Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206183.roa
File:                     AS206183.roa (raw, json)
Hash identifier:          euj1Mx2vzZHG8CHjwWTzxXGtKE9RSZCMzA8cahfI3nY=
Subject key identifier:   34:4F:13:50:24:79:EB:D4:9C:6E:F2:92:60:8B:0B:7D:9A:89:4D:F8
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       48648454C508E134601A3CBBACE73DA3B4E56933
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206183.roa
Signing time:             Sat 27 Jun 2026 14:48:44 +0000
ROA not before:           Sat 27 Jun 2026 14:43:44 +0000
ROA not after:            Sat 26 Jun 2027 14:48:44 +0000
asID:                     206183
IP address blocks:        2a13:9500:4a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 16:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:64:84:54:c5:08:e1:34:60:1a:3c:bb:ac:e7:3d:a3:b4:e5:69:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jun 27 14:43:44 2026 GMT
            Not After : Jun 26 14:48:44 2027 GMT
        Subject: CN=344F13502479EBD49C6EF292608B0B7D9A894DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:14:bd:ad:c7:b6:f0:49:ee:bb:f1:de:fa:
                    1b:ec:df:43:06:fa:92:29:9b:d8:fa:54:22:38:39:
                    56:86:79:20:44:33:a0:5f:ff:74:ab:16:93:12:ff:
                    e8:b2:fe:25:4c:40:54:e2:7c:34:9a:a3:1c:43:bf:
                    f3:9b:c4:3b:c5:bc:26:60:ba:d7:06:16:d2:68:3b:
                    a3:e3:3c:f0:bd:12:79:50:49:33:0f:f4:6a:be:98:
                    b1:92:24:e2:83:30:f9:20:81:94:93:e9:f4:fe:4c:
                    c4:61:ff:ae:11:73:fa:11:28:4c:5f:6a:6f:ea:6e:
                    4b:fd:87:8f:33:57:c4:18:e3:3c:75:99:5b:59:b7:
                    25:51:b6:95:cf:fc:e8:08:86:35:3d:84:c1:22:9e:
                    d1:7e:05:be:f9:e5:22:1d:0f:4d:da:74:d2:18:c2:
                    b9:87:fb:f9:66:d4:20:5e:c6:7f:6e:db:2d:8a:a2:
                    86:d2:a0:6b:c2:90:32:0c:ed:68:f8:c8:cf:a2:64:
                    06:c7:6e:b9:5c:3e:c2:0d:9d:8f:2e:c0:77:b1:b7:
                    b8:f5:00:93:2b:61:a0:c0:1a:b4:39:87:1a:59:06:
                    16:8f:7c:ed:70:e4:e2:20:7d:50:0b:fa:04:7a:af:
                    e9:55:1c:9f:b3:d6:04:4f:57:f5:87:dd:ac:74:21:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4F:13:50:24:79:EB:D4:9C:6E:F2:92:60:8B:0B:7D:9A:89:4D:F8
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206183.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:4a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:a4:5e:c9:8a:31:70:47:8b:22:86:f5:21:8e:ee:84:27:50:
         17:8c:31:e5:27:b8:ef:7b:d4:f3:d8:ae:48:78:21:95:c7:ed:
         3e:16:e0:2c:98:b3:29:6c:48:64:d7:1d:47:ca:92:00:ae:45:
         83:74:3e:49:39:21:1c:58:5e:d7:50:b1:ea:2c:39:05:ae:d2:
         e3:59:96:be:61:3e:3d:34:da:45:e4:da:55:25:5a:75:3c:74:
         b2:dd:cd:2b:77:d8:99:b9:10:be:9d:2d:2f:51:72:49:7b:32:
         46:37:52:fe:4f:0d:a4:d3:13:35:93:c7:e1:29:59:72:39:95:
         3d:9d:be:c2:c2:27:8a:f7:08:73:67:63:e6:45:53:08:b7:5a:
         40:6a:7f:2c:c9:f0:58:f4:b7:dc:ab:03:27:22:2a:2f:46:2d:
         0e:d2:c0:85:05:30:98:8f:05:5d:c6:25:b4:6a:43:01:1d:d3:
         8c:4c:6e:cf:77:ec:fb:f0:b3:71:e7:5e:46:ef:63:33:d4:91:
         11:2c:8d:bb:c5:9e:71:d2:03:2e:8f:bc:08:65:dd:6c:7c:b2:
         65:f5:0b:f0:be:4d:ce:30:9c:68:2e:38:b5:30:06:c6:07:b3:
         47:fa:91:b5:22:f4:13:5c:cb:8c:cc:83:c2:0f:82:00:87:5e:
         d8:5b:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:56 2026 by rpki-client