Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206136.roa
File: AS206136.roa (raw, json)
Hash identifier: 8smSYo4F4LJHj6nnFHggIz+XLdZFjw2TZzlPea2x6Vo=
Subject key identifier: F0:3A:3E:8F:04:72:58:32:4E:A9:3E:61:B1:CF:B5:2D:3A:F3:8B:1D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 65FFC8FB7AF182D2758F62FB360C8A0B0447AA73
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206136.roa
Signing time: Fri 17 Apr 2026 09:49:01 +0000
ROA not before: Fri 17 Apr 2026 09:44:01 +0000
ROA not after: Fri 16 Apr 2027 09:49:01 +0000
asID: 206136
IP address blocks: 82.39.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ff:c8:fb:7a:f1:82:d2:75:8f:62:fb:36:0c:8a:0b:04:47:aa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 17 09:44:01 2026 GMT
Not After : Apr 16 09:49:01 2027 GMT
Subject: CN=F03A3E8F047258324EA93E61B1CFB52D3AF38B1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:e3:99:c0:bd:3e:82:c0:6a:3e:ed:f2:01:
f2:09:08:dc:90:ef:0f:06:24:52:b2:44:ae:37:79:
2a:7f:0b:e1:48:6d:51:8e:b3:2d:3e:f2:85:13:35:
f1:99:20:87:3e:96:8f:85:56:67:56:22:b0:ed:d7:
e9:c6:4e:ab:a5:b4:9a:17:97:bc:6a:f7:db:56:0f:
5d:fb:06:b4:16:d3:57:47:d6:16:c8:f3:5c:1d:62:
55:93:d6:b5:0c:72:d7:47:2a:b3:44:2e:f7:cb:7c:
5a:e9:03:98:e3:41:b8:80:12:a8:07:c1:d0:5c:1f:
6e:6f:e4:3d:30:72:5c:20:04:73:1a:0d:30:1b:32:
25:ea:b5:36:82:75:f0:1b:52:2e:7d:40:a4:22:56:
2e:a8:fa:74:12:9d:83:04:af:4b:e2:86:56:4b:2f:
db:a1:c5:be:3d:98:e9:15:8a:2a:93:8d:a3:65:13:
db:37:a0:12:bc:0e:36:bd:e5:34:bd:fa:1e:2e:70:
d8:49:04:e9:63:f7:8e:26:a4:3d:35:72:03:aa:33:
12:0b:ac:ac:44:1f:86:c8:23:c3:ef:58:7d:47:77:
2e:4d:f0:31:d9:f0:2b:b4:e4:2a:d4:c1:dc:22:89:
06:d0:1e:7b:7e:ee:04:12:8a:2f:a0:80:34:dd:d6:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3A:3E:8F:04:72:58:32:4E:A9:3E:61:B1:CF:B5:2D:3A:F3:8B:1D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:0c:e0:c0:5d:d9:c6:b1:64:a0:4e:1b:e8:99:e9:cb:7a:20:
0b:c4:f5:3e:28:d5:e7:7b:52:4d:2c:78:e5:7a:a4:b6:a9:45:
0f:73:40:40:e8:cd:98:f8:9b:44:57:e8:d9:3c:0d:ca:96:e0:
5b:66:ae:6d:db:4b:1c:61:cd:9f:14:2d:b8:00:58:84:90:dc:
7b:15:d6:00:01:8c:bd:fd:7e:6d:8f:49:25:2e:32:a6:3a:6d:
e7:2b:b8:cc:8d:57:a4:2d:3a:82:0e:31:27:c3:50:be:22:1a:
05:67:32:4b:07:bd:4c:10:98:d6:4a:40:0c:c0:8f:f0:b7:fe:
be:93:91:e6:cd:7f:59:d7:6c:76:20:bd:68:6d:cd:98:ed:ed:
a1:ee:cc:28:48:d7:cc:cb:ed:bb:74:9b:aa:31:5d:47:fc:1c:
d6:a5:08:71:85:d9:7d:f0:dd:10:b4:8e:e5:42:fd:fb:ce:d7:
61:35:a9:1a:40:d8:de:9c:b5:bf:0a:7b:58:77:f2:5a:8c:f0:
0a:da:60:6b:ef:c7:54:01:0b:ec:5b:e3:ec:12:0e:a4:09:e8:
09:2f:18:f6:7e:17:3a:80:04:a3:df:10:f9:c6:99:29:9c:82:
a3:07:a3:7b:db:ca:65:b1:95:40:a8:68:e2:a7:bd:ec:51:08:
d4:91:d5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:35:18 2026 by rpki-client