Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206269.roa
File: AS206269.roa (raw, json)
Hash identifier: EagUSPbMT1AYYQVwcbgMdC83of0q7o299SBsZAqj370=
Subject key identifier: C8:FC:94:62:D1:9B:F6:40:97:9C:7E:AC:CD:67:3B:BF:26:F2:97:E4
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2B5E3D54C73470CF9F279C49E6BF9A6CFB523FF3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206269.roa
Signing time: Thu 09 Jul 2026 11:08:49 +0000
ROA not before: Thu 09 Jul 2026 11:03:49 +0000
ROA not after: Thu 08 Jul 2027 11:08:49 +0000
asID: 206269
IP address blocks: 2a0f:85c1:cc3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5e:3d:54:c7:34:70:cf:9f:27:9c:49:e6:bf:9a:6c:fb:52:3f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:49 2026 GMT
Not After : Jul 8 11:08:49 2027 GMT
Subject: CN=C8FC9462D19BF640979C7EACCD673BBF26F297E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:0a:3f:fd:e1:a0:f7:cc:4a:95:af:e7:77:
84:15:a1:13:ac:59:03:bd:7a:08:41:7c:3c:44:b5:
c2:3c:5d:0b:1c:42:18:11:4d:49:4f:31:eb:3c:91:
fb:2b:1b:68:fb:7e:7c:16:dc:e9:9c:72:2d:8f:07:
5a:51:d8:23:33:f1:df:91:c6:1a:35:d8:3e:f2:2b:
98:76:9a:28:fc:33:4d:c0:d2:01:eb:73:f3:08:62:
ed:04:ab:15:ad:4f:1d:f7:9d:99:b9:e6:e1:85:31:
bb:42:e6:3d:59:5f:18:fb:8d:2a:d4:f2:ad:ce:1f:
7d:ad:20:dd:d6:df:18:36:6e:97:9e:37:cf:14:c6:
d0:25:0b:95:c1:17:5d:26:94:d5:8b:ca:55:6d:a5:
0f:77:3e:24:bd:ad:5c:38:d9:04:a8:22:72:1f:ed:
77:39:2e:ae:0d:32:20:b7:65:fc:66:bd:ad:54:c2:
74:88:cb:5a:88:08:2f:a0:d9:f6:53:a2:d7:73:91:
d9:1b:31:15:40:d8:16:0d:4a:84:44:1c:e9:80:c0:
ae:9d:82:c1:60:07:89:c6:37:ac:73:6a:5e:27:51:
85:3d:ce:c0:c7:b8:a6:6b:3f:bf:d4:ea:35:10:b8:
bc:b8:97:61:5d:fe:e8:ae:fe:4d:14:5f:e0:43:b2:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FC:94:62:D1:9B:F6:40:97:9C:7E:AC:CD:67:3B:BF:26:F2:97:E4
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206269.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cc3::/48
Signature Algorithm: sha256WithRSAEncryption
95:2a:4b:a0:7c:a0:9f:df:c9:54:99:e4:23:1e:db:8b:5c:a3:
ac:da:84:7d:53:d9:34:31:48:31:06:2d:23:cc:09:aa:13:7d:
ef:bc:08:83:55:6a:39:fd:40:ed:17:59:07:ca:20:75:15:8e:
6f:87:7f:2a:28:33:a6:47:1d:3c:8f:4f:1c:ff:ad:4b:7f:5f:
3e:e9:c2:ed:1b:97:55:49:75:f7:ab:d0:76:2e:62:10:5a:7c:
e3:4b:f2:92:a6:fa:bd:1e:be:7b:b7:53:d9:8f:35:d5:48:cc:
39:e1:b9:7b:32:83:db:6e:3b:f5:b4:d3:57:aa:27:52:bc:8c:
f7:38:6e:16:e4:b4:da:85:13:91:9f:01:48:53:cb:46:36:fd:
dd:c9:37:21:03:dc:b7:25:51:33:b7:68:c4:8d:37:fd:be:b3:
65:d5:37:c6:b0:4e:f9:ca:37:6a:2e:24:5f:9d:35:a4:ae:6d:
af:94:b8:d9:59:43:21:8a:15:c7:8a:61:87:e8:62:3f:8d:67:
37:24:45:93:78:82:39:90:1e:a3:ed:9c:38:a7:73:54:23:74:
20:ab:f4:84:8f:a3:a1:dd:77:ba:a0:7f:89:84:14:20:b8:b2:
8a:6a:d8:9f:b8:5e:d0:af:bd:ec:96:c1:74:dd:14:70:6a:65:
ce:03:7f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:05 2026 by rpki-client