Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206675.roa
File: AS206675.roa (raw, json)
Hash identifier: yqWztRbPYBfpTv8YApnSpZNMScBcKBPil3gfvD9lzis=
Subject key identifier: 45:B9:20:A3:78:F1:F8:BC:B5:92:59:2C:1B:D6:2A:D4:7C:13:2C:8D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3F68CD16865365FFCB920B86E5D73A96B03F9D3B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206675.roa
Signing time: Tue 31 Mar 2026 08:30:05 +0000
ROA not before: Tue 31 Mar 2026 08:25:05 +0000
ROA not after: Tue 30 Mar 2027 08:30:05 +0000
asID: 206675
IP address blocks: 82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
178.83.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:68:cd:16:86:53:65:ff:cb:92:0b:86:e5:d7:3a:96:b0:3f:9d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 31 08:25:05 2026 GMT
Not After : Mar 30 08:30:05 2027 GMT
Subject: CN=45B920A378F1F8BCB592592C1BD62AD47C132C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:cc:2b:9b:6a:a3:53:97:cf:71:21:f6:66:
dc:e0:1f:b5:3c:83:7d:a6:1e:ad:d1:51:70:c7:62:
ee:be:4a:a1:a8:a0:5a:69:1e:c1:9b:fb:3a:6b:d2:
93:84:7c:b8:0e:5e:04:89:66:e3:c9:a4:b0:2a:a0:
b5:89:5a:65:7f:a5:01:8c:bf:1f:46:f2:63:3c:db:
cd:7e:5b:3f:84:92:f2:50:c6:d6:77:e8:b3:23:90:
8a:5d:fd:61:3e:86:9b:7b:f7:9f:72:d4:5d:91:b6:
81:46:c0:fe:4d:e3:78:ee:97:d9:ca:b6:18:db:53:
56:fd:93:ba:2f:f3:bf:33:0a:0f:47:f6:39:b1:11:
98:e5:04:bd:6e:e6:42:c9:c0:7f:87:b1:41:ed:d0:
e6:a2:9c:0e:b7:cb:10:29:d2:fb:ba:88:70:44:38:
09:ef:cc:1a:e0:ed:22:ea:a5:9c:75:9c:14:88:d5:
61:de:e8:92:95:bc:2f:b5:7c:4b:22:19:a0:af:b2:
7b:0c:7e:4f:14:0f:83:e6:2f:41:e0:e1:7a:27:61:
b6:97:e2:c1:8b:b1:af:0f:4e:84:2c:aa:fa:e2:20:
5d:a7:25:32:25:1f:ac:bf:ba:b9:60:66:32:30:d7:
c1:5c:8a:cb:37:61:b1:50:67:50:88:5d:8f:a0:00:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B9:20:A3:78:F1:F8:BC:B5:92:59:2C:1B:D6:2A:D4:7C:13:2C:8D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
178.83.82.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:eb:9f:1f:c8:e5:f5:04:f9:3c:60:7e:e7:93:29:d9:22:ce:
68:78:d6:6b:c9:5d:a6:91:84:27:db:c1:bd:62:be:45:1c:ee:
3a:56:30:14:da:af:d3:18:77:a3:26:f4:d1:d3:24:bd:aa:d4:
a9:10:32:57:e7:10:76:64:f1:8c:60:61:bc:14:7e:12:8b:23:
0d:57:cd:28:1f:87:6b:c5:c9:85:16:69:84:c3:47:81:80:24:
0d:96:07:ca:12:b5:11:89:28:e4:bc:bc:ce:d4:b9:eb:98:98:
fb:c8:53:53:b5:10:d7:53:80:65:12:b4:8d:65:73:28:e0:45:
1a:48:3e:a2:10:c0:38:f0:0f:b8:4b:84:b8:f7:5a:93:47:21:
3f:0a:38:24:4d:2e:e8:0f:b3:67:c8:7f:ee:f3:db:68:31:78:
41:a5:34:9a:72:69:ae:90:a7:d0:32:0f:0b:49:cd:8b:16:a0:
fc:bb:81:a7:f0:64:57:33:d8:8a:73:8f:d6:05:f7:29:00:47:
8c:77:f8:a1:dd:cf:32:a0:38:97:ee:3a:57:4f:aa:68:9f:3a:
28:51:77:7d:57:1b:31:f9:b2:a1:98:e8:4b:48:b4:d8:5e:0c:
5f:1b:77:6b:9b:41:7c:86:6b:ec:79:17:2c:a3:c9:69:72:df:
2d:3b:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:00:55 2026 by rpki-client