Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: Ihm4OdrNNYFnwuEX7nIDyVaAPfkN8xxUveRiUj89Hhw=
Subject key identifier: 18:49:4E:28:28:D1:F0:51:A7:49:E2:B3:0E:E8:E7:E0:51:26:37:5A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 681CF8D4DAAD5CC61B06165CD7802BCADC0DED26
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
Signing time: Fri 18 Sep 2026 07:44:16 +0000
ROA not before: Fri 18 Sep 2026 07:39:16 +0000
ROA not after: Fri 17 Sep 2027 07:44:16 +0000
asID: 206092
IP address blocks: 146.103.39.0/24 maxlen: 24
155.117.97.0/24 maxlen: 24
155.117.108.0/24 maxlen: 24
155.117.112.0/24 maxlen: 24
155.117.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1c:f8:d4:da:ad:5c:c6:1b:06:16:5c:d7:80:2b:ca:dc:0d:ed:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 18 07:39:16 2026 GMT
Not After : Sep 17 07:44:16 2027 GMT
Subject: CN=18494E2828D1F051A749E2B30EE8E7E05126375A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:de:4a:a5:6b:af:11:95:9f:c4:b9:aa:72:
2f:6f:1f:78:5a:70:3b:90:55:db:54:20:30:3d:50:
08:8a:fd:40:69:83:d1:eb:a7:58:f7:d0:1a:8d:0e:
22:f1:40:07:f1:d5:75:f0:23:68:c2:4c:5e:c3:ca:
6d:62:17:fa:9f:57:83:b6:1f:9d:26:a3:3e:b7:2f:
b3:70:01:85:fa:31:7d:02:ad:c1:98:e3:e7:09:28:
08:5a:30:1b:6a:43:95:1f:0f:40:ad:35:6c:80:21:
83:7f:b8:31:8b:ce:89:83:fc:42:95:ae:27:04:c1:
fd:c8:84:dd:aa:e7:bb:96:ca:f3:87:fa:36:2c:50:
1f:9e:3a:4f:2a:8a:40:46:07:ad:b9:cf:b2:ee:b9:
3e:8c:57:ad:ed:d2:fa:aa:34:0f:da:8b:f4:fe:b4:
be:6f:6f:a5:6a:e9:df:29:51:0c:3d:5d:40:2a:cd:
13:2a:74:ca:bb:c6:40:bb:a1:6e:28:cf:cc:7b:d9:
bb:14:1c:25:6b:d0:c4:ce:b8:d7:e4:44:17:08:7a:
5c:f1:4a:b5:0a:cc:67:8d:90:0d:95:f2:45:c4:fa:
14:a3:6a:91:0c:1b:6e:27:ae:3f:8b:27:df:8d:77:
fb:89:fb:99:57:2e:08:d4:f5:58:c1:57:1f:c9:ae:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:49:4E:28:28:D1:F0:51:A7:49:E2:B3:0E:E8:E7:E0:51:26:37:5A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.39.0/24
155.117.97.0/24
155.117.108.0/24
155.117.112.0/24
155.117.167.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d6:b6:ee:36:86:ab:7f:fc:77:08:72:72:8d:1b:03:be:ea:
a5:3a:98:cf:4e:85:f6:05:f5:45:b6:fe:06:f0:ab:a4:9c:08:
be:e2:4a:78:a6:3e:35:3b:4f:3f:9d:a4:55:40:4d:61:7e:78:
25:d4:50:3e:d6:65:cd:48:26:1a:8c:46:24:3c:1b:e9:96:cb:
fb:f5:9d:12:40:79:db:45:93:0f:d1:d9:00:58:22:98:0b:ae:
d3:13:c0:23:76:d6:0b:b3:17:cf:1a:d9:07:4a:c8:1f:40:e0:
80:d0:8b:bb:66:cb:06:c9:95:41:91:22:98:0f:16:cc:45:f6:
c7:a0:20:b5:aa:57:59:6a:90:72:39:2a:54:c4:ee:bf:ae:6c:
0e:3c:ef:f2:8b:85:da:72:2c:e1:54:1b:f3:d2:6f:61:5f:7c:
2f:54:8e:ad:94:f8:04:e7:ac:67:d4:b7:3f:46:88:14:85:89:
2a:a4:c5:29:b6:5b:79:c6:84:41:e1:63:be:d3:f0:b9:49:2d:
dc:cd:d2:28:4f:d8:ed:0d:16:9f:b1:8f:df:fa:59:1b:22:c7:
f9:e8:61:03:d5:a6:e6:a8:e5:86:9e:61:1f:6f:c1:f3:99:22:
24:5a:88:ec:50:d2:3a:99:9a:76:71:87:ea:4c:25:8c:42:b4:
e7:9c:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:46:23 2026 by rpki-client