Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206971.roa
File: AS206971.roa (raw, json)
Hash identifier: 5P9+hUxIAQB0BmvUJHrpfhxp/dIgMNYq+oMbW3DiXqQ=
Subject key identifier: A2:75:2C:89:CD:AD:B9:C7:CE:28:7C:62:CF:1C:98:02:0D:D5:A6:A1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 336492EA59421AFC25B26C23B86E06CA322B1A7C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206971.roa
Signing time: Wed 03 Sep 2025 17:52:58 +0000
ROA not before: Wed 03 Sep 2025 17:47:58 +0000
ROA not after: Wed 02 Sep 2026 17:52:58 +0000
asID: 206971
IP address blocks: 2a13:9500:d6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:64:92:ea:59:42:1a:fc:25:b2:6c:23:b8:6e:06:ca:32:2b:1a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 3 17:47:58 2025 GMT
Not After : Sep 2 17:52:58 2026 GMT
Subject: CN=A2752C89CDADB9C7CE287C62CF1C98020DD5A6A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:5b:c9:56:08:3f:30:dd:2c:92:c6:67:aa:
00:d8:3b:62:76:a6:13:7d:a7:d2:db:48:60:d3:17:
e4:97:55:5d:3e:03:59:be:84:7b:5a:9a:4d:f4:7c:
17:af:70:67:46:fa:7e:6f:36:c2:d7:5c:18:6b:c3:
aa:6e:0a:05:a0:9b:ea:d2:b3:73:96:1f:b8:01:15:
34:a3:6d:14:33:0a:b8:81:6d:bf:98:90:cc:99:08:
52:c3:d4:e1:b7:fc:5b:16:65:0e:74:f2:ad:d9:90:
a9:d5:b1:45:68:10:d1:80:9f:17:14:72:2f:87:96:
cf:73:a4:02:ec:ad:6c:f2:60:df:3a:3d:e8:d3:24:
4d:66:dd:34:e8:40:bc:e6:f6:03:56:88:cd:9d:c6:
cd:99:e2:11:ef:61:51:8d:1d:5c:0b:2e:84:e8:f3:
de:ae:a8:ce:c2:df:8d:68:fc:be:6c:2a:fe:19:d3:
a2:47:bb:9b:13:eb:af:a5:08:40:52:e7:92:23:ab:
5c:5d:d6:6e:e1:e6:8d:40:42:6b:22:18:78:b2:11:
7a:ff:3e:36:63:7b:fe:25:d9:29:cf:49:21:4b:c6:
87:ab:b4:4f:21:cf:ea:46:ee:b1:2e:8c:8a:6f:2a:
70:91:5b:72:9e:7b:6b:8a:2d:1e:ed:7c:e6:6d:e5:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:2C:89:CD:AD:B9:C7:CE:28:7C:62:CF:1C:98:02:0D:D5:A6:A1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206971.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:d6::/48
Signature Algorithm: sha256WithRSAEncryption
10:1f:bc:23:e0:61:3f:78:ad:c3:f0:87:e9:c3:bb:fb:de:f4:
05:48:f8:ce:27:02:88:ab:ab:ad:7d:15:b5:fb:19:dd:7e:ef:
74:24:5d:c1:16:4c:f8:14:ec:39:d5:d1:09:29:1a:08:c2:8f:
b8:9e:8d:d6:45:9b:88:82:f2:68:54:a4:dc:a6:2c:ee:93:d7:
62:6e:b8:15:2f:03:b4:e6:51:10:f8:f9:f5:c7:b1:7a:06:88:
dd:88:e6:9b:6f:0d:a8:4f:4d:b5:44:c0:75:7e:ae:11:62:1d:
6f:06:56:6e:fb:d7:70:37:43:39:a2:9f:31:b4:c1:9a:a5:6f:
61:07:5c:8f:a2:a3:dd:ff:e5:d7:3b:82:9f:d0:3d:17:b3:b4:
55:ab:c1:55:8a:9a:b4:d8:9f:3d:45:37:16:50:b3:25:fe:2f:
b5:95:5a:47:35:08:78:43:63:c4:07:80:47:32:dd:d6:f2:6d:
f6:f6:68:15:4c:62:af:1d:24:4a:65:78:4c:6e:f8:18:48:5a:
d0:20:51:c2:82:43:02:c1:0e:8b:70:e9:f2:b2:95:5b:15:48:
7f:dd:dc:67:84:7b:44:39:05:c1:4d:18:16:c5:6d:c9:1d:ef:
f5:8a:0b:88:de:dd:4d:b8:08:16:8d:42:78:d0:13:d3:2a:4f:
5b:2b:65:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUM2SS6llCGvwlsmwjuG4GyjIrGnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA5MDMxNzQ3NThaFw0yNjA5MDIxNzUyNThaMDMxMTAvBgNV
BAMTKEEyNzUyQzg5Q0RBREI5QzdDRTI4N0M2MkNGMUM5ODAyMERENUE2QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JFvJVgg/MN0sksZnqgDYO2J2
phN9p9LbSGDTF+SXVV0+A1m+hHtamk30fBevcGdG+n5vNsLXXBhrw6puCgWgm+rS
s3OWH7gBFTSjbRQzCriBbb+YkMyZCFLD1OG3/FsWZQ508q3ZkKnVsUVoENGAnxcU
ci+Hls9zpALsrWzyYN86PejTJE1m3TToQLzm9gNWiM2dxs2Z4hHvYVGNHVwLLoTo
896uqM7C341o/L5sKv4Z06JHu5sT66+lCEBS55Ijq1xd1m7h5o1AQmsiGHiyEXr/
PjZje/4l2SnPSSFLxoertE8hz+pG7rEujIpvKnCRW3Kee2uKLR7tfOZt5Q77AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUonUsic2tucfOKHxizxyYAg3VpqEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA2OTcxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AADWMA0GCSqGSIb3DQEBCwUAA4IBAQAQH7wj4GE/eK3D8Ifpw7v73vQFSPjOJwKI
q6utfRW1+xndfu90JF3BFkz4FOw51dEJKRoIwo+4no3WRZuIgvJoVKTcpizuk9di
brgVLwO05lEQ+Pn1x7F6BojdiOabbw2oT021RMB1fq4RYh1vBlZu+9dwN0M5op8x
tMGapW9hB1yPoqPd/+XXO4Kf0D0Xs7RVq8FVipq02J89RTcWULMl/i+1lVpHNQh4
Q2PEB4BHMt3W8m329mgVTGKvHSRKZXhMbvgYSFrQIFHCgkMCwQ6LcOnyspVbFUh/
3dxnhHtEOQXBTRgWxW3JHe/1iguI3t1NuAgWjUJ40BPTKk9bK2Wx
-----END CERTIFICATE-----
Generated at Fri Sep 5 09:49:31 2025 by rpki-client