Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206136.roa
File: AS206136.roa (raw, json)
Hash identifier: dP4GKvdSG0px9j4yUqaIEhW3v3meewdMjY6kU4Q0LMo=
Subject key identifier: 0B:DC:35:F1:86:94:1B:BE:2D:A4:B5:78:26:32:23:C5:A3:3D:44:40
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 312471C3A09B3ECE2FBBB9DF34C089421A8188B8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206136.roa
Signing time: Wed 26 Aug 2026 11:32:03 +0000
ROA not before: Wed 26 Aug 2026 11:27:03 +0000
ROA not after: Wed 25 Aug 2027 11:32:03 +0000
asID: 206136
IP address blocks: 178.95.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:24:71:c3:a0:9b:3e:ce:2f:bb:b9:df:34:c0:89:42:1a:81:88:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 26 11:27:03 2026 GMT
Not After : Aug 25 11:32:03 2027 GMT
Subject: CN=0BDC35F186941BBE2DA4B578263223C5A33D4440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:c3:d7:12:90:48:e2:09:b5:61:e9:68:50:
72:b0:fb:68:8b:b4:ff:19:71:ea:f3:a3:78:8a:98:
b6:99:69:47:c3:63:c0:c2:26:2d:17:85:f7:0a:6e:
2c:23:d4:66:1d:8a:ff:a5:81:5f:5b:0d:a1:6d:8d:
03:fd:13:78:85:04:85:32:ca:43:84:12:dd:9a:19:
32:41:3b:b1:00:98:c2:f1:ea:7e:6c:44:d7:db:e2:
38:09:e0:67:8b:db:04:e8:0a:60:ab:73:d7:28:6c:
fa:36:82:d9:d1:0e:3b:32:12:fd:9d:bc:23:29:d2:
50:7d:df:5b:67:22:7e:13:9f:ea:e9:12:ab:63:c4:
35:88:95:89:66:e8:85:e1:06:42:a2:eb:cf:f8:d8:
b1:a0:52:8c:de:f8:77:c8:91:1b:ef:47:b4:bc:19:
2b:2c:40:06:b7:b0:cd:88:eb:1d:45:61:a3:2f:9c:
74:5b:d8:16:e5:ac:cf:b6:19:7a:e9:04:6c:7f:08:
ae:34:4a:f8:bd:33:3e:f4:95:c7:67:1d:ce:ce:54:
43:b6:68:08:19:3e:9d:f7:2d:65:fd:41:e6:f4:40:
f1:bf:2e:a8:1c:63:09:93:7a:ab:a1:a3:73:20:cd:
22:d8:80:c1:99:4e:f5:be:d4:b8:89:c0:6b:62:d8:
38:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DC:35:F1:86:94:1B:BE:2D:A4:B5:78:26:32:23:C5:A3:3D:44:40
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.232.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6d:6e:20:5a:bf:e2:63:8a:d4:50:44:26:3c:9a:50:09:71:
cf:8a:b8:9c:2a:79:aa:7c:22:b0:fa:62:c3:ac:64:d4:ab:07:
1d:f8:ed:5e:5a:46:94:fb:50:27:83:7b:78:a7:ad:85:85:e7:
28:66:ae:b3:d5:07:18:a2:47:23:90:a9:78:6a:2e:bf:4e:57:
f4:6d:5d:e9:23:3c:75:24:ec:b1:3b:a8:57:1a:1d:87:84:3f:
74:91:3a:d5:78:fd:64:4b:ed:af:6e:1e:ad:a4:9e:65:81:76:
c0:ce:a5:3e:a8:e2:00:30:1a:6a:f9:8c:46:99:49:c0:ab:98:
a4:e6:07:88:53:4c:13:1c:95:95:4d:03:11:1f:e6:d1:bd:29:
c1:db:06:7a:04:fe:6a:1d:4c:47:e6:99:ca:89:a2:53:3e:9c:
e1:7f:3e:4a:30:c1:1a:da:16:42:4e:3d:cd:e2:b2:39:ff:12:
f3:b7:bd:00:95:d2:45:46:bf:3a:3f:ce:73:e1:45:58:39:82:
4c:2c:e8:a8:16:41:5d:32:92:c4:5d:09:e2:49:e3:36:47:4a:
3b:5e:c4:24:07:ad:76:2d:d4:dc:a2:68:a6:e0:7e:a7:20:01:
82:b4:e1:07:bc:c0:f3:a2:03:37:61:e8:af:9e:bc:4d:ed:81:
67:2b:77:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUMSRxw6CbPs4vu7nfNMCJQhqBiLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA4MjYxMTI3MDNaFw0yNzA4MjUxMTMyMDNaMDMxMTAvBgNV
BAMTKDBCREMzNUYxODY5NDFCQkUyREE0QjU3ODI2MzIyM0M1QTMzRDQ0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIu8PXEpBI4gm1YeloUHKw+2iL
tP8Zcerzo3iKmLaZaUfDY8DCJi0XhfcKbiwj1GYdiv+lgV9bDaFtjQP9E3iFBIUy
ykOEEt2aGTJBO7EAmMLx6n5sRNfb4jgJ4GeL2wToCmCrc9cobPo2gtnRDjsyEv2d
vCMp0lB931tnIn4Tn+rpEqtjxDWIlYlm6IXhBkKi68/42LGgUoze+HfIkRvvR7S8
GSssQAa3sM2I6x1FYaMvnHRb2BblrM+2GXrpBGx/CK40Svi9Mz70lcdnHc7OVEO2
aAgZPp33LWX9Qeb0QPG/LqgcYwmTequho3MgzSLYgMGZTvW+1LiJwGti2DgnAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUC9w18YaUG74tpLV4JjIjxaM9REAwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA2MTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsl/o
MA0GCSqGSIb3DQEBCwUAA4IBAQAXbW4gWr/iY4rUUEQmPJpQCXHPiricKnmqfCKw
+mLDrGTUqwcd+O1eWkaU+1Ang3t4p62FhecoZq6z1QcYokcjkKl4ai6/Tlf0bV3p
Izx1JOyxO6hXGh2HhD90kTrVeP1kS+2vbh6tpJ5lgXbAzqU+qOIAMBpq+YxGmUnA
q5ik5geIU0wTHJWVTQMRH+bRvSnB2wZ6BP5qHUxH5pnKiaJTPpzhfz5KMMEa2hZC
Tj3N4rI5/xLzt70AldJFRr86P85z4UVYOYJMLOioFkFdMpLEXQniSeM2R0o7XsQk
B612LdTcomim4H6nIAGCtOEHvMDzogM3YeivnrxN7YFnK3fT
-----END CERTIFICATE-----
Generated at Thu Aug 27 00:35:14 2026 by rpki-client