Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206766.roa
File: AS206766.roa (raw, json)
Hash identifier: lcshkQtssVpJRu+9SoiWdXH+Pjiu/DBZlCKX4cBAeYY=
Subject key identifier: 47:4A:20:CF:87:E8:9F:E5:04:8E:37:D4:2D:4E:9C:A4:4B:D3:7C:61
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 50785F5123329EDD414F4C230D0A81BEAA991E60
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206766.roa
Signing time: Sat 01 Nov 2025 14:12:51 +0000
ROA not before: Sat 01 Nov 2025 14:07:51 +0000
ROA not after: Sat 31 Oct 2026 14:12:51 +0000
asID: 206766
IP address blocks: 140.233.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:78:5f:51:23:32:9e:dd:41:4f:4c:23:0d:0a:81:be:aa:99:1e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 1 14:07:51 2025 GMT
Not After : Oct 31 14:12:51 2026 GMT
Subject: CN=474A20CF87E89FE5048E37D42D4E9CA44BD37C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:fb:7b:6d:c8:89:6d:de:44:af:80:27:59:
87:d8:d9:d8:c2:64:da:19:f3:13:fe:a2:4c:36:70:
15:16:32:56:ac:cc:24:84:1d:5e:ca:03:55:e5:f4:
0a:ba:51:e1:94:e7:58:0d:f5:0a:d3:cd:0e:b2:e4:
bd:34:a8:b6:29:6e:cc:d7:a5:8f:9a:24:b2:a5:25:
0b:ef:40:34:3d:29:46:07:8b:01:92:21:8a:90:27:
72:e3:31:f4:ad:cb:b6:9e:60:54:03:ad:ad:f8:1e:
58:5c:64:c8:19:2f:b6:94:7c:0c:f4:5e:ae:6a:37:
3b:5a:98:de:28:64:af:4c:bc:24:6d:5d:44:42:8f:
c8:ca:ef:0b:47:40:57:6d:44:13:9f:da:bd:8d:b6:
32:5c:9f:e8:cd:90:3c:02:42:b7:a2:9d:28:ab:a1:
43:34:8a:23:2c:23:c9:cd:4d:d3:64:38:ae:02:81:
00:f8:e5:bf:c0:70:32:ae:18:22:42:9e:a0:73:98:
1f:9d:51:77:b8:0e:b4:a4:99:26:9f:84:04:cc:e3:
bd:f0:f6:a2:64:a2:7c:f4:a4:4f:e1:c7:61:8d:c8:
ed:93:7f:e3:f6:63:04:59:7b:80:1a:1a:c2:d9:42:
df:7d:10:f2:85:cb:b3:93:ce:ac:fb:47:97:d2:66:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:20:CF:87:E8:9F:E5:04:8E:37:D4:2D:4E:9C:A4:4B:D3:7C:61
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.186.0/24
Signature Algorithm: sha256WithRSAEncryption
99:12:36:99:c9:a6:ab:53:dc:7e:9f:08:9e:e3:00:3e:35:8a:
f2:df:df:da:d1:14:50:6c:75:24:99:9b:08:8a:00:fd:39:06:
cf:21:1e:5d:1a:7d:7f:7e:b0:d5:d9:10:ec:a6:e9:5b:a6:18:
1c:2a:4e:b2:1d:00:fa:1f:ba:75:4e:5f:a4:89:3d:ee:ac:3f:
b0:cb:7d:70:1c:d3:ac:7d:36:0f:ac:1b:4a:85:c8:2d:c9:9e:
64:26:65:ba:98:f0:e9:c7:9a:e2:fa:8b:ea:e6:fd:25:2b:de:
70:aa:d5:a2:01:39:3e:18:a2:d0:1e:3b:34:b7:96:8e:07:f2:
f7:42:f6:64:2d:46:74:e3:58:ec:4f:af:17:27:64:56:43:8f:
b1:3b:80:ee:86:b9:56:5e:ba:2e:50:9a:07:7d:d7:1e:8a:ac:
05:cc:07:9e:25:40:32:5b:de:8c:de:23:18:fb:90:40:3b:0a:
8e:3a:76:ff:eb:72:27:b7:a7:f5:9c:6d:3b:bb:5f:20:86:3a:
0e:f4:06:4a:f4:a7:6a:bd:a0:c9:95:ac:5c:28:fb:1a:1f:16:
d4:c9:82:98:71:a8:37:71:b3:3f:1e:4a:a7:04:37:97:0e:a9:
3c:a2:15:8d:70:5f:30:c0:b3:a9:37:02:db:aa:4e:fb:9c:18:
69:58:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:12 2025 by rpki-client