Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206675.roa
File: AS206675.roa (raw, json)
Hash identifier: nvSL1pudC6djGFvEsAfJEwk1SnxIRRmsNHoa5phTUm0=
Subject key identifier: 63:78:A5:4D:F8:A0:96:F5:6D:22:A6:9F:DE:B7:3C:73:1C:95:41:CB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3D1EF383F2FAE0FC53DC3C0BFC21D58DD8D75D20
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206675.roa
Signing time: Fri 03 Jul 2026 07:12:45 +0000
ROA not before: Fri 03 Jul 2026 07:07:45 +0000
ROA not after: Fri 02 Jul 2027 07:12:45 +0000
asID: 206675
IP address blocks: 82.38.23.0/24 maxlen: 24
82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
82.38.105.0/24 maxlen: 24
82.38.215.0/24 maxlen: 24
82.39.136.0/24 maxlen: 24
178.83.82.0/23 maxlen: 24
178.83.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1e:f3:83:f2:fa:e0:fc:53:dc:3c:0b:fc:21:d5:8d:d8:d7:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 3 07:07:45 2026 GMT
Not After : Jul 2 07:12:45 2027 GMT
Subject: CN=6378A54DF8A096F56D22A69FDEB73C731C9541CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:37:fb:88:26:92:97:5a:c4:74:c5:26:3d:
1f:73:ea:53:2f:59:d6:a8:bc:b2:45:1f:bd:b2:18:
e9:57:41:a2:25:04:f7:00:d6:a1:36:77:54:11:2e:
08:02:cc:06:46:0d:5d:4e:05:c8:ce:cd:ff:01:6a:
59:dc:f3:4a:69:54:7b:3e:69:fb:ed:a2:08:64:95:
83:3d:ec:3f:a3:e3:78:1e:18:0a:bc:30:67:1e:4f:
ee:fe:e4:17:90:80:00:da:f0:1a:82:ea:06:c0:f4:
9c:d2:1e:81:75:65:42:b8:96:d4:70:94:e2:95:aa:
ae:42:9a:6f:73:21:c3:57:72:7d:51:65:a0:b9:e1:
cc:2d:dd:30:25:b6:d7:bf:45:6a:1d:7e:7a:ba:2a:
c4:9c:82:94:ef:55:4f:ee:51:56:b8:d9:4f:98:f5:
18:6f:a0:00:92:ab:c4:d0:a2:b1:72:68:8d:a0:7f:
eb:31:bb:4e:96:69:30:07:f5:8e:a0:44:ba:56:77:
2c:6c:1d:12:72:9e:c0:3a:10:59:d8:89:74:21:3d:
6a:73:0a:14:40:3b:93:26:24:3a:d8:db:1f:c8:45:
49:8e:81:9a:56:51:35:0e:c8:be:7c:e5:6f:39:5e:
67:53:cc:5f:3d:75:c3:a3:e5:82:85:64:86:9f:0c:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:78:A5:4D:F8:A0:96:F5:6D:22:A6:9F:DE:B7:3C:73:1C:95:41:CB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.23.0/24
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
82.38.105.0/24
82.38.215.0/24
82.39.136.0/24
178.83.82.0/23
178.83.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c7:cd:7f:1c:87:4a:35:66:3c:f4:c1:70:dd:c1:2c:65:86:
2f:d3:b2:0d:40:40:8e:b8:fb:f2:3f:15:c1:ef:83:bb:e5:6d:
23:cd:e1:dc:84:c4:b7:7d:c3:48:63:0c:2b:91:46:e6:1f:3d:
97:b3:77:97:ed:ca:93:8d:e2:68:97:96:53:59:16:1d:6a:c7:
55:b5:0a:d1:f3:ad:c5:58:8e:4f:7e:bc:d6:54:68:ba:ff:60:
28:48:be:c1:4f:b0:85:7c:dd:3f:04:2e:45:68:d6:be:5d:3d:
7e:fd:b5:75:5b:2b:e1:c1:6f:2b:8d:29:6d:b8:69:52:0c:b8:
6b:25:5c:a8:95:a1:6a:d9:cc:9d:b0:86:04:88:e7:f8:3f:17:
64:cf:ca:63:9c:6d:b6:d3:c3:27:92:67:58:c2:e6:54:5c:f6:
25:00:c0:f0:6a:20:07:24:c3:c3:60:d1:1b:31:5e:9a:41:19:
be:83:58:19:83:9c:5a:0f:cc:96:3f:8a:35:5d:d2:b2:ab:16:
30:27:ea:3f:09:b1:af:d1:8d:af:61:b7:bd:26:ba:38:02:37:
5a:3a:a3:94:6c:4e:2e:64:9e:02:57:9a:85:49:93:a2:37:8d:
4f:9b:84:c8:e1:88:15:6a:1b:53:bd:13:d9:5e:e2:cb:5a:40:
35:5a:ea:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:58:18 2026 by rpki-client