Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206848.roa
File: AS206848.roa (raw, json)
Hash identifier: jX4dski3u/JZMIs9rCHkdP45yK7q6ldo6RfkmIjGnvI=
Subject key identifier: 9C:6E:DA:5D:82:51:6A:3F:CD:C3:6F:F7:6B:57:8E:9A:66:68:AE:D3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 337592D129CF495ADF2ECDDB60F8A18E776C4C1F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206848.roa
Signing time: Mon 02 Mar 2026 09:41:31 +0000
ROA not before: Mon 02 Mar 2026 09:36:31 +0000
ROA not after: Mon 01 Mar 2027 09:41:31 +0000
asID: 206848
IP address blocks: 178.83.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:75:92:d1:29:cf:49:5a:df:2e:cd:db:60:f8:a1:8e:77:6c:4c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 2 09:36:31 2026 GMT
Not After : Mar 1 09:41:31 2027 GMT
Subject: CN=9C6EDA5D82516A3FCDC36FF76B578E9A6668AED3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:1f:4f:f9:d9:d5:7d:e8:6a:fc:02:cd:40:
ad:a1:6f:ae:88:19:74:3d:2f:21:9e:ef:5a:99:d7:
30:86:63:e9:71:20:1a:51:3d:94:be:ae:b5:81:c4:
0c:db:95:1d:11:6b:1b:48:d4:fa:ae:01:a8:17:7b:
ad:48:e2:57:90:8e:8e:a2:c7:be:44:3f:40:06:3d:
57:85:dc:db:e6:94:b7:7f:d9:d7:36:03:17:7c:42:
a2:a6:69:2f:9e:f0:e6:7c:23:ed:fd:98:8e:5b:98:
35:07:eb:29:c9:42:5b:83:90:58:91:ad:ca:04:bc:
77:14:5d:2f:f9:49:1f:b3:33:9d:cb:28:b5:3a:46:
dd:a4:af:f7:d5:66:f0:ef:5a:37:64:7e:c4:56:8a:
7f:59:2e:64:5d:6b:70:61:f9:89:42:7b:3c:2c:35:
98:2d:e7:90:f9:db:12:c3:1f:9c:44:01:dc:36:b9:
a4:a1:52:22:7c:fc:c9:d1:f0:84:f7:49:5b:7e:6f:
ce:9b:d9:b6:3d:a8:68:0a:2c:71:09:2b:c9:1c:01:
e2:72:be:23:74:f0:8c:36:e3:45:c4:cf:3f:97:a9:
94:37:7e:49:40:a3:cd:f3:68:7c:5e:91:d9:55:5e:
82:6f:3e:b6:37:ea:33:33:a3:05:a0:e5:dc:48:29:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6E:DA:5D:82:51:6A:3F:CD:C3:6F:F7:6B:57:8E:9A:66:68:AE:D3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206848.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.183.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ef:5b:bd:38:ac:61:e8:aa:44:71:26:8e:2a:85:d5:e0:1a:
3b:9c:4b:b5:5c:70:83:7b:46:a6:dd:8e:82:5f:e4:15:1b:25:
ca:37:20:7b:5e:01:60:99:5a:b6:6d:43:48:b5:9a:6c:85:48:
55:f4:4d:dd:5b:ec:ff:e5:5e:d0:b2:3d:f6:19:f7:29:6f:b9:
0c:5c:5b:af:5a:ff:c7:d1:00:80:24:7d:51:54:1f:a0:b8:79:
c4:79:fd:7d:33:c0:77:9d:a9:91:a5:9b:4e:16:d3:1b:f6:81:
9d:26:80:3c:9b:41:5b:ce:60:ba:60:bd:03:b3:7b:22:90:3d:
de:7b:0c:cb:d8:4b:3a:09:0e:de:32:79:4c:c3:17:2c:96:91:
e3:82:97:d6:4c:7f:40:08:5e:2a:54:44:eb:d2:4c:06:18:a1:
0a:2a:aa:dc:95:18:9e:76:ae:35:9e:74:b4:0f:4a:32:38:ea:
9c:13:6d:1e:cc:68:32:a7:4f:7b:4a:a4:50:d7:bb:6d:f1:da:
3d:92:75:c8:50:35:0d:a8:2c:1e:8a:00:2a:74:d8:fc:22:b8:
44:78:82:1f:3c:47:19:7e:a0:09:4c:40:b1:98:41:33:4a:b8:
0c:ba:67:bb:65:1e:55:df:d9:35:65:1d:8a:09:da:62:1f:98:
8d:c3:04:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:01:43 2026 by rpki-client