Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS206987.roa
File: AS206987.roa (raw, json)
Hash identifier: yN5o6/4z3ll9x5xLfuC9nGZ3NjiiyWhZwTFORiB6w0Y=
Subject key identifier: 15:55:CD:BC:1B:D7:AF:22:77:05:27:41:C3:F4:2E:7F:09:90:DA:39
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7047D300230D5040770EA47167C246785DCDCB99
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS206987.roa
Signing time: Tue 29 Sep 2026 19:57:11 +0000
ROA not before: Tue 29 Sep 2026 19:52:11 +0000
ROA not after: Tue 28 Sep 2027 19:57:11 +0000
asID: 206987
IP address blocks: 193.151.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:47:d3:00:23:0d:50:40:77:0e:a4:71:67:c2:46:78:5d:cd:cb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 29 19:52:11 2026 GMT
Not After : Sep 28 19:57:11 2027 GMT
Subject: CN=1555CDBC1BD7AF2277052741C3F42E7F0990DA39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:f2:38:c4:c7:66:4b:c8:ac:ed:a4:16:83:
76:21:6b:ee:02:fe:61:68:73:2c:f7:00:5d:62:8d:
ea:f0:cd:70:bd:b7:aa:dd:e3:6c:04:ea:12:46:d5:
70:5e:0b:c4:32:0e:34:2f:90:9f:d8:ca:00:73:e3:
35:9b:52:ba:4e:2a:48:ab:5f:ff:65:4b:03:f2:df:
3c:31:27:ee:3b:5c:fa:b3:28:95:6e:5e:4d:7b:0a:
ba:9d:74:f3:0e:69:a3:ee:b1:a0:c5:0b:9c:d3:ca:
8d:3b:94:01:bd:39:c5:90:5d:1e:3f:3a:c1:c5:de:
75:c1:04:66:ef:a5:5e:73:80:0d:04:64:a6:2a:2b:
c9:6b:00:89:b6:63:21:2e:7e:8c:f2:04:f1:b2:5a:
ac:1b:71:02:bf:39:b1:44:91:f9:3e:7a:79:00:ac:
a4:b6:42:af:d5:74:de:39:8a:f7:c7:e4:d6:20:88:
f3:e2:6a:85:d5:a9:99:d8:b0:e7:57:e8:c3:b1:48:
1d:c0:d3:b8:79:28:60:4a:4b:d3:05:b0:9f:19:99:
de:49:89:e7:01:0c:8d:44:80:6b:7f:7a:f9:09:cb:
ec:35:70:0f:68:09:af:be:1b:7c:62:57:27:6b:31:
86:1a:d7:1a:ff:6d:c6:1f:51:e6:df:42:30:bf:b9:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:CD:BC:1B:D7:AF:22:77:05:27:41:C3:F4:2E:7F:09:90:DA:39
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS206987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.181.0/24
Signature Algorithm: sha256WithRSAEncryption
98:29:3f:a4:d3:a1:11:6e:d3:df:d0:d1:6d:9f:ba:dd:c6:5f:
5f:a7:25:03:20:47:a1:b4:91:92:b0:63:1e:9a:16:e0:1e:d3:
bb:bc:a4:fe:8e:08:2a:ee:06:81:54:e4:f8:2b:c3:e1:88:15:
b5:68:ea:f3:6c:5a:f5:38:11:da:9a:1b:f2:ee:d0:34:dc:be:
25:c9:64:ff:32:0c:b6:11:06:98:31:3e:ce:94:47:b0:9b:68:
d9:9e:86:1a:49:76:bd:dd:f5:30:51:22:e7:0d:68:5c:b4:75:
b4:71:78:e2:99:1f:b5:e2:a9:2a:06:5d:ff:f5:66:11:bd:38:
a3:f1:fc:02:44:ea:22:df:3b:62:7a:d1:83:9c:f3:4a:24:29:
de:a4:98:4a:ac:4b:a9:98:b5:39:a5:69:56:ce:6a:41:4e:71:
77:6c:d5:4f:17:f4:36:72:8a:2c:dd:8b:ea:f9:e3:2d:fe:de:
2a:53:a6:3f:9e:13:26:97:0d:8f:0d:b9:50:08:28:be:1e:4b:
7b:3b:91:ea:84:4f:93:27:53:30:0b:9d:4c:a7:26:25:f1:6f:
43:54:36:66:a1:2a:60:a1:87:32:db:68:e6:55:bd:24:a6:9a:
06:87:50:44:89:aa:68:d9:ac:59:2e:51:5a:1f:b6:6c:3f:18:
d5:d5:7f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:54:23 2026 by rpki-client