Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: H9UbCFx3LIx+egepr4Kx3zQEB2FobHgiIw78xbnFnRo=
Subject key identifier: 88:B4:24:41:7C:16:92:4E:53:E6:AD:10:29:E9:C7:44:5F:62:8D:7D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5296A50906D591B95DDFBD84388A3492CED35041
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS206092.roa
Signing time: Fri 25 Sep 2026 08:50:17 +0000
ROA not before: Fri 25 Sep 2026 08:45:17 +0000
ROA not after: Fri 24 Sep 2027 08:50:17 +0000
asID: 206092
IP address blocks: 51.241.21.0/24 maxlen: 24
94.118.2.0/24 maxlen: 24
94.118.9.0/24 maxlen: 24
94.118.14.0/24 maxlen: 24
94.118.25.0/24 maxlen: 24
94.118.37.0/24 maxlen: 24
94.118.39.0/24 maxlen: 24
94.118.43.0/24 maxlen: 24
94.118.49.0/24 maxlen: 24
94.118.52.0/24 maxlen: 24
94.118.53.0/24 maxlen: 24
94.118.59.0/24 maxlen: 24
94.118.64.0/24 maxlen: 24
94.118.65.0/24 maxlen: 24
94.118.74.0/24 maxlen: 24
94.118.79.0/24 maxlen: 24
94.118.80.0/24 maxlen: 24
94.118.81.0/24 maxlen: 24
94.118.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:96:a5:09:06:d5:91:b9:5d:df:bd:84:38:8a:34:92:ce:d3:50:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 25 08:45:17 2026 GMT
Not After : Sep 24 08:50:17 2027 GMT
Subject: CN=88B424417C16924E53E6AD1029E9C7445F628D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d7:ca:15:ee:c6:61:8f:b3:ee:9b:3b:bf:10:
95:81:9c:9e:1e:b0:b5:fe:58:0f:43:46:05:a8:b3:
c9:c3:0a:0b:59:fa:a8:e7:9f:98:da:8e:02:08:ee:
78:06:b9:12:93:6e:30:cb:de:86:9b:71:7e:62:f2:
0b:89:32:59:19:2f:eb:d0:c5:8a:9d:61:d0:2c:99:
d9:66:37:dc:43:67:15:d9:80:a3:7f:85:8b:e1:dd:
13:13:f6:45:bb:93:3b:0e:fa:52:79:d3:af:be:cc:
43:3f:ac:2f:52:12:ac:74:49:7f:ee:0f:3b:7a:f1:
2a:6a:da:42:5d:ec:00:71:56:34:50:aa:34:c0:c8:
0d:9a:41:85:86:3a:0a:ab:a2:b3:90:ab:16:5b:f0:
7c:d7:98:bb:fe:dd:23:3d:de:b3:e5:da:c4:73:e8:
e6:eb:a2:60:2d:30:e8:fc:ad:85:0e:26:4f:2b:55:
7e:59:04:31:50:e9:43:a6:44:41:bf:84:46:10:18:
7a:15:74:20:63:1e:92:e6:46:fc:44:34:98:0a:fa:
b6:00:00:5d:f6:9b:2b:2d:4f:0d:eb:33:60:34:1c:
2e:aa:df:e2:a9:b7:8e:79:96:cc:3d:42:df:a2:2e:
70:11:a7:5e:57:fb:ed:83:37:45:f2:b1:67:ae:b7:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B4:24:41:7C:16:92:4E:53:E6:AD:10:29:E9:C7:44:5F:62:8D:7D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.21.0/24
94.118.2.0/24
94.118.9.0/24
94.118.14.0/24
94.118.25.0/24
94.118.37.0/24
94.118.39.0/24
94.118.43.0/24
94.118.49.0/24
94.118.52.0/23
94.118.59.0/24
94.118.64.0/23
94.118.74.0/24
94.118.79.0-94.118.81.255
94.118.88.0/24
Signature Algorithm: sha256WithRSAEncryption
02:91:6f:62:58:28:b0:fb:b6:64:e5:85:b5:ef:01:e0:ab:d5:
a3:0e:73:a1:5c:35:99:ce:0e:77:63:ba:3c:12:c6:4c:58:1d:
6e:a3:11:80:84:b7:c8:78:04:ad:50:e3:2a:e4:fb:45:e7:a8:
45:2d:40:a0:a0:b4:7f:bd:a5:06:f3:a9:a0:06:3b:52:c6:c4:
4b:1c:56:11:70:c6:d0:37:f0:1b:06:dc:96:87:7f:74:bf:41:
dc:65:16:9d:f3:db:45:ed:ae:e5:b9:0e:4a:7a:a4:6c:55:f9:
b0:b6:fc:d8:4b:b3:24:cc:b7:18:e5:5f:65:a0:c1:87:20:10:
e0:40:e3:15:07:35:98:cb:fc:a2:b4:26:fe:4d:cf:37:70:11:
9b:54:d4:a9:5b:49:03:01:d9:ec:aa:19:bd:ef:2b:7f:2e:82:
56:3c:9f:f7:05:5d:03:e7:7e:3c:1f:5a:6c:5b:67:98:2f:ae:
47:36:29:53:0c:44:c1:32:cf:e9:24:41:9e:3d:04:5c:ca:97:
fe:cd:60:15:87:89:27:33:a6:1a:01:39:e8:b5:d0:53:be:df:
d9:55:d2:9f:a0:33:17:2c:15:ed:17:9d:bb:f2:ae:3c:23:09:
dc:04:c6:6c:d8:fa:bd:84:b0:90:f8:26:5e:01:76:e3:da:2a:
6f:73:23:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:29:55 2026 by rpki-client