Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS206540.roa
File: AS206540.roa (raw, json)
Hash identifier: sr7SptEOTg850VXdFJS+lxNISg42a2BINAekTyApDpM=
Subject key identifier: CA:60:F7:08:73:CE:67:E0:CF:30:D0:8C:7E:11:D8:99:E2:B4:88:97
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 59DD6C275F36160C4B479A97E05A1E4E2AE9B6F7
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS206540.roa
Signing time: Thu 12 Nov 2026 08:24:51 +0000
ROA not before: Thu 12 Nov 2026 08:19:51 +0000
ROA not after: Thu 11 Nov 2027 08:24:51 +0000
asID: 206540
IP address blocks: 2a0f:1cc5:50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:dd:6c:27:5f:36:16:0c:4b:47:9a:97:e0:5a:1e:4e:2a:e9:b6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 12 08:19:51 2026 GMT
Not After : Nov 11 08:24:51 2027 GMT
Subject: CN=CA60F70873CE67E0CF30D08C7E11D899E2B48897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:9c:df:fe:fb:89:62:16:1e:4e:06:cb:db:
ba:11:2f:01:1d:da:ba:fc:23:33:a5:19:86:e9:1e:
c2:cf:c2:3d:5e:4c:a7:3e:86:b9:23:e4:fb:49:70:
62:8c:1e:9f:f4:bf:3d:3a:a2:c1:d9:3d:68:be:d8:
23:78:11:8b:0b:48:b4:05:0e:50:ae:90:a1:76:82:
e2:53:b8:c9:ae:95:c1:26:41:09:20:29:bd:b0:2f:
fe:ce:99:df:fa:bc:44:f2:ba:b9:f0:51:11:62:1c:
72:4e:4f:94:e0:14:26:e2:4d:a3:9c:93:e5:13:66:
29:6f:c1:9d:7b:20:3f:06:89:5b:0b:1b:aa:e5:a0:
3b:12:62:bf:b9:31:57:33:5b:d6:b1:49:57:74:f3:
62:99:8a:e7:73:0d:f3:a1:93:12:c7:d4:fb:9a:4f:
55:bb:06:5c:c1:60:9f:87:4a:e9:6b:25:ce:75:3e:
c0:cf:24:8d:98:42:f7:ba:d3:c4:dd:96:b6:98:8d:
81:c9:d3:2e:38:d0:f0:89:aa:e8:07:3c:25:21:a0:
49:0d:fe:f7:2a:80:bc:2f:48:f0:d9:e6:c7:a0:eb:
44:d7:48:22:f3:74:9f:19:87:70:01:ae:90:84:50:
7a:20:72:3d:b5:8e:e7:d7:83:ff:ad:96:9d:46:56:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:60:F7:08:73:CE:67:E0:CF:30:D0:8C:7E:11:D8:99:E2:B4:88:97
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS206540.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:50::/44
Signature Algorithm: sha256WithRSAEncryption
66:32:45:9b:a8:1f:b9:20:0b:2c:5c:1b:81:22:dc:35:01:a1:
46:f3:e0:2d:98:42:9c:11:80:30:dd:a1:f7:64:30:f5:91:ef:
12:80:6b:61:8b:e2:16:cb:f0:18:b4:3a:ef:17:9c:24:4c:ee:
a3:da:a6:b6:c3:f0:8b:50:4c:f2:56:2a:1e:39:45:71:be:62:
5a:2c:1e:07:1d:24:cb:42:e6:29:c1:a3:2f:e0:7e:9d:4f:21:
77:a8:8b:18:60:f6:96:9b:a9:59:2b:55:a0:1c:72:ca:d4:30:
66:2e:d3:97:db:c2:b3:d0:85:04:8e:69:37:95:df:43:e3:57:
3f:13:d2:4e:ed:53:e6:fe:b3:92:10:d6:bf:28:04:24:b4:77:
fb:82:be:d8:1d:a6:05:6f:46:d3:07:0a:3e:5d:9c:de:06:60:
ee:b5:cf:b4:5c:73:ea:5b:d4:83:b2:5f:59:9c:9c:b7:ca:da:
a3:00:0b:75:51:1e:6c:cb:4a:a6:2f:83:18:3c:b7:6e:90:c8:
a2:bf:c2:a9:63:bb:a0:21:83:6d:eb:21:d2:73:aa:ac:a4:29:
80:8d:90:eb:c4:a8:1a:9d:16:e8:73:fd:f3:30:4a:f7:30:e7:
cb:92:d5:41:c6:06:6c:f7:92:c6:8c:b9:08:6c:cf:7b:55:ad:
f6:db:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:20:21 2026 by rpki-client