Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206527.roa
File: AS206527.roa (raw, json)
Hash identifier: jywVxj0V6ZwUXBUjMS1L/U8e4Oi2dc/3u3Wp/TWgi/Q=
Subject key identifier: 2B:46:FA:C3:CC:4E:52:8D:2C:D2:2C:2A:BE:2E:F6:57:00:7E:B1:AE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 592E19B694CC177F1A1189F2B73EB49E8F523878
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206527.roa
Signing time: Mon 10 Aug 2026 14:30:41 +0000
ROA not before: Mon 10 Aug 2026 14:25:41 +0000
ROA not after: Mon 09 Aug 2027 14:30:41 +0000
asID: 206527
IP address blocks: 168.222.122.0/24 maxlen: 24
168.222.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2e:19:b6:94:cc:17:7f:1a:11:89:f2:b7:3e:b4:9e:8f:52:38:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 10 14:25:41 2026 GMT
Not After : Aug 9 14:30:41 2027 GMT
Subject: CN=2B46FAC3CC4E528D2CD22C2ABE2EF657007EB1AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:41:83:41:cc:b9:66:45:c1:af:fe:9e:bd:
6c:58:d6:ef:58:64:36:99:88:c2:00:32:80:1f:86:
6a:a3:10:64:1c:5b:89:da:f6:70:d6:e5:28:81:fe:
a4:bc:29:4d:dc:ad:fb:1f:0d:f5:06:f9:07:f7:18:
2f:b1:e2:04:90:6e:48:8e:ab:db:9b:70:cc:6a:1d:
be:43:aa:b9:6a:15:e5:ba:20:59:ee:ac:8b:79:ee:
8a:b6:5d:36:0c:72:f0:5d:da:a7:e7:f5:2f:b1:b2:
70:1e:3c:4a:d8:42:5c:2f:2b:0b:6c:c3:9b:61:ee:
2a:09:c9:44:c5:35:a3:ed:0f:19:e5:a7:6b:5e:d2:
b0:50:bb:24:41:2d:8f:04:86:61:97:8d:83:41:5a:
1c:7b:60:8f:cc:18:92:d1:75:16:c5:ac:16:54:78:
45:11:92:22:2c:e7:1e:45:7c:60:de:b2:fc:eb:b5:
51:2a:84:21:09:06:b5:3f:e6:57:e7:6a:0b:45:43:
d5:a8:90:b7:a4:9e:e8:b0:05:19:08:d0:b6:bb:a1:
22:27:b2:61:75:71:9d:f8:43:62:1c:59:76:a4:78:
14:63:f5:1e:4d:56:8f:07:6c:22:d4:87:55:35:13:
3a:22:0f:19:47:b6:91:0d:31:b9:d5:48:74:92:f8:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:46:FA:C3:CC:4E:52:8D:2C:D2:2C:2A:BE:2E:F6:57:00:7E:B1:AE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206527.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.122.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:76:21:26:86:f5:44:da:de:a8:f6:a4:f4:fc:10:37:58:30:
55:eb:b7:ab:df:75:ea:69:d3:9b:7c:42:1f:e0:46:b9:d6:46:
0a:0b:54:39:b8:02:5b:f1:7d:64:47:9e:12:0a:d7:63:8d:af:
9a:80:a4:25:20:0d:b0:95:1e:fa:9a:ed:b5:6c:61:37:1f:87:
d0:9e:bb:25:c9:54:2f:8d:e2:e6:37:bb:72:bb:0b:3c:13:cd:
d3:45:88:b1:d9:b4:f2:c7:6a:c2:9d:d8:87:e1:9c:98:36:0c:
0e:83:6b:ee:20:49:f8:54:2c:ec:cd:68:84:8f:53:c1:1b:3a:
22:88:ba:73:cd:99:56:3e:9e:9b:bb:81:0b:1a:8f:73:e5:56:
65:21:ce:31:d3:33:f4:24:80:a2:70:aa:81:6f:f1:c6:9b:eb:
18:5c:35:2d:c4:36:20:82:8b:60:f6:ec:79:c0:d4:b6:05:0a:
68:1b:ef:6e:83:de:03:e4:4b:7a:9b:ca:30:6e:0c:6c:f1:bd:
3e:0e:3f:84:32:0e:3f:24:76:13:fe:86:2d:0c:d5:97:98:37:
53:54:c3:e3:05:31:65:30:0c:86:42:5b:f8:76:d6:e4:90:35:
d9:a8:8c:74:1f:ee:da:f1:ed:56:e6:9d:a6:8f:aa:b9:0b:67:
9e:0d:88:94
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUWS4ZtpTMF38aEYnytz60no9SOHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MTAxNDI1NDFaFw0yNzA4MDkxNDMwNDFaMDMxMTAvBgNV
BAMTKDJCNDZGQUMzQ0M0RTUyOEQyQ0QyMkMyQUJFMkVGNjU3MDA3RUIxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiEGDQcy5ZkXBr/6evWxY1u9Y
ZDaZiMIAMoAfhmqjEGQcW4na9nDW5SiB/qS8KU3crfsfDfUG+Qf3GC+x4gSQbkiO
q9ubcMxqHb5DqrlqFeW6IFnurIt57oq2XTYMcvBd2qfn9S+xsnAePErYQlwvKwts
w5th7ioJyUTFNaPtDxnlp2te0rBQuyRBLY8EhmGXjYNBWhx7YI/MGJLRdRbFrBZU
eEURkiIs5x5FfGDesvzrtVEqhCEJBrU/5lfnagtFQ9WokLeknuiwBRkI0La7oSIn
smF1cZ34Q2IcWXakeBRj9R5NVo8HbCLUh1U1EzoiDxlHtpENMbnVSHSS+DZ7AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUK0b6w8xOUo0s0iwqvi72VwB+sa4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA2NTI3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqN56
MA0GCSqGSIb3DQEBCwUAA4IBAQBrdiEmhvVE2t6o9qT0/BA3WDBV67er33XqadOb
fEIf4Ea51kYKC1Q5uAJb8X1kR54SCtdjja+agKQlIA2wlR76mu21bGE3H4fQnrsl
yVQvjeLmN7tyuws8E83TRYix2bTyx2rCndiH4ZyYNgwOg2vuIEn4VCzszWiEj1PB
GzoiiLpzzZlWPp6bu4ELGo9z5VZlIc4x0zP0JICicKqBb/HGm+sYXDUtxDYggotg
9ux5wNS2BQpoG+9ug94D5Et6m8owbgxs8b0+Dj+EMg4/JHYT/oYtDNWXmDdTVMPj
BTFlMAyGQlv4dtbkkDXZqIx0H+7a8e1W5p2mj6q5C2eeDYiU
-----END CERTIFICATE-----
Generated at Thu Sep 3 07:11:55 2026 by rpki-client