Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206995.roa
File: AS206995.roa (raw, json)
Hash identifier: 7ahnyFMecOdaoKjCN4VKIUaVP+5lMbliXa1HLeU/e5Y=
Subject key identifier: A1:D8:1E:D7:33:4B:D3:CF:23:5A:F1:CE:11:C9:6C:59:53:AB:AB:0E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 488AFD4FFBBCAFD03146E72F3279E0A4B13F32F0
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206995.roa
Signing time: Fri 29 Aug 2025 01:51:11 +0000
ROA not before: Fri 29 Aug 2025 01:46:11 +0000
ROA not after: Fri 28 Aug 2026 01:51:11 +0000
asID: 206995
IP address blocks: 2a0f:85c1:cf9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:8a:fd:4f:fb:bc:af:d0:31:46:e7:2f:32:79:e0:a4:b1:3f:32:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 29 01:46:11 2025 GMT
Not After : Aug 28 01:51:11 2026 GMT
Subject: CN=A1D81ED7334BD3CF235AF1CE11C96C5953ABAB0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:f8:2e:c7:6d:17:6b:f6:03:e0:6c:03:ec:
46:2e:24:9c:65:21:04:88:e7:12:12:da:c0:a6:9b:
04:32:89:d1:5d:dc:f1:6e:aa:ba:4c:3d:89:8b:d4:
23:01:fb:16:77:52:6b:b1:51:0c:29:38:84:26:96:
07:2c:d5:c8:bc:a3:27:88:dd:06:80:8e:73:08:bc:
77:60:5a:61:fd:15:c7:51:ab:a0:74:a0:e4:f9:19:
f1:ae:af:8b:6a:de:3d:01:cc:fb:6e:bb:7c:c6:7d:
fd:e9:5d:80:4a:86:82:d6:df:5c:be:5a:b6:c8:d0:
bc:67:c7:d6:c2:8e:d3:c8:26:c0:5b:09:54:5c:fa:
fd:f6:fc:9a:fc:33:21:c7:14:cf:0b:55:09:11:fb:
59:fc:f5:ed:18:e6:74:bb:6c:32:78:b0:5b:78:f0:
49:41:75:78:44:85:f4:4c:7c:53:31:5c:52:22:f1:
41:d3:1f:42:17:cc:8b:a3:6d:b3:c7:dd:4e:8a:59:
2f:fd:95:d0:93:4f:a8:f3:4b:a2:6c:d9:9b:c1:bc:
7a:3e:da:c2:6d:56:cd:37:c7:37:83:aa:a4:86:4a:
7d:53:53:50:b2:39:3f:0f:df:27:bf:53:e6:35:3a:
a8:dc:d2:35:13:4d:bf:1c:42:65:08:04:9b:53:fd:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D8:1E:D7:33:4B:D3:CF:23:5A:F1:CE:11:C9:6C:59:53:AB:AB:0E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cf9::/48
Signature Algorithm: sha256WithRSAEncryption
d5:c1:1c:2d:33:b4:b7:5e:12:17:a9:a5:fd:7d:65:38:9c:3a:
bf:98:e8:31:70:2b:18:b0:eb:8e:51:07:5f:0d:98:54:b3:3d:
16:e1:ca:b6:f8:3e:42:bb:75:73:68:51:2c:e7:05:70:ea:a1:
6c:27:cf:82:4f:b0:9a:ed:89:f6:fa:87:76:7c:e2:72:5a:e3:
cd:75:45:a5:47:3c:70:28:b5:3c:c2:20:54:03:ff:e2:d5:e8:
44:0c:f7:b0:55:a7:e0:e5:21:9d:be:9a:f5:7e:47:a7:0e:a9:
1c:5b:80:1e:66:76:0c:2f:e5:9a:c1:5e:97:26:eb:fc:da:6d:
18:db:6e:32:fb:b9:d3:aa:75:cd:7a:1e:95:51:41:f9:b5:94:
87:8a:ac:e0:2c:02:1e:a2:51:43:e8:19:36:ae:9b:b2:8b:c4:
b9:d7:4e:09:aa:f8:ce:04:5b:1a:21:2c:70:c0:be:6e:67:0c:
9f:f6:e4:68:83:7d:c8:6c:ae:cf:b1:78:44:fe:a3:bf:d3:4d:
cd:7b:f2:da:a2:ef:b3:88:3b:51:ec:ab:af:23:9f:6b:b3:dc:
4b:4e:51:17:b5:5f:c7:b4:7a:62:af:da:5f:a2:9e:e7:88:0f:
5e:d5:1e:f5:cb:4e:df:70:f7:24:e6:73:91:1e:de:e6:b4:56:
79:28:ad:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 01:59:27 2025 by rpki-client