:d9:ce:cc:1f:27:fd:d8:63:69:91:ae:f0:e4:a4:45:4b:93:
22:b4:66:72:b5:ef:49:63:8b:f1:3e:4b:3c:d7:60:de:10:8d:
27:70:5f:a1:18:47:a3:af:43:12:bb:33:cc:c6:ab:a8:ed:60:
d1:d3:70:d9:0d:5a:4e:4d:83:91:76:21:e3:98:55:83:cb:60:
bb:b1:78:11:76:83:36:58:f7:83:72:e6:93:8d:46:79:4e:c9:
8e:c5:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:11:08 2025 by rpki-client