Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206921.roa
File: AS206921.roa (raw, json)
Hash identifier: /ZBQ0Z/fMxedA8NxQMlyZTSX7fZ1aU80QhCPlLtTRXY=
Subject key identifier: 6B:98:5E:27:C5:83:0A:24:0F:3D:AD:F5:DC:26:55:C9:CB:DC:FA:CD
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 203F1DA7ECF83C4A464FB3356C15572D3F81BE14
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206921.roa
Signing time: Mon 18 May 2026 18:08:35 +0000
ROA not before: Mon 18 May 2026 18:03:35 +0000
ROA not after: Mon 17 May 2027 18:08:35 +0000
asID: 206921
IP address blocks: 2a0f:85c1:c68::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:3f:1d:a7:ec:f8:3c:4a:46:4f:b3:35:6c:15:57:2d:3f:81:be:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 18 18:03:35 2026 GMT
Not After : May 17 18:08:35 2027 GMT
Subject: CN=6B985E27C5830A240F3DADF5DC2655C9CBDCFACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:dc:ca:83:92:3a:d6:87:ad:90:96:b6:21:
f8:a1:70:f4:03:47:e5:b0:d8:b7:77:59:8b:7b:95:
78:d0:0f:78:ae:46:25:81:5f:e0:d5:9d:70:5a:f0:
58:be:4c:d6:22:2b:22:e8:d8:64:b2:30:eb:8a:aa:
7c:2a:59:9f:e5:ec:d9:b2:c6:87:9b:f6:fc:de:64:
06:4b:a6:28:2d:df:7a:93:b9:9e:4c:57:09:00:a1:
23:4f:e6:02:0c:8f:95:76:54:8c:79:8b:f3:3b:38:
f7:fe:f1:53:55:ea:48:4f:ee:42:21:96:74:4c:9d:
fe:f1:45:64:9a:56:2c:29:62:47:49:ac:c7:5c:15:
ae:01:05:95:4a:7f:ad:4d:c6:d4:26:97:cd:8b:71:
d8:09:91:e3:2e:2d:13:87:95:5e:80:cb:da:b0:5b:
e1:19:49:41:96:4a:86:41:f3:03:a7:39:1c:59:e3:
bd:cd:bf:3c:7b:61:49:fb:e0:ef:83:8e:46:35:8a:
c3:b1:95:bc:49:bd:e8:c4:e7:98:fc:46:3f:4f:91:
60:38:3b:47:b8:45:fb:8b:b3:cd:68:5b:3b:50:df:
22:5f:83:c9:13:cb:39:60:7c:0a:df:5f:1c:df:2d:
1c:8e:6a:e0:2e:16:b6:09:a5:51:97:9c:b3:29:a9:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:98:5E:27:C5:83:0A:24:0F:3D:AD:F5:DC:26:55:C9:CB:DC:FA:CD
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206921.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c68::/48
Signature Algorithm: sha256WithRSAEncryption
4b:2e:c8:3a:a3:fb:40:fa:f8:5f:f9:ec:6a:33:bc:7b:40:02:
28:3a:89:39:85:ae:79:14:33:bf:f1:fa:ab:f5:0e:e9:83:48:
a3:8c:6d:fc:cf:4f:28:fb:59:5d:00:0a:3b:11:10:e4:de:c0:
59:fe:8a:7c:27:6a:d4:6a:c5:80:c1:6c:0c:74:8b:9c:f6:36:
02:b2:d3:22:37:e9:16:4a:d0:14:fa:b2:e9:15:0c:96:ae:d9:
59:91:aa:c4:a7:34:08:70:fd:ca:7e:42:00:8a:64:2a:73:7d:
94:0a:7c:d0:cb:5c:ad:68:32:a0:dc:8d:0c:55:e1:59:56:e4:
25:88:45:83:78:5c:0b:5c:23:14:a4:f0:f0:a1:22:59:fe:b5:
44:35:70:2e:e3:07:f0:f3:c8:6b:e9:d1:36:30:1d:98:b8:fa:
e1:e6:6b:15:a2:a1:f1:03:9e:e5:8c:06:17:47:12:19:93:76:
12:f0:31:54:96:34:1a:e8:01:35:31:fe:43:ab:fa:a0:d4:03:
a0:31:2e:e8:59:c9:df:e4:32:cb:c2:f8:ee:fe:5b:4d:4b:0c:
a5:6f:37:4a:1d:03:08:05:d6:54:5e:0c:ae:d1:3d:dd:53:a5:
5a:e6:80:d2:27:35:f1:fd:d9:7c:33:f0:c2:ad:33:18:fa:f3:
cf:95:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:04:15 2026 by rpki-client