Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206877.roa
File: AS206877.roa (raw, json)
Hash identifier: Egw8u9yXps5njv68s2hz0E/DO1zlYjqs7/JIJvEO/Nw=
Subject key identifier: F6:5F:BB:68:B3:A0:8D:17:F1:E3:4F:D4:CE:49:2A:23:D9:D1:75:7B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1DFAB40732164699521492BDB95B7E6409B36BC7
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206877.roa
Signing time: Mon 20 Jul 2026 21:08:52 +0000
ROA not before: Mon 20 Jul 2026 21:03:52 +0000
ROA not after: Mon 19 Jul 2027 21:08:52 +0000
asID: 206877
IP address blocks: 2a0f:85c1:c6b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:fa:b4:07:32:16:46:99:52:14:92:bd:b9:5b:7e:64:09:b3:6b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:52 2026 GMT
Not After : Jul 19 21:08:52 2027 GMT
Subject: CN=F65FBB68B3A08D17F1E34FD4CE492A23D9D1757B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:56:8e:b4:bd:f2:5f:78:da:87:24:b2:2d:
f2:ce:99:4a:2c:66:fc:24:55:dd:30:b6:da:3d:c7:
ea:d4:73:a4:09:e9:bf:df:28:e7:dc:65:67:07:b8:
db:77:17:ba:80:2c:51:08:82:7f:5e:01:11:44:25:
79:dc:b0:ce:9a:8d:42:c1:fe:31:8e:77:37:db:9a:
81:bb:ce:31:60:6a:9f:58:40:eb:ba:39:0e:a4:32:
08:f7:64:c6:70:24:1c:7a:0f:82:65:34:53:84:73:
3c:9b:0d:82:5c:d7:2d:d7:8d:cf:0e:6c:0e:d1:0a:
5b:c6:5c:1b:2b:70:f2:1c:09:af:97:1a:ac:e0:15:
95:4e:87:dc:12:f1:69:4a:b6:8f:79:88:0e:ed:d8:
46:1f:6e:5d:1e:5b:1d:fd:3a:3b:2b:04:f7:47:da:
81:2f:e5:dc:a7:a4:e6:b5:b3:41:1c:92:ea:15:e9:
1a:48:d1:11:ac:74:ac:ba:22:5e:a4:be:a6:1d:a3:
39:2e:f9:69:8b:6e:af:7d:d7:f3:cb:bb:56:c9:2d:
b0:50:53:03:7a:4e:fa:69:0d:0d:b6:24:76:45:2f:
fa:6e:b2:56:0f:24:02:db:f4:a3:12:de:e4:13:f7:
80:67:30:d0:8b:2c:93:94:f9:7e:b8:52:51:8e:38:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5F:BB:68:B3:A0:8D:17:F1:E3:4F:D4:CE:49:2A:23:D9:D1:75:7B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206877.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c6b::/48
Signature Algorithm: sha256WithRSAEncryption
5b:7f:42:62:90:ff:91:c4:ef:cf:26:80:ab:9a:4c:d5:69:bd:
ce:4f:b5:15:94:29:5f:61:b0:b9:fe:73:c6:dd:10:26:fb:9a:
f7:32:1c:3b:4c:c4:3f:03:94:d7:a2:ce:bc:51:ac:9d:24:74:
e4:b0:f3:79:13:cb:c7:94:ff:82:46:a8:98:a8:6b:dd:12:0f:
1a:2e:f5:55:ad:87:ac:17:79:7c:d0:45:b3:dd:64:5e:2e:3d:
1e:cd:16:c0:6e:b0:9a:42:1a:95:27:f2:d1:6f:47:fc:74:43:
9b:8a:a0:3c:df:86:12:8f:61:8a:d4:ec:77:86:d9:0d:ff:36:
19:fe:00:fa:f1:00:f3:e3:39:ce:f3:30:96:b0:27:9e:69:d5:
04:ef:9c:40:a5:f0:6f:d1:77:f2:eb:f6:2e:fd:d5:01:49:cc:
0d:c5:9e:e2:a1:ab:5a:a4:27:15:95:5a:8a:dc:45:7d:c6:f0:
66:c5:03:12:76:4e:2d:60:f2:16:25:15:5b:9f:ba:47:30:4c:
33:79:87:57:b8:ba:d3:3b:b6:b0:7d:ce:87:5f:02:6a:bd:62:
93:67:2e:e5:09:35:2c:cc:b6:64:a2:af:1b:a6:8b:f9:42:61:
c7:79:af:ef:b8:53:e8:75:60:f4:0f:14:71:03:d2:92:c3:a8:
5c:ac:68:d7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUHfq0BzIWRplSFJK9uVt+ZAmza8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA3MjAyMTAzNTJaFw0yNzA3MTkyMTA4NTJaMDMxMTAvBgNV
BAMTKEY2NUZCQjY4QjNBMDhEMTdGMUUzNEZENENFNDkyQTIzRDlEMTc1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClh1aOtL3yX3jahySyLfLOmUos
ZvwkVd0wtto9x+rUc6QJ6b/fKOfcZWcHuNt3F7qALFEIgn9eARFEJXncsM6ajULB
/jGOdzfbmoG7zjFgap9YQOu6OQ6kMgj3ZMZwJBx6D4JlNFOEczybDYJc1y3Xjc8O
bA7RClvGXBsrcPIcCa+XGqzgFZVOh9wS8WlKto95iA7t2EYfbl0eWx39OjsrBPdH
2oEv5dynpOa1s0EckuoV6RpI0RGsdKy6Il6kvqYdozku+WmLbq991/PLu1bJLbBQ
UwN6TvppDQ22JHZFL/puslYPJALb9KMS3uQT94BnMNCLLJOU+X64UlGOOIEvAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU9l+7aLOgjRfx40/UzkkqI9nRdXswHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA2ODc3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQxrMA0GCSqGSIb3DQEBCwUAA4IBAQBbf0JikP+RxO/PJoCrmkzVab3OT7UVlClf
YbC5/nPG3RAm+5r3Mhw7TMQ/A5TXos68UaydJHTksPN5E8vHlP+CRqiYqGvdEg8a
LvVVrYesF3l80EWz3WReLj0ezRbAbrCaQhqVJ/LRb0f8dEObiqA834YSj2GK1Ox3
htkN/zYZ/gD68QDz4znO8zCWsCeeadUE75xApfBv0Xfy6/Yu/dUBScwNxZ7ioata
pCcVlVqK3EV9xvBmxQMSdk4tYPIWJRVbn7pHMEwzeYdXuLrTO7awfc6HXwJqvWKT
Zy7lCTUszLZkoq8bpov5QmHHea/vuFPodWD0DxRxA9KSw6hcrGjX
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:02 2026 by rpki-client