Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206115.roa
File: AS206115.roa (raw, json)
Hash identifier: 58yqTy70eIphmGIYuFq07bGcZKVsPDqMrrmfxKYmYXk=
Subject key identifier: FB:9D:BA:8D:87:13:6F:13:6C:FC:BB:21:D6:98:87:39:23:09:77:8D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 12269C244439CDD0F59285CF63A1B94245A40AF1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206115.roa
Signing time: Sun 12 Jul 2026 00:27:34 +0000
ROA not before: Sun 12 Jul 2026 00:22:34 +0000
ROA not after: Sun 11 Jul 2027 00:27:34 +0000
asID: 206115
IP address blocks: 2a14:7581:3a00::/40 maxlen: 48
2a14:7581:3d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:26:9c:24:44:39:cd:d0:f5:92:85:cf:63:a1:b9:42:45:a4:0a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 12 00:22:34 2026 GMT
Not After : Jul 11 00:27:34 2027 GMT
Subject: CN=FB9DBA8D87136F136CFCBB21D69887392309778D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:00:f8:b8:f2:f1:7b:4b:29:38:2b:e1:82:e6:
21:a7:78:c7:8c:89:4f:0b:00:0d:da:1c:d8:92:88:
14:b9:d4:14:a5:ee:e4:0a:a0:d4:05:7a:5d:ce:c2:
1f:50:f2:a3:9b:40:25:21:ed:b2:04:f3:26:bb:6f:
b7:7e:2a:a4:e5:be:c8:f2:27:66:00:27:12:b4:f5:
0f:5a:bd:a1:4b:e1:28:ba:ce:ec:83:d5:ac:df:fd:
6c:e3:68:06:75:38:db:9a:88:2d:56:92:2f:4a:01:
84:1e:a7:a9:a1:37:48:c2:f5:21:90:79:92:95:ce:
e9:b5:84:26:8e:38:8c:f4:28:89:8d:b2:d3:9a:2a:
be:81:19:de:ad:24:d7:ee:7a:24:36:73:e4:95:61:
e5:98:f0:25:51:07:76:a9:d1:64:27:b1:59:e0:c1:
bf:af:cd:94:e3:d4:65:52:60:44:b3:4a:75:54:ad:
c5:31:e8:9b:5f:3c:8e:42:b5:c1:8d:23:e2:0a:8c:
12:d1:cd:71:71:f7:ae:5b:d9:54:82:51:7a:a2:1f:
31:d8:be:2a:7f:cc:66:59:7d:c5:4d:df:4e:2a:e0:
ca:bf:83:70:ef:e7:11:7e:12:64:32:b3:07:dd:51:
9d:94:5a:33:68:42:55:be:88:ac:66:14:e9:95:2d:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9D:BA:8D:87:13:6F:13:6C:FC:BB:21:D6:98:87:39:23:09:77:8D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206115.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3a00::/40
2a14:7581:3d00::/40
Signature Algorithm: sha256WithRSAEncryption
32:1c:c5:5f:3e:82:75:93:55:97:d2:32:23:27:92:52:cb:57:
e6:ec:be:74:97:e2:68:b8:60:a6:00:91:cc:00:a0:20:14:e0:
5c:1d:6f:04:31:1f:02:48:41:08:d0:fa:cb:84:8b:eb:c2:8a:
de:7f:a8:59:b5:79:df:28:e2:0b:8c:a5:b6:1d:c3:f0:40:cf:
39:86:36:6d:f9:e5:22:1f:52:86:7f:27:03:59:d1:f3:34:05:
86:2d:22:d2:37:09:fc:f5:58:e2:c6:d2:00:9d:ca:a8:25:c7:
37:b8:f9:2f:48:5a:4e:6d:e3:f0:ff:51:c3:d8:b6:c1:28:98:
4c:d3:b3:7e:5b:73:63:1f:1e:35:fd:31:d0:df:27:64:11:6a:
5d:59:08:e7:39:0e:0a:ce:76:89:8a:e4:bf:c4:ec:70:ec:7b:
0c:11:ec:1a:86:27:f5:1f:12:bd:25:3d:5a:e0:24:e1:a4:2a:
c5:ff:a2:b8:44:bb:98:99:8b:f6:9b:a9:67:f9:6d:95:44:21:
6d:67:3e:46:37:c1:37:89:2f:d7:4f:2a:ef:66:2d:54:6a:c8:
d3:29:c9:82:74:2a:63:a2:c5:b8:59:69:73:08:c9:99:2e:fe:
c7:57:8d:21:0c:e7:03:fb:a4:45:75:61:fc:3e:7b:5c:25:88:
87:00:61:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:29:46 2026 by rpki-client