Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206822.roa
File: AS206822.roa (raw, json)
Hash identifier: S3Y45CZlepxwNkvO+vQJMzagDYoYLnkRbO6QqdKQetc=
Subject key identifier: F4:CE:70:24:48:68:C4:77:42:F2:01:40:B7:72:D3:8B:FA:2E:E7:60
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4DB2D92A06135E2ECFEE5A160A67AF02CFDD1350
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206822.roa
Signing time: Wed 26 Aug 2026 11:32:05 +0000
ROA not before: Wed 26 Aug 2026 11:27:05 +0000
ROA not after: Wed 25 Aug 2027 11:32:05 +0000
asID: 206822
IP address blocks: 178.95.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b2:d9:2a:06:13:5e:2e:cf:ee:5a:16:0a:67:af:02:cf:dd:13:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 26 11:27:05 2026 GMT
Not After : Aug 25 11:32:05 2027 GMT
Subject: CN=F4CE70244868C47742F20140B772D38BFA2EE760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:bf:f1:01:32:1a:f8:3d:ed:bd:10:bf:14:
67:09:25:82:8c:f6:b4:fd:65:63:65:40:00:5d:a2:
4c:92:f0:be:80:43:d3:4a:b6:94:d9:ee:ca:84:70:
e0:f9:de:6a:8e:e2:f4:3e:70:b0:08:51:54:1c:f6:
b6:c1:5c:c8:14:92:12:97:bf:74:ca:cd:67:09:c4:
fe:a5:6b:2e:23:26:d7:ad:de:9a:ee:02:64:67:49:
ca:e2:3c:f8:f8:fc:a8:86:fd:ed:9b:72:56:38:cc:
13:f5:61:0d:03:fa:a6:3d:c3:88:a3:a3:11:55:4b:
d6:f2:48:7c:5f:60:b1:8d:48:4f:19:67:8b:4c:cc:
ff:61:df:f5:70:2b:54:f5:24:ab:ea:49:0d:40:d1:
9c:2c:e3:b9:81:6c:5a:12:59:41:76:e7:88:d5:0b:
7d:3d:90:2e:6c:e2:f0:fa:3e:76:65:7a:44:a5:99:
8d:b2:78:1d:d6:54:6f:53:cd:1d:9d:04:5c:22:c0:
81:81:83:70:5a:9f:94:94:09:c2:6e:7f:57:06:03:
c6:6b:13:7e:6a:89:32:0a:e9:50:e4:d1:05:60:ec:
da:dc:67:fb:3a:16:60:0e:a5:ca:ae:ea:4f:b7:1e:
87:5e:ad:2c:cc:71:1d:c4:ac:da:5e:f9:e0:4d:2e:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CE:70:24:48:68:C4:77:42:F2:01:40:B7:72:D3:8B:FA:2E:E7:60
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.234.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5c:8c:0f:c6:2d:fc:3d:cb:59:77:14:5d:a2:2e:42:51:69:
35:42:56:f7:bc:89:51:ac:20:cb:2b:5a:f3:02:00:76:c2:57:
51:be:d9:a1:34:ee:54:e3:c0:e4:e2:81:ba:bd:61:66:ff:e8:
32:03:51:f8:dc:e7:a6:58:8f:7e:85:2e:ce:ed:8b:66:ae:ee:
f2:52:51:b0:5d:2b:f4:12:94:e0:c5:8b:90:1f:da:b3:ac:19:
de:2d:48:8b:2c:6e:db:8e:5d:15:03:2e:fc:2f:c7:74:7d:7b:
ef:0e:79:39:52:fd:17:e5:31:92:2b:de:ec:1e:40:f1:c6:c4:
e1:07:60:be:3e:8e:a6:2e:b6:81:72:35:b0:5e:c8:b0:b1:63:
8b:dd:31:93:2d:67:02:a5:d2:5d:b1:9e:d2:6d:a8:41:97:71:
d6:9c:57:b5:16:54:f5:f9:9b:a2:f0:e3:47:1d:57:ac:22:ca:
8b:da:03:7d:31:7d:dc:97:87:92:f4:12:1e:e8:b3:05:1c:83:
89:4f:a7:a2:64:27:12:73:93:33:86:8e:46:7f:d2:20:9f:1c:
75:ca:1f:6c:6b:09:7d:86:65:7f:a4:36:c3:75:08:57:fa:5e:
69:f4:d8:f3:df:3b:3b:ae:e4:99:a1:50:4a:e5:0d:7d:5e:10:
c0:91:87:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:34:50 2026 by rpki-client