Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206628.roa
File: AS206628.roa (raw, json)
Hash identifier: YT+UQsG9bFoRwO75DCwnAuh/0KVEiWDlUl4j9kp55uk=
Subject key identifier: B6:5D:92:DD:76:2D:9B:7F:68:1A:43:FA:E0:67:83:34:F8:8F:19:0E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 176A17E2D21D90E14ECA9C9A389294D2A147F39C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206628.roa
Signing time: Fri 26 Jun 2026 08:08:41 +0000
ROA not before: Fri 26 Jun 2026 08:03:41 +0000
ROA not after: Fri 25 Jun 2027 08:08:41 +0000
asID: 206628
IP address blocks: 2a0f:85c1::/48 maxlen: 48
2a0f:85c1:21::/48 maxlen: 48
2a0f:85c1:22::/48 maxlen: 48
2a0f:85c1:30::/48 maxlen: 48
2a0f:85c1:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6a:17:e2:d2:1d:90:e1:4e:ca:9c:9a:38:92:94:d2:a1:47:f3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:41 2026 GMT
Not After : Jun 25 08:08:41 2027 GMT
Subject: CN=B65D92DD762D9B7F681A43FAE0678334F88F190E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:04:83:44:c1:5e:70:d4:a9:fa:34:9c:d3:
94:96:cd:a1:5a:e5:1d:ae:75:f3:49:f0:ca:92:65:
1b:2c:0a:53:94:3c:34:05:df:2c:03:6a:ac:63:ca:
f9:07:67:b8:5c:0a:af:93:2e:f1:28:fb:9d:78:79:
53:e5:01:a2:29:8a:08:c2:14:cf:a1:a5:59:a1:5b:
01:5f:94:bd:c6:7b:7c:de:f2:90:12:42:cb:38:99:
a5:a3:8c:67:44:59:a7:9c:e6:85:24:3b:0a:b3:6c:
55:6a:58:c0:dd:e5:cd:c9:01:21:9c:03:c3:ff:a6:
fd:56:55:61:a7:66:67:87:4c:4f:6d:bc:da:04:c1:
2f:c3:f9:64:f2:2a:85:36:e5:0c:43:3d:dc:a0:d7:
80:27:30:38:41:f1:0c:6c:fc:0f:b7:40:3c:f0:86:
db:65:e1:03:d4:6a:5a:3f:ef:66:1c:24:5a:e7:69:
83:9e:72:6f:9f:19:48:5b:b2:cd:f2:10:f1:e3:ca:
26:c3:16:71:b5:50:a1:1b:97:3a:5d:71:25:5f:23:
63:a9:f2:b3:98:c2:b3:b3:bd:e8:71:bb:8a:c4:3d:
15:53:5d:b8:56:08:24:3f:44:95:9b:3f:d0:3c:56:
97:9b:b7:93:d3:a4:e2:00:78:fc:93:5b:8e:9f:09:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5D:92:DD:76:2D:9B:7F:68:1A:43:FA:E0:67:83:34:F8:8F:19:0E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206628.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1::/48
2a0f:85c1:21::-2a0f:85c1:22:ffff:ffff:ffff:ffff:ffff
2a0f:85c1:30::/47
Signature Algorithm: sha256WithRSAEncryption
89:d3:6d:eb:9c:80:d9:ec:e8:c6:6a:a4:33:a3:ce:a0:8d:2c:
6c:4b:fe:8c:92:45:de:74:8b:11:ab:d6:7f:e1:83:c1:c3:22:
87:fa:e2:65:ed:5e:6e:a4:78:3c:bf:bc:59:c1:d2:4b:9a:53:
be:57:7b:ab:e1:91:6e:fb:64:8a:a4:ae:ef:e5:60:bf:2d:ec:
af:09:55:4b:0b:f9:ec:b0:2f:2c:3f:a0:2a:dc:67:d0:f5:7c:
00:b8:b1:48:79:35:e2:07:4a:c4:14:83:1c:25:87:8d:05:e3:
7d:1b:02:d9:04:cf:7c:91:0d:ae:ae:62:cd:d4:63:c9:11:44:
7d:01:3e:4d:db:e7:72:92:25:83:7e:92:7e:9f:a0:ae:0c:24:
42:cd:5c:5f:e8:38:02:12:fa:57:93:87:13:b0:b5:ae:d6:29:
60:19:e1:32:c9:39:bd:dd:89:b2:67:74:8d:63:0d:84:25:47:
21:5e:57:e0:81:d6:f4:59:ff:4b:4a:fd:9d:3a:30:fc:2d:3d:
a4:5f:9d:c4:99:74:d3:13:d7:39:50:75:9b:ba:99:bb:2b:fd:
d9:39:0c:4c:36:99:76:14:06:85:00:ca:6a:79:9c:59:36:7e:
2e:6e:9a:d5:bb:7c:37:4c:d8:f1:b4:b6:de:86:7a:1f:a1:f1:
18:2c:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:45 2026 by rpki-client