Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206995.roa
File: AS206995.roa (raw, json)
Hash identifier: kPPIiqV+fx9CKiPXF1rRBYpVxzLKgtfjz9AZVgAS5BQ=
Subject key identifier: 42:CD:BA:5D:1D:36:55:0C:6F:46:D3:28:B9:14:5E:05:A0:6B:87:3A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0B2E5DB513B32AC38DF6BBD3ABD51307565E3AF8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206995.roa
Signing time: Fri 31 Jul 2026 02:08:58 +0000
ROA not before: Fri 31 Jul 2026 02:03:58 +0000
ROA not after: Fri 30 Jul 2027 02:08:58 +0000
asID: 206995
IP address blocks: 2a0f:85c1:cf9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:2e:5d:b5:13:b3:2a:c3:8d:f6:bb:d3:ab:d5:13:07:56:5e:3a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:58 2026 GMT
Not After : Jul 30 02:08:58 2027 GMT
Subject: CN=42CDBA5D1D36550C6F46D328B9145E05A06B873A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:2e:12:d6:56:aa:e4:2f:92:76:4d:9c:dd:
98:b3:b1:67:e0:e5:15:d9:53:ce:48:18:7f:db:41:
89:c4:f4:21:7f:ae:ca:85:fd:a7:1f:ab:30:17:b0:
02:fa:32:cf:ea:40:19:37:33:ab:81:1b:50:cc:c3:
eb:cf:a7:7f:88:f9:a2:6e:a2:2d:d9:a4:b8:87:a8:
d2:b2:b8:2e:c9:fd:6f:1c:68:70:e2:64:8b:cb:13:
4b:ad:5e:74:e9:0e:a8:a4:63:f7:a3:79:ce:ea:f6:
25:3a:20:8f:64:c2:88:56:ff:cd:a2:61:aa:8d:87:
98:78:31:5a:1e:34:80:e0:3c:f2:12:6f:75:be:68:
57:9d:d2:94:df:fd:c1:e0:0d:c4:a1:a5:dd:b9:29:
08:ba:26:ef:64:c2:df:e8:27:84:02:2b:e8:f3:87:
80:9b:29:fe:11:42:27:4b:86:2d:7f:10:c3:15:92:
8e:e0:2f:69:a4:5a:20:ab:2b:3b:1f:95:12:d6:a2:
eb:ee:a6:e0:b7:61:ca:79:7e:6a:db:b6:c8:95:43:
c6:c0:39:0d:38:35:6c:c7:4d:7d:d7:14:70:c3:94:
58:c7:d3:9f:f1:bd:98:41:b3:2d:17:71:8e:df:d1:
35:2e:21:8f:1b:e5:85:4e:9f:4d:3a:7c:01:b1:8e:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CD:BA:5D:1D:36:55:0C:6F:46:D3:28:B9:14:5E:05:A0:6B:87:3A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cf9::/48
Signature Algorithm: sha256WithRSAEncryption
0c:1c:e2:83:7d:d6:6d:a6:a5:15:3e:a3:74:5a:9e:84:14:6c:
1d:1a:a9:a1:f2:5b:c3:38:d8:08:0e:a3:a2:83:ab:cc:76:4c:
2b:65:7f:5b:c2:1c:e6:c3:65:46:64:ac:d5:f8:fc:9e:fd:e4:
c9:d0:a3:f3:88:34:d1:3b:a2:8f:47:aa:82:2c:46:af:b7:67:
ff:a5:5f:fd:c4:08:c0:bc:fe:37:9a:72:ce:81:ea:e8:20:6d:
12:bb:bd:fc:c5:b1:71:00:d1:7f:15:d4:4a:79:e2:0d:8f:ea:
ac:7b:62:77:ed:67:c1:a8:dd:56:73:96:5f:44:f1:c0:82:0e:
a4:bd:2b:b3:8f:74:38:c7:81:9e:f3:9e:7d:7d:06:e9:43:3b:
3b:38:51:76:3a:29:00:02:c2:72:98:00:1e:58:e0:95:48:ab:
6e:2c:c9:c7:62:86:c2:4c:98:84:4d:24:84:f9:fe:0f:62:53:
cd:ac:68:7b:ae:0e:d2:30:2b:a9:19:f4:3f:7c:d8:d9:35:ac:
0e:3a:7f:f0:c4:cf:22:00:b8:d8:bb:36:7d:48:c3:5f:cd:bf:
24:3c:3d:d8:f6:61:1c:40:ee:21:54:0f:a0:55:7f:ef:4d:02:
f8:54:26:dc:97:de:3d:9a:07:43:26:be:6d:58:8d:bc:d8:59:
9c:8f:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:11:08 2026 by rpki-client