Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206527.roa
File: AS206527.roa (raw, json)
Hash identifier: mTRgugcmT+jEKGgPRy9H12EBOeUei14zqYAWvsrxCOs=
Subject key identifier: 55:FB:2E:D0:98:D3:11:E4:CF:B1:26:4C:1C:F4:23:D2:D5:4F:3B:8A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7A203FCF1AA41225A5CC0D0616BB3693204E59C4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206527.roa
Signing time: Fri 13 Feb 2026 14:46:29 +0000
ROA not before: Fri 13 Feb 2026 14:41:29 +0000
ROA not after: Fri 12 Feb 2027 14:46:29 +0000
asID: 206527
IP address blocks: 168.222.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:20:3f:cf:1a:a4:12:25:a5:cc:0d:06:16:bb:36:93:20:4e:59:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 13 14:41:29 2026 GMT
Not After : Feb 12 14:46:29 2027 GMT
Subject: CN=55FB2ED098D311E4CFB1264C1CF423D2D54F3B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a1:50:dd:fe:3a:32:9e:81:66:38:13:85:82:
9c:8f:43:a2:50:d4:83:29:d5:0d:b7:79:7e:ef:8a:
88:0c:bf:d2:b0:7b:7f:17:ed:75:f0:89:6c:5c:71:
95:b5:f9:ca:b4:39:27:62:fb:6e:fb:da:cf:a4:58:
28:93:e7:84:11:2c:8c:b1:c8:34:84:1f:85:9b:0a:
48:c3:6a:06:61:79:55:b8:ae:c7:26:0c:5f:29:af:
56:1d:77:a3:15:fe:9a:d0:f0:6d:44:c7:9d:2c:ad:
53:6a:ad:f3:02:ac:0c:55:fd:cc:0d:75:c1:bb:20:
15:d9:e2:6e:24:6a:3e:2b:ca:1c:f3:50:ae:b7:4d:
ff:2c:1b:e0:cb:e9:05:0c:7a:d1:2a:19:0e:5c:9b:
31:38:8a:9f:83:9c:56:6f:aa:45:34:21:51:16:9d:
ea:15:59:ab:2f:32:74:56:a9:4f:02:a5:03:be:a6:
ef:41:c5:81:16:fe:20:f7:94:be:28:99:3c:df:6b:
e0:4e:a2:1e:36:e4:fb:c0:5a:41:63:97:19:7c:85:
e4:6a:8d:7e:1a:ea:15:77:ce:5c:1a:21:22:7a:42:
c7:2f:05:c7:2c:f4:ce:ed:ae:7e:9e:7a:56:2d:4b:
65:c1:50:d5:46:80:a2:d7:43:88:1a:93:e0:6d:ab:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:2E:D0:98:D3:11:E4:CF:B1:26:4C:1C:F4:23:D2:D5:4F:3B:8A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206527.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e8:2b:af:69:09:f5:d7:cb:3a:97:aa:9c:b8:bd:19:1b:62:
8d:4d:11:92:9a:51:c1:a6:ad:6f:af:0b:31:7e:de:fb:4c:cd:
a5:50:43:90:79:d2:a4:b7:f1:07:cc:89:4d:24:2d:c8:ce:f3:
17:03:7e:46:35:93:3e:14:81:f4:30:f2:28:cb:49:63:7f:42:
6b:a1:28:35:45:f3:04:d0:c0:84:27:27:79:dd:49:13:7e:04:
69:74:30:ac:25:56:7c:8b:88:4c:8c:f6:3b:01:4e:ab:da:8f:
a8:b2:8b:31:fe:2d:eb:46:9f:4c:f5:a9:74:ad:0a:bc:99:59:
28:4e:e6:70:d4:4c:d5:f5:43:fc:2c:ce:75:d7:b4:ea:4f:e2:
cf:25:5d:6d:33:e3:7a:2c:e5:c1:ba:af:88:6e:e5:38:e8:85:
6b:fa:33:0a:d7:e4:de:ec:21:ad:74:6d:1c:6a:e4:4f:c7:24:
30:96:dc:5c:1c:ff:b5:a1:1f:cb:7a:8e:68:1b:2c:0f:3f:8f:
e5:8e:a6:69:80:ab:5d:ef:be:3e:78:e0:c9:8a:05:fb:e7:1e:
f3:75:95:e2:76:f9:41:06:db:d8:24:51:0b:05:54:09:ce:8d:
49:e9:26:de:5a:64:d7:55:db:fb:f6:fd:09:54:35:3c:47:49:
44:25:56:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:56:21 2026 by rpki-client