Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206491.roa
File: AS206491.roa (raw, json)
Hash identifier: wbB2ek9i8ITvSYVWtsd5jx3C3+ejjA6LTbZ56kc1634=
Subject key identifier: 56:8F:50:4B:88:30:9F:86:22:C9:14:4F:6D:62:D8:EB:A7:6A:78:C1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 698359D040E6D88224918CE7C5FFD0E5751CE3E7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206491.roa
Signing time: Thu 17 Jul 2025 07:33:20 +0000
ROA not before: Thu 17 Jul 2025 07:28:20 +0000
ROA not after: Thu 16 Jul 2026 07:33:20 +0000
asID: 206491
IP address blocks: 2a13:9500:b1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:83:59:d0:40:e6:d8:82:24:91:8c:e7:c5:ff:d0:e5:75:1c:e3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 17 07:28:20 2025 GMT
Not After : Jul 16 07:33:20 2026 GMT
Subject: CN=568F504B88309F8622C9144F6D62D8EBA76A78C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:6a:17:46:fb:2d:6e:71:55:30:f0:da:4e:
41:b2:8e:fe:26:86:9f:11:48:bf:de:c6:d1:6a:b1:
3a:54:3a:f5:1d:07:e1:1a:a1:c4:03:67:7a:bd:ac:
ff:d9:ad:41:01:a6:76:16:06:78:3f:d1:28:d8:72:
5f:1d:17:27:ef:51:4d:79:f9:f0:7b:80:73:e8:10:
6c:2b:79:24:88:9d:10:77:cb:d0:e1:d6:8f:2e:3b:
d0:c7:69:1e:bf:a4:27:15:e9:f1:8b:01:f4:84:5a:
64:e2:0e:23:6f:28:7b:59:c4:9d:77:b9:e5:fc:50:
f3:96:ff:e5:94:33:52:bb:7f:aa:2c:03:06:1a:40:
ee:38:10:a5:ba:6c:b7:34:fe:01:fc:64:76:23:7f:
ef:b4:ff:fc:14:b3:11:44:7a:6f:fb:b0:9f:1f:25:
e3:21:a6:1b:ab:57:39:66:a8:f9:a5:7a:d0:94:f7:
27:57:82:0c:f5:33:29:a9:1a:ab:c2:66:99:12:32:
b3:f4:95:4f:f3:7b:fe:f7:64:3e:d4:49:63:0b:db:
66:06:4a:56:a6:79:65:df:28:3f:a1:1d:b9:f4:91:
a8:16:33:1e:ec:53:64:e4:d2:75:1d:13:11:da:46:
94:f6:2e:bb:59:e0:a4:1a:e1:96:71:7a:9a:3f:c2:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:50:4B:88:30:9F:86:22:C9:14:4F:6D:62:D8:EB:A7:6A:78:C1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206491.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b1::/48
Signature Algorithm: sha256WithRSAEncryption
74:d4:19:7f:76:c0:29:d3:e9:a7:fc:19:d4:10:88:9b:33:b8:
c0:1f:76:d4:f0:c6:3f:dd:df:64:56:db:f0:4c:8a:8b:ec:ee:
11:5b:90:58:1c:87:fc:f3:c9:11:53:c8:be:71:9e:3c:a9:75:
cc:4d:8c:81:23:0d:5c:c0:2c:5c:cc:a0:c8:40:6a:3d:f3:0b:
34:7c:ac:d0:49:30:a0:a9:db:6a:e9:dd:05:e5:e1:8e:19:3b:
ee:5a:37:01:34:06:ad:bc:93:7c:7f:f8:40:7a:f9:a4:f9:7e:
fe:24:ec:37:bb:f8:c3:3c:9c:25:28:44:24:e4:19:1d:47:96:
4d:ac:17:27:04:42:b4:66:4d:79:34:79:29:e3:28:cf:68:2c:
8e:28:e5:83:f3:b9:ba:1c:2f:22:8d:e2:70:16:bd:2b:8c:af:
42:50:bc:6f:54:fc:bc:95:e8:ae:0b:9a:2f:83:72:be:35:6e:
57:63:30:95:b5:74:4c:5b:3b:8e:52:23:27:de:9d:27:7d:dc:
f0:6c:a1:ef:f6:5a:7b:8a:14:fb:6d:28:8b:ac:cd:bd:90:9a:
8b:b5:65:82:d7:e6:41:18:db:b0:1e:73:fd:7c:00:a2:67:e8:
e8:2f:3d:df:d3:bc:2e:68:02:8b:32:d0:30:71:5e:3b:0a:ae:
c6:ef:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:47 2025 by rpki-client