Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206781.roa
File: AS206781.roa (raw, json)
Hash identifier: MTzSoOVp2P+7g98rVap0bUmj81/8h7i1d6n6bCCIBrE=
Subject key identifier: E6:F7:86:48:9F:D0:86:3A:8A:70:F4:34:F4:D8:AB:F5:A0:EB:AC:AB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 44B249D36F985631F652C0F8F4AB6CB1B23EB649
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206781.roa
Signing time: Wed 08 Jul 2026 09:49:02 +0000
ROA not before: Wed 08 Jul 2026 09:44:02 +0000
ROA not after: Wed 07 Jul 2027 09:49:02 +0000
asID: 206781
IP address blocks: 2a13:9500:ba::/48 maxlen: 48
2a13:9500:bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b2:49:d3:6f:98:56:31:f6:52:c0:f8:f4:ab:6c:b1:b2:3e:b6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 8 09:44:02 2026 GMT
Not After : Jul 7 09:49:02 2027 GMT
Subject: CN=E6F786489FD0863A8A70F434F4D8ABF5A0EBACAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:72:50:fa:20:9a:4e:05:8b:e4:5c:91:d7:
63:f8:91:ac:fc:41:14:00:38:dc:44:17:53:06:de:
68:5b:9f:98:16:cd:2f:7b:ad:37:48:dd:15:90:ca:
5a:9e:03:5c:85:4b:9e:86:b8:5a:11:8e:4f:9e:b9:
d2:db:22:a1:42:ca:bf:f8:c3:20:b8:e8:10:de:3e:
5c:b9:4e:24:b4:89:25:c3:9b:5f:4c:37:1d:e3:dd:
d1:8e:f2:5e:50:85:9e:9d:ea:47:6f:70:7f:88:13:
2a:6f:41:f9:b7:7b:a0:f9:ba:e0:d6:f6:76:d5:0f:
79:b6:e6:5d:2a:b0:19:fe:aa:1a:d3:7d:8f:48:a6:
af:53:aa:69:37:c2:24:3e:da:c4:ef:48:29:9f:dc:
f8:bd:35:21:f8:15:71:5d:23:a4:2e:ac:ac:1c:a5:
a7:cc:af:c2:37:81:88:8a:e1:fa:01:07:24:88:c6:
11:ed:af:c9:ff:9b:8d:0e:bc:e9:6d:11:3c:19:86:
fd:71:e2:8a:d6:32:5b:0e:17:78:53:77:ff:37:60:
27:0c:27:d0:b0:4a:c4:df:f2:10:7c:98:79:8c:69:
ca:88:59:34:f4:14:43:0d:b1:42:75:08:bd:93:26:
8e:cf:38:1d:55:69:b2:3f:e1:a7:09:7f:ef:bf:61:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F7:86:48:9F:D0:86:3A:8A:70:F4:34:F4:D8:AB:F5:A0:EB:AC:AB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:ba::/48
2a13:9500:bc::/48
Signature Algorithm: sha256WithRSAEncryption
4f:2f:f7:0e:22:30:86:7d:8d:fb:d8:2f:ed:9f:2f:04:1e:64:
24:63:c8:9f:fb:6e:fa:f4:0a:4a:0e:a4:a3:8e:93:e7:e3:c4:
33:9e:51:4f:c9:83:bd:8c:ca:40:f4:d4:c8:72:0f:ed:8f:22:
bd:72:df:15:c3:b3:6d:d1:6f:2e:a0:19:03:31:55:eb:b5:43:
f4:90:40:55:c8:55:a0:be:49:0f:e0:3c:b5:ed:33:42:03:6d:
a6:dd:c6:78:5a:10:d0:81:65:1e:4e:2a:3d:7b:17:56:ca:23:
26:79:fd:47:58:67:ee:4f:ac:03:44:3c:36:bc:4e:db:da:0f:
97:42:15:46:d1:64:2b:f0:8e:3b:c1:f7:8c:c9:71:c5:33:ce:
51:6c:1c:8c:4c:d5:44:05:88:25:c5:cb:da:5b:6e:7d:63:ab:
46:31:9b:7f:db:d4:bd:4c:83:bb:69:3f:61:9a:a4:64:14:33:
13:fe:36:19:40:d6:a3:65:ec:68:d0:f7:c1:d8:27:9e:d6:58:
b7:3c:8f:28:8d:0b:5d:84:1c:b3:b1:38:76:a2:44:0d:1b:3d:
b2:7a:8e:76:ce:6d:3a:d0:3e:a5:73:7a:f4:77:c4:5d:1b:87:
71:cb:40:49:97:d7:d7:54:50:65:37:96:46:13:16:52:0a:ac:
98:b3:07:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:44 2026 by rpki-client