Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206300.roa
File: AS206300.roa (raw, json)
Hash identifier: yEniOMcRy641Baf5zx734DM5lmbuX0WGnhx56qIGC1M=
Subject key identifier: CB:92:68:39:CE:44:01:A8:E4:EC:70:82:2B:7A:08:85:81:AC:66:8B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0C1EA276436EAFB2FEBAEEBBEB694BEF90E88A58
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206300.roa
Signing time: Thu 09 Jul 2026 11:08:50 +0000
ROA not before: Thu 09 Jul 2026 11:03:50 +0000
ROA not after: Thu 08 Jul 2027 11:08:50 +0000
asID: 206300
IP address blocks: 2a0f:85c1:cc2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1e:a2:76:43:6e:af:b2:fe:ba:ee:bb:eb:69:4b:ef:90:e8:8a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:50 2026 GMT
Not After : Jul 8 11:08:50 2027 GMT
Subject: CN=CB926839CE4401A8E4EC70822B7A088581AC668B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:83:22:c6:bf:d4:c1:a9:ff:4c:e7:35:ee:
91:0d:fe:1b:88:4b:a3:87:5d:1d:5b:aa:9e:14:40:
48:10:bf:89:0c:fb:ce:69:65:a3:92:54:8b:db:5a:
40:81:a0:2a:7f:14:19:ce:68:11:b3:cb:e8:1f:76:
49:c8:19:4b:92:fe:09:aa:65:96:65:36:e5:67:1c:
f4:c1:42:2d:ab:31:96:b1:0c:8f:f8:8b:a1:99:bf:
03:ba:bb:f9:b7:b8:52:9e:f2:46:68:0b:e2:59:bb:
9c:10:9a:13:88:ca:6a:b5:ff:d9:af:07:34:f7:bd:
6c:01:bb:16:42:c4:ca:98:f2:41:8a:10:4c:d3:e7:
2a:e3:52:ad:6f:af:73:62:c6:67:e2:ca:23:2b:6f:
39:94:3b:7b:28:37:5b:d5:ca:2a:02:46:39:7e:00:
91:0f:72:e6:20:32:06:fb:7d:87:34:e5:06:b8:b1:
47:ff:fe:0f:60:5b:b9:31:aa:86:43:67:ea:2c:46:
fc:b2:3d:d7:bb:5d:9e:33:f1:86:f3:f1:23:1e:1c:
c2:ea:48:7f:ac:90:86:be:7c:6b:20:16:fa:42:ef:
bb:b4:a6:c0:08:5f:b6:e8:d8:0f:54:67:a4:82:81:
e0:24:96:03:f0:ea:cd:fd:cc:c1:2f:51:33:02:9e:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:92:68:39:CE:44:01:A8:E4:EC:70:82:2B:7A:08:85:81:AC:66:8B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206300.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cc2::/48
Signature Algorithm: sha256WithRSAEncryption
79:0b:77:34:72:83:55:e6:8d:37:11:a8:54:7f:04:f9:72:99:
a0:8c:60:17:ef:85:31:a4:f7:6e:69:ff:40:80:b5:71:6f:b8:
1d:d1:ca:39:fa:22:37:c7:46:2a:5e:c9:e4:16:92:43:25:57:
77:5a:b9:cb:10:b5:11:34:f7:4f:0c:24:e5:80:94:e3:35:31:
2a:ea:da:6e:25:7e:d7:bc:c3:54:ed:25:1c:d9:e8:44:be:34:
ec:b3:fe:a1:8d:4d:4e:86:35:19:1b:8d:9f:a5:dd:06:bb:bd:
fe:41:f2:43:bb:ad:2f:37:fc:cb:97:50:cb:7f:0e:c5:17:d4:
f8:3f:44:79:a5:dc:a4:5d:71:e9:1a:a3:5f:3e:b0:77:c3:0f:
a2:c5:5d:60:3e:0e:85:60:d0:03:6c:49:04:7d:3d:b2:54:30:
bc:12:54:d2:de:90:f4:74:8a:4a:6b:34:7b:4f:3c:b2:fa:52:
cd:de:61:42:15:65:ec:d6:ed:b6:94:8b:f6:e0:db:11:33:69:
b3:0f:dd:2e:1f:32:2d:26:07:32:53:6a:ca:43:15:b6:58:32:
c5:4e:60:7b:e1:63:21:83:e0:3e:a0:02:89:f9:35:3a:46:85:
66:4c:99:a5:6e:ce:ac:2d:c4:9a:88:54:a4:11:5a:50:34:a9:
6d:cb:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:47:52 2026 by rpki-client