Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: T56G+sGQaVGhbpxf98dYf1lyqJu4WMF3XCKPb+qKJcM=
Subject key identifier: 5E:56:04:20:6B:E7:AB:DB:F7:02:DB:16:F1:2D:A1:E4:BD:8D:FC:39
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 129ADA632424ED088125C984495A63A73B6B2E06
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
Signing time: Fri 28 Aug 2026 07:12:33 +0000
ROA not before: Fri 28 Aug 2026 07:07:33 +0000
ROA not after: Fri 27 Aug 2027 07:12:33 +0000
asID: 206092
IP address blocks: 146.103.39.0/24 maxlen: 24
155.117.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:9a:da:63:24:24:ed:08:81:25:c9:84:49:5a:63:a7:3b:6b:2e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 28 07:07:33 2026 GMT
Not After : Aug 27 07:12:33 2027 GMT
Subject: CN=5E5604206BE7ABDBF702DB16F12DA1E4BD8DFC39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:70:a9:ba:c8:7f:03:b0:90:a4:c1:78:21:
6a:29:72:1f:9d:fd:6f:5e:d2:74:53:e7:70:a9:6c:
6d:18:32:b6:cb:93:b1:f4:fe:57:74:ce:a3:a6:33:
a9:4a:50:ed:2b:b9:0c:73:f0:c6:0d:e5:ad:ee:cf:
4a:d6:34:ca:78:1e:a8:e2:07:52:8e:d7:4e:b9:fb:
6a:58:bd:a6:51:f6:68:f8:75:3b:bb:36:8a:96:4b:
12:18:1a:35:6c:98:31:ca:e3:04:58:bf:0b:6b:de:
8c:83:5c:f7:48:be:80:0f:e2:d2:41:bf:17:d0:88:
5b:d5:9d:b4:70:c3:ac:bb:5a:6f:2e:f9:c7:6a:5e:
df:d3:a1:af:a3:08:80:8b:e8:98:b4:34:2e:87:26:
97:92:12:04:ce:bb:f9:18:42:b2:0f:8a:74:d1:b7:
0b:1f:83:6d:32:f4:b5:1f:fb:10:d3:ff:89:37:3a:
42:0c:91:76:ac:1f:7f:ae:5a:fd:b5:a4:94:a6:c1:
40:b2:68:27:8a:cf:1e:58:39:77:dc:b6:6f:b4:c3:
d9:4a:16:fc:dc:25:4c:c0:96:8b:de:16:b3:24:11:
f4:82:58:86:f6:9d:1b:39:03:5a:50:09:0c:1c:7b:
85:6a:63:24:40:6b:42:7d:cc:f0:c0:fa:a1:6e:df:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:56:04:20:6B:E7:AB:DB:F7:02:DB:16:F1:2D:A1:E4:BD:8D:FC:39
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.39.0/24
155.117.167.0/24
Signature Algorithm: sha256WithRSAEncryption
51:08:72:de:b2:19:3a:73:56:e0:b8:4e:60:bc:d9:60:27:cd:
9a:b6:cb:11:27:9f:93:3e:eb:1e:18:58:66:a8:2f:0f:f1:f7:
aa:84:10:ca:f4:ea:5d:88:46:e2:2e:0d:0a:8f:83:4a:6a:33:
31:00:d7:b0:25:e1:9e:78:65:69:d5:13:24:21:f5:30:3c:82:
32:3a:31:97:0a:44:0c:62:5f:48:2c:39:82:e1:29:e8:12:2d:
65:4e:3d:b5:79:cf:f1:42:96:74:05:48:79:6a:73:45:62:ca:
b8:f7:41:c9:6e:85:36:3e:f7:60:69:38:ee:94:20:53:7f:93:
b2:af:98:ed:4b:4e:70:c3:09:49:8e:25:b2:29:87:58:dc:a3:
b0:d9:9f:b3:7e:7a:dc:cc:2c:dd:d1:d3:95:ea:c2:c7:0d:a6:
d7:10:29:9f:b3:2e:0a:82:02:85:ce:e9:68:71:56:72:f6:21:
67:8a:e9:0e:d3:24:2d:0c:67:07:bd:28:cb:cb:1f:4c:eb:35:
e4:ab:ac:17:6b:fd:48:49:af:d8:73:af:a5:10:33:fe:14:3a:
f0:da:14:df:d3:a1:6f:3c:85:23:9c:6e:49:56:e6:0c:4b:38:
61:0e:76:67:d0:a5:07:cd:3b:c0:49:8f:39:ef:9b:3d:76:12:
e3:66:e0:c8
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUEpraYyQk7QiBJcmESVpjpztrLgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MjgwNzA3MzNaFw0yNzA4MjcwNzEyMzNaMDMxMTAvBgNV
BAMTKDVFNTYwNDIwNkJFN0FCREJGNzAyREIxNkYxMkRBMUU0QkQ4REZDMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCakXCpush/A7CQpMF4IWopch+d
/W9e0nRT53CpbG0YMrbLk7H0/ld0zqOmM6lKUO0ruQxz8MYN5a3uz0rWNMp4Hqji
B1KO1065+2pYvaZR9mj4dTu7NoqWSxIYGjVsmDHK4wRYvwtr3oyDXPdIvoAP4tJB
vxfQiFvVnbRww6y7Wm8u+cdqXt/Toa+jCICL6Ji0NC6HJpeSEgTOu/kYQrIPinTR
twsfg20y9LUf+xDT/4k3OkIMkXasH3+uWv21pJSmwUCyaCeKzx5YOXfctm+0w9lK
FvzcJUzAloveFrMkEfSCWIb2nRs5A1pQCQwce4VqYyRAa0J9zPDA+qFu33KdAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUXlYEIGvnq9v3AtsW8S2h5L2N/DkwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA2MDkyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkmcn
AwQAm3WnMA0GCSqGSIb3DQEBCwUAA4IBAQBRCHLeshk6c1bguE5gvNlgJ82atssR
J5+TPuseGFhmqC8P8feqhBDK9OpdiEbiLg0Kj4NKajMxANewJeGeeGVp1RMkIfUw
PIIyOjGXCkQMYl9ILDmC4SnoEi1lTj21ec/xQpZ0BUh5anNFYsq490HJboU2Pvdg
aTjulCBTf5Oyr5jtS05wwwlJjiWyKYdY3KOw2Z+zfnrczCzd0dOV6sLHDabXECmf
sy4KggKFzulocVZy9iFniukO0yQtDGcHvSjLyx9M6zXkq6wXa/1ISa/Yc6+lEDP+
FDrw2hTf06FvPIUjnG5JVuYMSzhhDnZn0KUHzTvASY8575s9dhLjZuDI
-----END CERTIFICATE-----
Generated at Sun Sep 13 01:25:10 2026 by rpki-client