Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206030.roa
File: AS206030.roa (raw, json)
Hash identifier: CH2GCFIq/nzv+2hYMIt1HdtzfYilludRHQjbpF/I/EM=
Subject key identifier: 54:91:26:13:AA:66:DC:0E:33:C8:45:52:40:0C:9B:12:CC:D0:9D:98
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 32C395896FFE4536B0D799F0A530592ABF8DCDAC
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206030.roa
Signing time: Thu 09 Jul 2026 11:08:49 +0000
ROA not before: Thu 09 Jul 2026 11:03:49 +0000
ROA not after: Thu 08 Jul 2027 11:08:49 +0000
asID: 206030
IP address blocks: 2a0f:85c1:cd3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c3:95:89:6f:fe:45:36:b0:d7:99:f0:a5:30:59:2a:bf:8d:cd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:49 2026 GMT
Not After : Jul 8 11:08:49 2027 GMT
Subject: CN=54912613AA66DC0E33C84552400C9B12CCD09D98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:ac:16:08:87:cf:36:7b:bd:fd:31:e7:5a:
8a:f1:7d:33:45:4b:2d:b2:16:04:df:02:04:00:f2:
ce:b1:66:41:71:7e:de:34:d7:a5:45:cb:35:9b:74:
5f:bd:a7:2c:29:0e:4e:30:0c:88:f2:ba:81:54:26:
ea:a9:f8:aa:99:6d:6e:d7:16:3f:9d:d6:67:fa:2b:
6f:2f:47:d3:c3:00:0b:e8:93:4d:df:36:54:4c:d3:
35:06:af:0a:0b:f3:ab:97:c8:50:ec:02:c1:6e:04:
5f:0e:99:8d:b9:d0:99:44:6a:45:8b:ee:ac:14:16:
f7:97:cb:da:5f:41:66:74:2c:5a:67:9c:92:77:ba:
92:c4:d2:d6:45:55:27:16:5f:a3:39:de:99:45:16:
ab:7c:bd:0a:fb:ee:1b:a3:67:b8:ad:f1:79:74:2f:
be:82:01:d2:ad:b7:57:ec:a8:60:20:cb:12:a2:46:
35:8d:ad:71:af:27:b9:99:f0:19:54:5b:08:7c:7b:
6e:6b:01:3f:f9:47:b2:d4:f4:5c:9a:21:18:8e:ae:
9c:1a:bc:62:68:da:5e:ef:ff:5c:62:3b:e2:e5:b8:
ba:c9:67:ac:8e:69:32:79:eb:c8:23:2c:b3:55:ca:
06:85:1c:12:8f:85:0d:38:94:87:81:0b:fc:34:d9:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:26:13:AA:66:DC:0E:33:C8:45:52:40:0C:9B:12:CC:D0:9D:98
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cd3::/48
Signature Algorithm: sha256WithRSAEncryption
dc:b3:ab:e7:f6:19:ec:03:89:dd:db:1b:07:6c:08:7b:41:8a:
9f:9e:4e:09:6d:ad:e6:a6:61:31:c0:91:3c:5e:8d:7b:00:94:
12:e0:65:42:75:6f:e7:32:6a:56:35:ac:13:7f:43:6c:68:f0:
26:16:76:f2:e4:76:13:5b:0b:44:2f:a2:03:71:15:13:f1:f6:
6c:2b:1c:f8:f9:cb:9d:98:28:4c:61:21:f6:d5:b8:d3:ec:ea:
b4:bc:6b:9b:d4:e2:91:e7:cc:aa:89:fb:44:35:b4:44:40:c6:
41:a7:dc:56:f3:2d:4a:0f:91:40:60:50:0f:eb:bb:61:2c:90:
77:94:cd:59:47:7d:ae:32:25:21:97:cd:72:90:52:83:ca:0b:
08:fe:15:cf:c7:10:a8:2b:69:ee:7a:87:5e:60:a4:45:45:72:
16:c0:b8:e2:a0:f8:8a:f5:55:93:60:d5:78:7c:f8:3a:60:3b:
49:6a:44:7b:cf:cc:f9:c8:7d:02:c4:9b:c3:4c:ac:c6:ff:e0:
2f:b6:68:8f:50:f9:90:a8:6d:c4:fd:4f:46:c1:98:7d:fd:a8:
5f:3b:37:a5:f0:57:a4:f1:0b:12:77:72:fe:4d:86:cd:9b:6a:
6f:a6:58:56:0b:9c:01:96:78:b6:d4:42:ab:47:78:0e:3d:b4:
db:f8:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:05 2026 by rpki-client