Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206533.roa
File: AS206533.roa (raw, json)
Hash identifier: i1H+Q/rSac6hARYEd9GF2HPGCgG2bBawI5IOq2wmp90=
Subject key identifier: BC:D3:67:57:17:F1:65:98:28:94:C7:85:A7:13:57:17:DA:7C:DB:09
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2197AFCBCCBA700C53E7310651E042A66EA0033D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206533.roa
Signing time: Fri 16 Oct 2026 02:09:20 +0000
ROA not before: Fri 16 Oct 2026 02:04:20 +0000
ROA not after: Fri 15 Oct 2027 02:09:20 +0000
asID: 206533
IP address blocks: 2a0f:85c1:d6a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:97:af:cb:cc:ba:70:0c:53:e7:31:06:51:e0:42:a6:6e:a0:03:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 16 02:04:20 2026 GMT
Not After : Oct 15 02:09:20 2027 GMT
Subject: CN=BCD3675717F165982894C785A7135717DA7CDB09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:d0:0d:fc:dc:3f:86:85:28:01:7b:d1:69:
e4:4f:28:85:56:49:2b:02:c2:42:9d:68:1b:82:43:
4b:ee:ba:41:b9:7b:1c:09:53:00:85:fa:f9:0d:7d:
dc:e4:af:61:5c:83:11:87:51:06:da:c4:af:b1:8e:
77:83:f1:bc:ed:b6:27:99:ab:ad:49:b4:a0:bf:08:
70:82:3f:06:97:d9:ab:97:71:3d:da:35:5b:1d:66:
18:6c:50:d9:dc:b4:44:ce:7f:06:40:a3:07:00:2f:
5e:82:86:85:79:0c:b3:80:62:94:19:ce:54:b3:95:
75:63:0b:25:65:7c:44:22:79:37:8a:d4:f3:83:69:
d7:c6:68:74:fa:4f:e7:ad:b0:f9:54:17:8d:a0:5c:
2a:78:c1:b7:2a:da:f7:9e:76:83:5f:31:fe:1d:94:
c5:eb:93:b5:76:65:29:13:c5:01:4d:b1:ff:de:1e:
0c:e9:36:06:6f:20:49:51:f7:95:fc:0a:23:c7:25:
01:a4:90:08:75:50:cf:f6:63:9a:16:a7:e1:a1:0b:
0e:82:31:a2:b3:0b:67:61:7c:ab:97:65:d4:22:a9:
56:1f:57:f9:ec:a4:e9:ac:22:ef:a6:91:c8:2b:d8:
0e:02:1f:56:de:de:bc:6c:07:94:bf:70:63:eb:40:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:67:57:17:F1:65:98:28:94:C7:85:A7:13:57:17:DA:7C:DB:09
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d6a::/48
Signature Algorithm: sha256WithRSAEncryption
67:34:04:34:10:d2:c3:24:ea:30:c9:37:2d:8b:ce:3a:fe:b9:
b5:eb:e4:5d:73:b8:aa:c5:6f:f9:f5:b7:d1:a6:ef:e0:24:d7:
78:6c:fb:a7:ec:dd:ca:d0:30:64:41:f8:ee:26:8d:71:02:bb:
45:60:47:f0:f3:4d:f0:d0:7b:22:db:1d:77:74:7e:3b:00:07:
c7:3d:95:a7:9f:29:5f:57:a8:5a:89:68:24:26:71:15:4e:25:
63:9e:5a:c5:b6:c2:a4:bb:73:c5:23:f1:7b:8f:8c:1e:d8:18:
fe:ce:41:e3:18:c5:9c:07:43:bf:8b:78:9b:28:2b:55:33:03:
63:ef:7b:0b:d4:fa:21:61:20:5a:e3:3d:18:e7:27:f8:35:09:
65:07:4f:ff:56:2f:5b:6e:11:80:9e:d1:c8:01:e4:08:d4:5d:
20:f4:45:a6:a9:87:40:5d:d0:26:2f:ce:f3:3e:ad:42:a5:29:
2e:e9:d0:75:1c:fc:c9:49:c3:36:19:97:7d:9a:2c:5f:cc:cd:
70:07:cf:93:6d:54:6f:e3:53:e3:83:ec:7d:41:45:2f:51:eb:
3c:68:07:e1:a5:08:3c:19:a4:e4:74:24:b9:5a:93:0b:d5:1e:
d4:27:74:0e:1c:2c:7d:87:a9:d2:8d:0e:4d:36:23:7f:0a:7e:
e3:67:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:06:36 2026 by rpki-client