Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206183.roa
File: AS206183.roa (raw, json)
Hash identifier: /mHOh95NApv8V45SQpGPZ1uOtWX3zmeOwbHRjIHWmPU=
Subject key identifier: 40:2A:0A:30:07:ED:D7:3F:84:7B:F5:F6:21:F8:7E:BF:45:19:FF:BF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5FF39E97CB214CF2DC4C8C3A41E70446EC37965F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206183.roa
Signing time: Thu 09 Jul 2026 11:08:49 +0000
ROA not before: Thu 09 Jul 2026 11:03:49 +0000
ROA not after: Thu 08 Jul 2027 11:08:49 +0000
asID: 206183
IP address blocks: 2a0f:85c1:cc9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f3:9e:97:cb:21:4c:f2:dc:4c:8c:3a:41:e7:04:46:ec:37:96:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:49 2026 GMT
Not After : Jul 8 11:08:49 2027 GMT
Subject: CN=402A0A3007EDD73F847BF5F621F87EBF4519FFBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:d8:12:47:75:a9:ec:6b:24:fe:b7:a4:fa:
93:02:1e:ef:9f:ac:19:0a:74:95:4e:00:26:c9:e1:
3e:15:77:1c:4d:6d:cb:28:ad:f8:17:53:c6:ba:12:
b5:d4:29:f1:7f:eb:17:eb:f2:db:32:f1:cb:be:ff:
4e:73:50:e3:0d:0f:60:6c:fc:ff:d7:ba:dd:ee:77:
f7:75:fe:eb:39:b1:be:01:04:b9:15:b0:a4:48:3a:
22:21:e6:43:6b:b6:e0:57:4f:55:0e:85:86:0b:f2:
51:52:7e:26:e3:88:42:ac:68:f6:4e:6c:a2:7e:96:
d6:af:94:0e:92:37:87:7f:d7:cd:01:5d:ab:37:94:
62:31:a0:b6:fb:7b:bd:47:3b:e7:a0:43:89:e3:09:
7c:a7:6c:78:8b:3e:d5:a1:e4:bb:cb:2e:e9:3d:68:
42:3a:a3:ae:8c:c4:01:de:c9:cb:fa:d8:4e:6f:48:
5a:ca:16:1a:e5:f8:64:74:e7:ee:99:2f:72:c1:78:
57:06:eb:a5:c8:4d:39:72:07:76:3a:da:87:b3:77:
92:b2:d5:43:f1:3a:f6:47:25:af:a5:04:b8:fc:1b:
ad:89:07:ca:01:7e:eb:9e:c1:f6:8f:b2:84:78:11:
35:e6:83:97:bc:3f:ad:b2:ed:9e:b1:56:44:56:04:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2A:0A:30:07:ED:D7:3F:84:7B:F5:F6:21:F8:7E:BF:45:19:FF:BF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cc9::/48
Signature Algorithm: sha256WithRSAEncryption
49:da:5b:c6:11:b2:40:d5:2c:be:5b:96:a2:cb:7a:97:e2:84:
19:85:e1:37:68:e2:87:c4:c6:ce:82:83:4e:ab:42:e3:d5:35:
e6:13:53:b6:cb:74:50:44:66:e3:54:6b:eb:65:84:65:74:31:
6a:c7:b9:32:1e:3e:d8:54:a4:13:66:e1:cf:80:4c:af:d3:48:
de:8b:d7:de:a7:86:17:cc:cc:ca:89:69:d2:0c:81:ed:33:66:
cc:05:17:22:26:af:69:5b:db:91:23:8a:12:70:e5:78:5e:17:
85:49:8b:3b:71:99:52:58:3d:4a:9b:46:90:b2:a4:39:b3:d6:
da:e7:9f:d3:79:e0:d2:62:f3:5c:59:62:61:f7:1b:57:75:09:
64:62:f1:e9:4f:28:dc:43:82:dd:ce:e6:a7:70:e4:b5:f3:41:
ad:1d:a2:7b:50:c6:97:3d:b1:3f:7a:0e:87:23:99:e0:fd:32:
3f:38:84:f9:ea:00:23:ab:c6:46:12:48:89:cb:82:bb:cc:3c:
59:7e:f0:56:e7:1a:a8:c6:f9:0f:ca:44:19:fb:21:28:66:1e:
0a:00:54:e5:f4:c4:dd:5e:00:74:51:ee:04:89:1b:7c:79:24:
f4:04:31:86:e3:a8:db:d9:ae:b2:b6:d0:d9:79:f7:91:41:8b:
24:5f:6c:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUX/Oel8shTPLcTIw6QecERuw3ll8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA3MDkxMTAzNDlaFw0yNzA3MDgxMTA4NDlaMDMxMTAvBgNV
BAMTKDQwMkEwQTMwMDdFREQ3M0Y4NDdCRjVGNjIxRjg3RUJGNDUxOUZGQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogNgSR3Wp7Gsk/rek+pMCHu+f
rBkKdJVOACbJ4T4VdxxNbcsorfgXU8a6ErXUKfF/6xfr8tsy8cu+/05zUOMND2Bs
/P/Xut3ud/d1/us5sb4BBLkVsKRIOiIh5kNrtuBXT1UOhYYL8lFSfibjiEKsaPZO
bKJ+ltavlA6SN4d/180BXas3lGIxoLb7e71HO+egQ4njCXynbHiLPtWh5LvLLuk9
aEI6o66MxAHeycv62E5vSFrKFhrl+GR05+6ZL3LBeFcG66XITTlyB3Y62oezd5Ky
1UPxOvZHJa+lBLj8G62JB8oBfuuewfaPsoR4ETXmg5e8P62y7Z6xVkRWBM6BAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUQCoKMAft1z+Ee/X2Ifh+v0UZ/78wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA2MTgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQzJMA0GCSqGSIb3DQEBCwUAA4IBAQBJ2lvGEbJA1Sy+W5aiy3qX4oQZheE3aOKH
xMbOgoNOq0Lj1TXmE1O2y3RQRGbjVGvrZYRldDFqx7kyHj7YVKQTZuHPgEyv00je
i9fep4YXzMzKiWnSDIHtM2bMBRciJq9pW9uRI4oScOV4XheFSYs7cZlSWD1Km0aQ
sqQ5s9ba55/TeeDSYvNcWWJh9xtXdQlkYvHpTyjcQ4LdzuancOS180GtHaJ7UMaX
PbE/eg6HI5ng/TI/OIT56gAjq8ZGEkiJy4K7zDxZfvBW5xqoxvkPykQZ+yEoZh4K
AFTl9MTdXgB0Ue4EiRt8eST0BDGG46jb2a6yttDZefeRQYskX2wG
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:02 2026 by rpki-client