Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206115.roa
File: AS206115.roa (raw, json)
Hash identifier: 1Q8Gpz/MIP8t/i0Su7So6oNomQvem5GS5vKfFJLOAXY=
Subject key identifier: AF:3F:6C:32:EC:00:A7:94:DB:53:90:6B:8A:70:CE:F0:5B:68:92:E9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 09FF54A541FD5862FD62EB441946660DB4DAB1F3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206115.roa
Signing time: Thu 09 Jul 2026 11:08:50 +0000
ROA not before: Thu 09 Jul 2026 11:03:50 +0000
ROA not after: Thu 08 Jul 2027 11:08:50 +0000
asID: 206115
IP address blocks: 2a0f:85c1:cce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ff:54:a5:41:fd:58:62:fd:62:eb:44:19:46:66:0d:b4:da:b1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:50 2026 GMT
Not After : Jul 8 11:08:50 2027 GMT
Subject: CN=AF3F6C32EC00A794DB53906B8A70CEF05B6892E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:49:b2:98:ad:9d:4a:d4:d4:12:87:34:3a:
6d:9c:b0:af:32:5e:c6:47:80:a4:73:5e:d4:95:2e:
a0:52:73:15:3e:3f:82:3f:4f:01:83:91:65:13:8f:
ae:7f:2d:d9:e3:36:17:7a:f8:99:ab:1b:27:bb:94:
91:14:93:9c:16:9e:18:73:5f:de:b0:64:18:ec:22:
c4:2c:4b:5f:c8:b7:93:9e:88:a9:11:3d:42:55:16:
e6:f7:05:98:22:0a:e3:aa:d7:7d:02:f8:3b:8b:b1:
e1:08:4a:32:cc:d6:ae:41:c7:1a:a5:66:b9:14:d8:
9f:16:a4:aa:03:4a:85:c3:66:9b:46:63:c8:c5:36:
3c:ff:0f:9c:e3:5f:f7:64:16:39:10:5e:1b:60:00:
d8:80:a3:7a:86:3b:0d:df:ed:bd:b1:47:43:47:5f:
d0:27:8f:56:55:15:8c:7d:d4:94:b0:44:52:3d:64:
c2:cf:41:b7:a6:4f:22:16:07:85:08:c4:49:73:65:
d8:c6:89:87:0f:f6:0a:a0:9b:51:a2:7b:4e:69:5d:
d7:44:28:8c:c8:f4:90:ed:f4:35:52:9b:40:3f:76:
a2:83:52:ba:35:ca:d4:68:f9:10:fb:f6:e6:29:60:
d0:07:e3:c9:f0:fb:aa:f6:9b:eb:5e:5b:3b:cb:c5:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:6C:32:EC:00:A7:94:DB:53:90:6B:8A:70:CE:F0:5B:68:92:E9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206115.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cce::/48
Signature Algorithm: sha256WithRSAEncryption
87:e7:a2:1d:b2:3a:4b:17:7e:13:f0:9a:e0:68:52:ef:11:da:
21:d2:6c:ea:4f:25:22:56:73:7f:b0:f9:b6:16:af:1f:ea:05:
ab:52:0b:43:61:c8:2d:bb:95:2c:e0:62:b1:7c:2c:98:a4:f5:
75:2a:32:06:6c:46:eb:1e:79:a5:30:01:ad:d2:fa:84:72:2e:
52:0a:68:47:93:15:72:9d:4a:73:21:15:3e:45:2b:22:45:50:
ba:82:31:0e:40:5e:df:c9:31:db:e5:e9:36:8e:df:07:ee:44:
15:5f:a3:a5:89:8c:a0:90:43:21:d0:bc:eb:11:8c:85:af:a1:
bf:6f:cb:d9:24:8f:1c:2f:a3:08:45:63:20:5a:e2:07:35:f1:
76:60:1b:22:b9:b6:c1:99:69:2c:bd:46:a6:9e:20:ee:52:72:
ae:a3:95:46:43:6d:5a:fb:8e:bd:66:00:92:c6:f3:1f:f1:fe:
59:67:f5:de:81:10:5b:69:3c:22:c3:95:19:f1:e4:6a:96:c4:
04:54:6c:d2:3f:90:00:ab:39:f6:d1:f5:08:67:40:c4:e1:47:
bd:96:87:85:79:93:11:c3:7f:1a:f4:80:f4:6f:ed:c2:e9:a0:
6c:c3:8f:67:eb:3c:f8:ae:b3:12:e6:bf:91:4d:b2:19:97:85:
2c:be:ab:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:17 2026 by rpki-client