Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: 7JdUTpsJa4Xh9v3k8mzdTDQ+YMEDTi1B8qW5UO53Jxw=
Subject key identifier: A3:33:CB:7B:FE:34:02:EB:E9:69:14:FB:2D:39:C5:43:96:1B:73:DD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 58C6DE95677830933AB9C04E2126953798060B01
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206092.roa
Signing time: Fri 28 Aug 2026 07:12:36 +0000
ROA not before: Fri 28 Aug 2026 07:07:36 +0000
ROA not after: Fri 27 Aug 2027 07:12:36 +0000
asID: 206092
IP address blocks: 84.75.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c6:de:95:67:78:30:93:3a:b9:c0:4e:21:26:95:37:98:06:0b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 28 07:07:36 2026 GMT
Not After : Aug 27 07:12:36 2027 GMT
Subject: CN=A333CB7BFE3402EBE96914FB2D39C543961B73DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:52:0b:ce:44:90:31:79:2f:e2:0a:62:db:
64:46:67:60:81:37:f0:8d:03:1f:1c:90:9a:f6:c0:
8d:7d:83:5b:31:1d:23:41:67:8b:36:d7:cc:10:ba:
b4:5e:58:bb:e6:16:db:c4:54:37:64:a1:b4:f8:98:
a7:2c:3c:24:df:a8:96:ac:d6:e5:36:8a:25:a7:92:
45:b1:d2:19:03:0b:dd:89:cf:bd:ff:0e:a0:29:51:
b6:8d:59:df:18:f4:79:15:3d:0b:7b:55:fe:02:a7:
e1:d1:b9:54:2a:99:e2:66:92:93:a3:45:2b:87:23:
a7:dc:8d:bc:2d:64:13:0f:15:6d:67:d5:1d:8b:40:
d0:3d:07:a2:06:4e:6a:2c:62:37:15:99:cf:b4:b0:
6b:34:16:36:08:15:0f:64:f8:d3:a2:b3:e9:8a:97:
25:86:f3:4d:67:ce:dc:e5:f3:fd:da:97:8c:c9:5c:
ed:92:71:48:c5:0e:82:74:cd:77:f5:28:14:1d:05:
c5:98:2d:5b:10:78:b8:d1:a7:6e:0f:d4:ff:0b:24:
fa:1e:2b:d0:35:1c:e5:0b:bb:23:da:a9:2d:90:01:
70:9f:e0:fd:5c:fd:b1:a7:f5:07:30:8c:a0:cd:88:
1b:3e:e6:72:f3:49:95:5c:07:e4:af:51:3a:3d:ca:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:33:CB:7B:FE:34:02:EB:E9:69:14:FB:2D:39:C5:43:96:1B:73:DD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.9.0/24
Signature Algorithm: sha256WithRSAEncryption
93:df:74:f4:af:10:3c:62:be:24:d2:bf:78:3b:c5:51:c5:e0:
f7:9c:91:bf:16:8d:5a:1d:4e:56:96:4c:9b:46:f1:8f:9e:fa:
b3:12:fc:5d:80:87:06:1e:26:ae:1f:f1:3d:e2:60:88:de:16:
c1:ae:93:af:ec:ed:a5:08:12:b7:0e:34:1f:7e:46:dd:9c:13:
ac:e6:7e:50:69:9b:fd:7b:17:d3:78:06:58:93:7a:ce:ba:f1:
a3:bb:3c:fc:f3:95:6f:b2:29:19:b3:41:de:67:94:68:93:aa:
c2:d2:09:a0:d4:47:80:d9:51:6c:b9:db:e8:da:d0:0b:9b:05:
69:05:c8:1b:5f:e6:b5:d1:5a:8f:06:fe:d2:2d:49:16:b7:47:
0c:9b:87:f2:b5:52:f1:c8:89:f3:37:c3:6c:bc:83:e7:9f:5e:
b0:03:94:3e:16:a6:45:94:66:40:af:3a:53:d8:e6:1a:cc:5e:
a1:ef:62:4a:4e:2b:0f:2b:90:6c:ad:09:e7:7d:68:1c:54:c2:
0b:79:4c:3d:8f:bb:e2:56:06:d5:2f:9b:d1:90:22:18:4a:e4:
c2:46:21:d7:22:51:3d:4b:2e:19:83:ab:8e:b7:79:04:ff:88:
d5:dd:6d:02:01:80:fd:a8:a7:fc:94:d4:be:eb:12:ea:2c:4b:
7e:e1:2d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:16 2026 by rpki-client