Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206491.roa
File: AS206491.roa (raw, json)
Hash identifier: MLGdUoO6VUlY1GmXDUQnU0qdSuOV3tDy9zniCLKK/HM=
Subject key identifier: FD:7D:CD:8E:4F:D5:58:CE:CC:BF:FF:91:1E:02:BB:D0:D8:42:74:E7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 55EB2572F4A8C7537AC299C9A174B01E572F9F91
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206491.roa
Signing time: Thu 18 Jun 2026 07:47:42 +0000
ROA not before: Thu 18 Jun 2026 07:42:42 +0000
ROA not after: Thu 17 Jun 2027 07:47:42 +0000
asID: 206491
IP address blocks: 2a13:9500:b1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:eb:25:72:f4:a8:c7:53:7a:c2:99:c9:a1:74:b0:1e:57:2f:9f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 18 07:42:42 2026 GMT
Not After : Jun 17 07:47:42 2027 GMT
Subject: CN=FD7DCD8E4FD558CECCBFFF911E02BBD0D84274E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:3a:49:5d:8a:55:15:04:03:09:72:e0:6e:
4f:28:ef:55:67:54:a5:ae:19:79:9f:f8:65:22:ed:
2d:b8:99:a5:14:a5:d2:dc:12:af:12:b2:78:3e:24:
79:2f:c0:f4:5a:65:14:b6:6d:4d:ff:98:3d:b9:b7:
12:b1:a2:f3:c8:a7:98:6c:98:dc:34:d9:9e:1c:48:
cd:24:69:50:5a:98:03:3d:5f:bd:5c:37:76:0f:b4:
c7:17:eb:15:9b:6c:6a:37:54:66:b0:4d:f4:ed:9d:
dc:e1:72:c6:0d:7c:a0:9f:f9:7b:16:00:d0:9c:f9:
1f:4f:7a:39:19:0f:e3:35:98:9e:9e:0f:2b:cd:d5:
b1:24:40:b0:a3:6c:b3:3b:a0:35:25:61:2b:93:cf:
31:82:c5:f9:fb:46:39:7e:31:5b:c5:34:98:d4:5c:
c8:b6:d1:0c:93:13:fb:bb:39:d6:24:a5:70:fe:5d:
cb:ca:34:55:9a:f5:64:9d:1d:9c:c8:45:db:3a:43:
db:83:ed:58:ff:17:8a:d1:9b:f3:90:b1:fb:e7:4a:
c7:29:2f:5f:fe:a0:42:c5:b0:a0:eb:f1:ea:af:32:
ab:86:20:3f:6f:20:99:26:b6:1a:8e:48:f2:5c:71:
70:96:f3:63:06:bc:5a:cb:99:cd:c6:7a:b1:94:98:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7D:CD:8E:4F:D5:58:CE:CC:BF:FF:91:1E:02:BB:D0:D8:42:74:E7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206491.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b1::/48
Signature Algorithm: sha256WithRSAEncryption
0a:ca:d8:0b:7e:d6:ee:55:37:3e:1c:e3:e4:b1:f7:81:bb:66:
dd:18:50:11:06:8d:0a:53:c7:6e:75:89:69:a2:7a:67:13:94:
7e:b9:53:6d:c6:5c:9c:27:e3:21:e4:af:7c:88:e9:0c:70:16:
fa:42:f0:ad:f9:5c:e1:f7:41:a6:98:69:21:33:69:fa:88:2e:
56:be:4a:bd:53:ff:b2:12:b7:06:74:87:e8:5d:97:ac:26:83:
d9:53:f0:89:57:c2:a2:32:93:1a:fa:8d:5b:8b:44:65:76:3b:
2b:2a:d8:cb:b6:26:4b:84:f8:dd:c2:36:15:71:8a:3b:f5:a4:
bf:0a:3e:48:e7:8f:55:12:07:93:30:e4:59:a7:10:a7:93:3b:
71:e5:0b:c0:5a:47:83:20:a6:2e:0f:af:aa:70:b5:c6:8e:88:
49:f4:37:1b:0c:6c:07:e0:01:30:94:e3:e3:78:60:d2:8f:85:
66:43:20:11:b2:5b:9d:88:9c:a5:27:80:25:b2:80:e5:f2:ce:
4f:e2:63:b9:1d:6d:8e:e6:0f:5a:e1:29:7f:72:8b:33:a8:c5:
73:c5:99:c8:da:df:23:d4:3f:f4:c8:36:cd:5c:6a:1d:4c:94:
90:fd:84:e9:a0:6d:f3:ab:8c:91:03:ca:35:67:cb:17:42:e5:
90:a0:71:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUVeslcvSox1N6wpnJoXSwHlcvn5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MTgwNzQyNDJaFw0yNzA2MTcwNzQ3NDJaMDMxMTAvBgNV
BAMTKEZEN0RDRDhFNEZENTU4Q0VDQ0JGRkY5MTFFMDJCQkQwRDg0Mjc0RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDalTpJXYpVFQQDCXLgbk8o71Vn
VKWuGXmf+GUi7S24maUUpdLcEq8Ssng+JHkvwPRaZRS2bU3/mD25txKxovPIp5hs
mNw02Z4cSM0kaVBamAM9X71cN3YPtMcX6xWbbGo3VGawTfTtndzhcsYNfKCf+XsW
ANCc+R9PejkZD+M1mJ6eDyvN1bEkQLCjbLM7oDUlYSuTzzGCxfn7Rjl+MVvFNJjU
XMi20QyTE/u7OdYkpXD+XcvKNFWa9WSdHZzIRds6Q9uD7Vj/F4rRm/OQsfvnSscp
L1/+oELFsKDr8eqvMquGID9vIJkmthqOSPJccXCW82MGvFrLmc3GerGUmIjpAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU/X3Njk/VWM7Mv/+RHgK70NhCdOcwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA2NDkxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AACxMA0GCSqGSIb3DQEBCwUAA4IBAQAKytgLftbuVTc+HOPksfeBu2bdGFARBo0K
U8dudYlponpnE5R+uVNtxlycJ+Mh5K98iOkMcBb6QvCt+Vzh90GmmGkhM2n6iC5W
vkq9U/+yErcGdIfoXZesJoPZU/CJV8KiMpMa+o1bi0RldjsrKtjLtiZLhPjdwjYV
cYo79aS/Cj5I549VEgeTMORZpxCnkztx5QvAWkeDIKYuD6+qcLXGjohJ9DcbDGwH
4AEwlOPjeGDSj4VmQyARsludiJylJ4AlsoDl8s5P4mO5HW2O5g9a4Sl/coszqMVz
xZnI2t8j1D/0yDbNXGodTJSQ/YTpoG3zq4yRA8o1Z8sXQuWQoHFj
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:07:33 2026 by rpki-client