Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206735.roa
File: AS206735.roa (raw, json)
Hash identifier: Z5/DFsveQJ/FuxA7kDcpUZisputxhrgrkyWdGNRrehk=
Subject key identifier: B1:80:10:7D:30:AF:F6:26:CC:0F:56:89:68:76:CE:36:29:3A:D0:C3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1608769745EEBB43ED1412F81A33A8096CB4A51D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206735.roa
Signing time: Fri 25 Jul 2025 12:23:57 +0000
ROA not before: Fri 25 Jul 2025 12:18:57 +0000
ROA not after: Fri 24 Jul 2026 12:23:57 +0000
asID: 206735
IP address blocks: 82.29.43.0/24 maxlen: 24
82.29.44.0/24 maxlen: 24
82.29.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 15:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:08:76:97:45:ee:bb:43:ed:14:12:f8:1a:33:a8:09:6c:b4:a5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 25 12:18:57 2025 GMT
Not After : Jul 24 12:23:57 2026 GMT
Subject: CN=B180107D30AFF626CC0F56896876CE36293AD0C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:61:d6:9b:71:4d:20:ac:cb:03:26:45:4a:
a3:14:58:4e:b9:3d:12:df:18:bb:6f:d8:d9:33:cc:
49:80:45:dc:28:4d:b4:3a:39:14:a6:21:f1:a3:9e:
f3:5d:62:bf:8e:d3:2f:70:aa:4a:eb:f3:cd:40:8d:
d5:ef:4f:69:76:c9:1e:3c:10:3e:a3:20:3e:c9:d6:
59:78:9e:39:f7:92:14:d0:dc:0a:e5:a3:4a:a1:7f:
d4:59:a7:62:f6:0f:eb:d1:f3:ad:e3:7f:05:ba:9d:
b9:f9:9b:90:a9:b1:56:e4:25:77:d6:ad:d8:dd:eb:
f5:af:e5:80:ff:f4:f9:e5:86:45:c0:94:00:f9:16:
4c:17:40:09:57:bd:d1:06:75:34:bd:d2:5f:52:3e:
1e:c8:52:9a:84:72:55:82:a4:eb:5b:0a:dd:0d:5c:
01:47:3e:f8:b9:47:b7:07:4d:76:1c:b7:7b:43:95:
af:3e:eb:66:4c:d8:4a:f4:a6:7e:27:80:f9:e7:1d:
b3:40:78:95:66:b1:95:62:f0:f5:a7:d7:80:57:66:
52:7f:34:7c:ce:8c:45:42:5b:e3:45:f3:c8:50:be:
67:ac:77:61:75:c5:6e:fc:85:a2:f7:0b:b0:e8:29:
42:e2:dc:20:cc:55:ba:66:6e:17:41:f3:8d:21:e7:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:80:10:7D:30:AF:F6:26:CC:0F:56:89:68:76:CE:36:29:3A:D0:C3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.43.0-82.29.44.255
82.29.50.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d1:ac:b9:de:ca:26:cf:69:59:fa:37:3d:c6:f6:2e:c8:0f:
2d:3f:d6:de:52:9a:32:26:68:62:b0:bf:e2:34:47:11:27:68:
e8:70:24:88:01:03:b5:87:c2:dc:41:29:62:25:c7:68:f3:5e:
4f:c9:40:b1:69:b5:b6:b6:ef:7f:27:ad:fe:2a:c2:e5:ac:02:
8a:9f:df:db:c0:eb:3f:35:10:61:70:5d:c4:a0:0e:bb:0e:4b:
ae:44:7c:9a:df:34:94:ea:49:3c:f1:81:1e:73:39:95:21:0d:
20:9d:2c:9e:46:43:55:37:ae:3a:d3:d4:32:c4:84:e9:c0:c1:
33:ca:84:65:cd:c7:b3:16:77:ca:2f:0f:a2:37:82:17:80:b6:
9f:3f:65:b1:1c:3e:9a:40:73:26:56:15:60:c2:7b:90:0c:f1:
28:7c:cb:d8:b2:5e:61:d0:5d:a7:dd:af:9b:ce:03:72:f1:5c:
45:04:f0:59:5f:35:a9:28:5e:e5:50:d1:6e:db:ba:d3:cd:39:
78:d3:69:ac:2d:dd:07:08:c0:b5:42:7a:da:c0:3d:49:f9:6d:
4e:69:0e:7b:30:19:18:4b:19:13:c4:79:f3:1f:50:97:81:e7:
23:7b:49:92:c7:65:34:8c:11:ae:e4:5f:f0:56:0e:7c:50:c5:
f9:5a:8c:b5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUFgh2l0Xuu0PtFBL4GjOoCWy0pR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA3MjUxMjE4NTdaFw0yNjA3MjQxMjIzNTdaMDMxMTAvBgNV
BAMTKEIxODAxMDdEMzBBRkY2MjZDQzBGNTY4OTY4NzZDRTM2MjkzQUQwQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODmHWm3FNIKzLAyZFSqMUWE65
PRLfGLtv2NkzzEmARdwoTbQ6ORSmIfGjnvNdYr+O0y9wqkrr881AjdXvT2l2yR48
ED6jID7J1ll4njn3khTQ3Arlo0qhf9RZp2L2D+vR863jfwW6nbn5m5CpsVbkJXfW
rdjd6/Wv5YD/9PnlhkXAlAD5FkwXQAlXvdEGdTS90l9SPh7IUpqEclWCpOtbCt0N
XAFHPvi5R7cHTXYct3tDla8+62ZM2Er0pn4ngPnnHbNAeJVmsZVi8PWn14BXZlJ/
NHzOjEVCW+NF88hQvmesd2F1xW78haL3C7DoKULi3CDMVbpmbhdB840h51JxAgMB
AAGjggIYMIICFDAdBgNVHQ4EFgQUsYAQfTCv9ibMD1aJaHbONik60MMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA2NzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABS
HSsDBABSHSwDBABSHTIwDQYJKoZIhvcNAQELBQADggEBAJHRrLneyibPaVn6Nz3G
9i7IDy0/1t5SmjImaGKwv+I0RxEnaOhwJIgBA7WHwtxBKWIlx2jzXk/JQLFptba2
738nrf4qwuWsAoqf39vA6z81EGFwXcSgDrsOS65EfJrfNJTqSTzxgR5zOZUhDSCd
LJ5GQ1U3rjrT1DLEhOnAwTPKhGXNx7MWd8ovD6I3gheAtp8/ZbEcPppAcyZWFWDC
e5AM8Sh8y9iyXmHQXafdr5vOA3LxXEUE8FlfNakoXuVQ0W7butPNOXjTaawt3QcI
wLVCetrAPUn5bU5pDnswGRhLGRPEefMfUJeB5yN7SZLHZTSMEa7kX/BWDnxQxfla
jLU=
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:01:07 2025 by rpki-client