Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206540.roa
File: AS206540.roa (raw, json)
Hash identifier: hej30EfQNyeguEbl7Gw6c4TPi2qviERyy28k4iWg2C8=
Subject key identifier: 62:A8:76:9D:30:0D:83:2A:49:E1:10:B8:09:C0:84:4E:46:F0:9A:B6
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7A074B458857114E08326E8C15A8CDC03A4B7556
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206540.roa
Signing time: Fri 02 Oct 2026 07:00:20 +0000
ROA not before: Fri 02 Oct 2026 06:55:20 +0000
ROA not after: Fri 01 Oct 2027 07:00:20 +0000
asID: 206540
IP address blocks: 2a14:7580:ffc0::/44 maxlen: 48
2a14:7583:ff10::/44 maxlen: 48
2a14:7583:ff2b::/48 maxlen: 48
2a14:7583:ff30::/44 maxlen: 48
2a14:7583:ff60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:07:4b:45:88:57:11:4e:08:32:6e:8c:15:a8:cd:c0:3a:4b:75:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 2 06:55:20 2026 GMT
Not After : Oct 1 07:00:20 2027 GMT
Subject: CN=62A8769D300D832A49E110B809C0844E46F09AB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:84:f5:c9:11:78:ed:f5:b1:c0:a0:bc:b3:
78:62:a0:64:de:fd:78:4e:49:a3:f6:c4:bd:98:76:
d0:6f:71:a4:b1:4b:a3:06:b5:27:7a:94:99:89:80:
c9:f4:f3:0e:00:6b:56:57:b8:1d:10:43:13:34:99:
90:b2:2c:0f:b8:ff:a4:8f:73:d8:00:1b:5d:44:cf:
04:dd:c6:9e:fa:84:ba:a1:a8:cc:b3:77:92:bf:30:
c5:df:df:6f:0d:60:92:8f:48:94:ed:83:c6:5b:af:
61:18:68:3b:d5:c1:aa:b0:5a:b5:cd:af:6e:be:82:
b6:2d:2f:fa:dc:6e:1f:c4:e6:ea:ea:5f:ce:8b:b2:
79:61:ff:43:2c:43:96:67:c4:4e:be:45:d5:98:2b:
61:b5:84:76:62:e5:fd:9c:fb:03:e6:09:5c:e9:fa:
01:75:98:3b:2c:9d:e5:b7:9d:3f:87:70:11:c7:47:
59:a7:57:90:20:40:19:34:c9:48:df:f3:d6:3c:2a:
6f:7b:0f:9f:a1:b1:0c:e9:be:76:ea:8e:f1:6d:76:
04:31:6e:d3:85:ba:3e:e3:6e:8e:51:74:99:e7:87:
e7:c7:ba:6b:54:f4:e0:15:24:1b:75:64:2f:39:f4:
72:0e:3a:4d:bf:5d:89:3f:1f:ae:71:fe:fd:15:58:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A8:76:9D:30:0D:83:2A:49:E1:10:B8:09:C0:84:4E:46:F0:9A:B6
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206540.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ffc0::/44
2a14:7583:ff10::/44
2a14:7583:ff2b::/48
2a14:7583:ff30::/44
2a14:7583:ff60::/44
Signature Algorithm: sha256WithRSAEncryption
27:b7:b5:b2:ad:94:b8:7c:54:11:aa:4d:0f:fe:a5:6e:25:e9:
a0:48:95:34:a4:d9:a1:3d:4f:1c:f7:41:5c:19:e4:9c:7d:ca:
70:3a:4d:b3:23:bd:f7:f7:83:1c:bd:dc:3b:4f:d1:a2:47:3d:
11:e0:14:d1:97:5c:c2:ae:31:14:7a:09:1d:b0:f1:2c:f1:f8:
f4:4f:07:11:53:da:9f:af:2c:e5:02:aa:4f:42:a7:53:96:f1:
2e:a9:e9:80:99:58:93:75:45:be:ba:36:9c:23:2f:2f:c4:45:
3c:ed:c7:07:27:04:b5:54:11:99:d2:fe:18:fc:b6:2e:80:07:
ef:36:c0:49:ed:19:9a:82:13:6f:56:e6:61:4d:83:dc:64:e5:
07:e2:0b:a7:62:89:56:23:2d:f2:34:79:17:c0:e5:a3:bd:cd:
aa:fb:63:d6:6e:6c:e1:e4:bf:65:04:57:c2:ba:4c:1f:31:1c:
12:37:cb:4a:37:d0:0f:9f:48:ae:ee:5c:07:8c:6e:62:a1:46:
c5:71:f4:06:38:c6:b7:04:25:2b:2d:50:da:98:55:e5:2d:84:
20:5f:7d:90:fb:a2:f2:71:19:55:f7:10:e3:28:b2:26:bc:c3:
c3:ba:30:1c:e2:70:b6:42:82:d9:e4:88:ca:e0:da:16:4f:d2:
2b:f5:d7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:22:41 2026 by rpki-client