Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206696.roa
File: AS206696.roa (raw, json)
Hash identifier: 11ArgwYIwSm89jq6YdlcMHkRK6YuYHb59hN2/T1ls/A=
Subject key identifier: EB:FA:E5:D0:81:EF:8B:12:4A:A6:9F:F7:FB:5F:54:79:85:D3:6F:AA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 54E2061DA93A31B4B156AE8E25978E4A7535C9E5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206696.roa
Signing time: Mon 22 Jun 2026 13:00:06 +0000
ROA not before: Mon 22 Jun 2026 12:55:06 +0000
ROA not after: Mon 21 Jun 2027 13:00:06 +0000
asID: 206696
IP address blocks: 2a13:9500:39::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e2:06:1d:a9:3a:31:b4:b1:56:ae:8e:25:97:8e:4a:75:35:c9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 22 12:55:06 2026 GMT
Not After : Jun 21 13:00:06 2027 GMT
Subject: CN=EBFAE5D081EF8B124AA69FF7FB5F547985D36FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:13:42:e3:ae:d4:ee:59:31:2f:00:2e:8d:
f2:be:0d:09:a1:1c:51:d5:68:d7:50:b1:4d:cf:98:
db:80:37:5d:01:15:02:c5:65:ff:14:95:67:87:71:
49:8e:09:4c:58:1d:dc:79:21:43:7c:29:d4:42:fa:
5a:93:3b:e0:cb:1f:51:96:f4:a0:4f:6d:af:e5:56:
8a:a5:1a:86:52:7c:2f:89:21:5d:3b:80:1d:4d:95:
b2:4d:78:a8:0b:73:95:ab:5b:da:36:af:d6:e2:d7:
01:21:09:e5:b1:ef:7d:32:87:17:55:09:92:23:e4:
ff:cb:1e:ee:89:b9:c1:b3:12:8a:bc:aa:b9:71:9e:
7c:cf:5d:5b:f9:42:32:3e:05:67:90:65:81:41:be:
b8:be:4b:50:a4:19:a8:81:9f:42:31:70:e0:52:7a:
c4:1c:56:cf:89:b4:cf:34:f7:51:0c:25:67:f6:15:
02:b0:ba:7f:80:f2:8c:80:39:11:d9:91:ad:9e:58:
e9:ed:14:54:3f:71:16:38:56:e3:8d:b9:2c:cb:f5:
28:a7:62:29:09:71:1d:23:4a:f9:1d:dc:67:f3:1a:
30:5c:0e:04:04:d7:46:c5:00:da:a3:65:2e:59:80:
d1:40:bd:f5:70:0f:0f:0f:5a:68:bd:18:ec:ef:1b:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FA:E5:D0:81:EF:8B:12:4A:A6:9F:F7:FB:5F:54:79:85:D3:6F:AA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:39::/48
Signature Algorithm: sha256WithRSAEncryption
08:8e:95:e8:de:45:b3:f5:8f:81:b0:af:64:e0:d7:94:cc:67:
1b:11:2d:88:25:92:53:3d:aa:b0:91:44:6f:88:41:b6:b9:9c:
91:4b:c7:90:8f:79:45:25:be:e3:4c:73:31:bd:5f:a9:f7:c1:
aa:f0:4c:ee:85:bf:63:55:74:65:4c:e5:13:7a:55:f5:14:0d:
c9:4c:81:d5:d7:50:c8:14:d2:9b:c1:ae:30:84:52:4c:3e:67:
a9:f5:90:32:15:b6:d9:d9:ad:c2:06:72:02:72:d8:94:53:5c:
26:06:e2:19:a3:00:ed:24:a9:70:a8:a1:7c:37:7d:c6:ec:fa:
d2:b6:c8:07:a9:60:25:1c:62:ea:72:e2:bc:31:89:5e:ac:4c:
48:88:db:6e:2a:68:14:66:2e:8c:e3:7a:0a:6f:44:a6:7e:da:
c9:6d:a5:11:e4:a7:eb:b1:09:83:7e:4f:de:2f:9b:f9:2e:dc:
c3:f2:a8:b2:fc:e0:5b:d2:3e:8c:f8:2f:b5:c9:6b:3d:bd:0e:
80:f8:ff:d1:e0:07:c3:b6:ac:91:ba:7d:e9:1d:2f:73:19:49:
16:fb:73:98:1c:20:db:9f:cd:f6:e2:74:21:a0:6a:c2:67:34:
c9:0a:4c:27:3d:a6:7a:6b:84:b9:4b:ca:80:39:ef:cf:16:ff:
4c:8e:07:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUVOIGHak6MbSxVq6OJZeOSnU1yeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MjIxMjU1MDZaFw0yNzA2MjExMzAwMDZaMDMxMTAvBgNV
BAMTKEVCRkFFNUQwODFFRjhCMTI0QUE2OUZGN0ZCNUY1NDc5ODVEMzZGQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWhNC467U7lkxLwAujfK+DQmh
HFHVaNdQsU3PmNuAN10BFQLFZf8UlWeHcUmOCUxYHdx5IUN8KdRC+lqTO+DLH1GW
9KBPba/lVoqlGoZSfC+JIV07gB1NlbJNeKgLc5WrW9o2r9bi1wEhCeWx730yhxdV
CZIj5P/LHu6JucGzEoq8qrlxnnzPXVv5QjI+BWeQZYFBvri+S1CkGaiBn0IxcOBS
esQcVs+JtM8091EMJWf2FQKwun+A8oyAORHZka2eWOntFFQ/cRY4VuONuSzL9Sin
YikJcR0jSvkd3GfzGjBcDgQE10bFANqjZS5ZgNFAvfVwDw8PWmi9GOzvG1J/AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU6/rl0IHvixJKpp/3+19UeYXTb6owHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA2Njk2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAA5MA0GCSqGSIb3DQEBCwUAA4IBAQAIjpXo3kWz9Y+BsK9k4NeUzGcbES2IJZJT
PaqwkURviEG2uZyRS8eQj3lFJb7jTHMxvV+p98Gq8Ezuhb9jVXRlTOUTelX1FA3J
TIHV11DIFNKbwa4whFJMPmep9ZAyFbbZ2a3CBnICctiUU1wmBuIZowDtJKlwqKF8
N33G7PrStsgHqWAlHGLqcuK8MYlerExIiNtuKmgUZi6M43oKb0SmftrJbaUR5Kfr
sQmDfk/eL5v5LtzD8qiy/OBb0j6M+C+1yWs9vQ6A+P/R4AfDtqyRun3pHS9zGUkW
+3OYHCDbn8324nQhoGrCZzTJCkwnPaZ6a4S5S8qAOe/PFv9Mjger
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:54 2026 by rpki-client