Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: xh/CmGtZ46EoSAAx0exXWTKgGrlL24JrLm1w/4Y09gs=
Subject key identifier: 74:28:4D:8B:54:97:65:2B:66:01:25:B1:A2:5C:D6:1D:92:AB:31:03
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0F7EF6E70EDB1DBC10471AD8D43B814D872E5049
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206092.roa
Signing time: Tue 08 Sep 2026 07:36:33 +0000
ROA not before: Tue 08 Sep 2026 07:31:33 +0000
ROA not after: Tue 07 Sep 2027 07:36:33 +0000
asID: 206092
IP address blocks: 45.88.97.0/24 maxlen: 24
45.137.124.0/24 maxlen: 24
185.137.95.0/24 maxlen: 24
191.96.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7e:f6:e7:0e:db:1d:bc:10:47:1a:d8:d4:3b:81:4d:87:2e:50:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 8 07:31:33 2026 GMT
Not After : Sep 7 07:36:33 2027 GMT
Subject: CN=74284D8B5497652B660125B1A25CD61D92AB3103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:ae:bb:4f:53:e2:f8:13:e5:3a:5e:43:bc:
47:60:81:2b:01:6c:5f:9c:05:d5:b1:ba:3d:bb:b8:
65:e9:9e:84:da:45:0a:b3:f8:0f:e3:fb:4f:8a:42:
91:f0:59:4d:ac:a7:37:80:86:ce:42:0c:2d:dc:21:
1d:1b:a2:c2:64:7d:55:ee:bf:5a:d8:dc:b8:57:12:
df:b8:e7:2a:56:bd:9f:7c:d6:90:a1:be:38:be:6b:
55:88:28:0f:27:be:ee:49:59:d2:3a:73:a1:4d:fe:
f6:ab:fe:04:ae:6a:b6:f9:3c:8a:4b:d3:71:d8:3e:
70:35:6e:9f:b7:d7:92:96:7e:f2:d1:f0:76:90:43:
2a:34:ca:81:d8:11:b6:cd:ac:3d:79:18:a7:6a:33:
d5:98:cc:b6:3e:44:6e:3f:5e:bd:7c:12:cc:94:68:
eb:59:ad:43:59:30:aa:97:fd:ed:64:ee:f9:ba:30:
f2:b2:fd:c9:bc:42:dd:f5:41:32:a7:75:72:24:80:
e5:2a:8f:4f:1e:3b:e2:55:ae:68:d3:3a:4f:d2:17:
04:70:a6:26:5e:4a:73:17:4f:a1:45:ee:aa:82:16:
be:a3:61:69:10:70:92:fa:2a:54:18:01:54:61:91:
59:dd:dc:54:ee:73:37:42:93:ad:39:64:96:00:66:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:28:4D:8B:54:97:65:2B:66:01:25:B1:A2:5C:D6:1D:92:AB:31:03
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.97.0/24
45.137.124.0/24
185.137.95.0/24
191.96.89.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ad:b0:82:dc:28:3a:c4:51:e5:da:49:57:ec:a3:a8:7f:df:
2e:0c:1d:9c:3a:fd:4d:02:3c:1f:97:8b:0d:d7:46:ff:f5:00:
c1:ce:47:69:6f:c4:37:00:3e:94:d0:0f:49:fb:d5:bd:24:c1:
59:b4:fe:d0:cb:38:aa:da:ff:f6:65:e1:c2:04:40:a7:8c:2e:
f0:26:7d:78:53:a0:d0:da:dc:19:f3:63:5b:f5:7c:3e:6a:b5:
97:3d:4f:fb:f5:19:46:28:34:61:ca:e3:38:c6:4f:ab:0d:ed:
e6:ce:b7:61:9d:37:34:81:c4:c8:ba:fd:d7:11:26:dd:e8:4d:
b5:8f:ff:61:b2:cb:61:af:e4:db:e9:38:03:65:ea:1f:d0:a3:
41:03:1d:17:c7:ce:bf:fc:03:21:a9:de:de:95:d9:3e:43:b9:
59:9a:c7:45:7e:7a:c1:36:3b:7b:b8:7d:99:d9:8b:b1:85:92:
54:97:76:d8:4f:27:68:22:d8:81:1a:f1:4e:05:bf:bc:8e:0f:
f8:ae:b3:69:e8:6a:16:1d:7e:0d:20:f0:8d:35:82:bf:0a:a1:
bb:07:74:b3:84:5e:b2:68:86:a9:1a:7e:25:00:72:bd:eb:d2:
d7:4f:a5:24:2f:c1:88:1c:4c:e0:34:13:78:29:07:87:15:0e:
c8:de:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 01:25:44 2026 by rpki-client