Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: 9xESqepeKDoZKT/PUDTNzbH+TOMA4+ZZdGZ7s16wD4A=
Subject key identifier: D6:B1:88:62:DD:DD:41:36:9B:19:B8:E3:0E:84:C3:6A:7A:D0:82:45
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 52675DDECE85B47822FE2F7DE5FE99D4794CF2EA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
Signing time: Fri 25 Sep 2026 08:50:17 +0000
ROA not before: Fri 25 Sep 2026 08:45:17 +0000
ROA not after: Fri 24 Sep 2027 08:50:17 +0000
asID: 206092
IP address blocks: 146.103.39.0/24 maxlen: 24
155.117.97.0/24 maxlen: 24
155.117.108.0/24 maxlen: 24
155.117.112.0/24 maxlen: 24
155.117.167.0/24 maxlen: 24
155.117.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:67:5d:de:ce:85:b4:78:22:fe:2f:7d:e5:fe:99:d4:79:4c:f2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 25 08:45:17 2026 GMT
Not After : Sep 24 08:50:17 2027 GMT
Subject: CN=D6B18862DDDD41369B19B8E30E84C36A7AD08245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:18:7b:a7:31:61:cd:63:fb:09:a5:c3:6b:84:
04:02:b9:ab:31:3f:22:d2:c0:87:d0:3a:e2:ac:af:
9e:e3:5f:09:a7:17:16:ee:c1:41:72:52:7d:2f:e6:
f6:d8:c5:dd:6f:70:f9:7e:53:61:91:af:3a:3a:05:
4a:76:c5:f5:42:2d:14:9c:98:4d:2f:7e:56:66:0f:
30:e6:31:0e:99:8f:10:30:f7:ff:5f:dd:97:70:8a:
02:64:9b:94:ac:f4:54:f2:00:b9:65:66:d9:ad:9c:
5d:41:3e:71:0a:78:cd:b6:de:f3:e4:c2:08:00:75:
60:a6:e6:6b:b2:3f:a6:f5:ea:21:c3:aa:35:4e:e1:
b4:a5:b6:4b:78:ea:39:3f:05:46:10:e5:56:d4:0a:
84:ec:3a:61:9d:92:81:0e:69:58:29:ba:2f:69:21:
be:55:44:15:4c:93:29:4e:31:fa:46:0f:11:60:b5:
dd:07:ed:78:6f:49:62:53:61:e4:1b:68:86:3b:89:
ef:c7:24:54:bb:2c:a4:e9:ad:cd:75:ee:a1:34:b1:
1d:1d:1d:ef:fe:f8:29:79:80:cf:16:fc:66:d2:c9:
4e:f7:59:5f:53:a5:6c:ef:0d:38:bd:a3:21:b3:8a:
04:96:e3:84:5a:1e:b7:2a:59:ab:b4:14:e4:49:15:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B1:88:62:DD:DD:41:36:9B:19:B8:E3:0E:84:C3:6A:7A:D0:82:45
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.39.0/24
155.117.97.0/24
155.117.108.0/24
155.117.112.0/24
155.117.167.0/24
155.117.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ca:c5:5c:1d:bb:46:b0:a1:e6:b6:61:27:7f:20:80:77:eb:
ac:51:2a:f1:26:b2:b1:9b:6c:71:ca:4b:76:b7:31:c5:e9:96:
85:40:17:11:71:7d:dd:dd:b0:b8:ee:74:51:00:fa:09:36:af:
56:8b:fa:95:6c:24:39:ea:21:d6:e7:86:d0:a4:eb:c7:bb:37:
4b:9d:f3:f4:fa:b9:22:6d:6a:44:85:46:1c:4d:12:12:b1:ef:
05:cd:d1:ad:06:1a:7c:6c:66:fb:76:86:89:a1:7c:04:75:44:
6a:a4:ce:85:fb:64:52:cc:f2:b0:4c:16:25:c2:47:2b:17:c5:
89:76:4d:31:99:30:f7:41:b0:ee:fe:f8:88:ef:d6:ba:25:6d:
f2:69:03:7b:51:81:b0:de:f9:c5:b5:39:07:b1:f4:66:59:cf:
e2:c0:8a:67:4b:86:9f:5a:0e:5e:2a:2b:d3:e1:1a:ca:34:be:
22:22:d9:32:2b:a9:fd:67:96:2a:28:fa:fe:df:a6:20:05:13:
a6:3d:1c:6f:30:35:75:a2:6d:88:d1:12:97:9d:a3:7f:be:d7:
e2:bd:dd:e7:1f:16:5b:5f:13:44:30:28:96:70:94:0e:5f:77:
87:bc:9f:9e:10:a6:a3:69:4b:5e:a2:23:cc:89:b9:10:ff:39:
c7:c9:7a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:49:28 2026 by rpki-client