Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206848.roa
File: AS206848.roa (raw, json)
Hash identifier: dE3zdHqUlcYXym1bRK/DF/D9P9ybBymwvqsxP3ZITNs=
Subject key identifier: C5:AC:A4:E0:7A:DA:BE:E6:9C:8D:2A:9D:42:C8:4D:8C:BE:79:07:D8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 446EB14FF813B5164C86A9FAEFE79D7E2875A372
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206848.roa
Signing time: Thu 26 Mar 2026 05:41:20 +0000
ROA not before: Thu 26 Mar 2026 05:36:20 +0000
ROA not after: Thu 25 Mar 2027 05:41:20 +0000
asID: 206848
IP address blocks: 162.141.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:6e:b1:4f:f8:13:b5:16:4c:86:a9:fa:ef:e7:9d:7e:28:75:a3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 26 05:36:20 2026 GMT
Not After : Mar 25 05:41:20 2027 GMT
Subject: CN=C5ACA4E07ADABEE69C8D2A9D42C84D8CBE7907D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:d3:86:be:2a:bb:18:da:d6:cd:79:e0:8a:
43:c2:8d:44:48:a9:cf:27:bb:5a:6d:32:9a:66:31:
4f:2a:81:69:ab:60:36:ce:ac:f7:d0:ea:52:ab:84:
76:ef:5f:67:b2:9b:e2:5e:6d:a5:c4:c4:29:53:00:
a2:fd:9e:c9:9a:56:e2:d5:c1:44:c8:16:d7:88:42:
26:f3:65:6c:12:bb:1d:a5:55:d9:10:3d:07:e3:be:
d6:38:34:4a:f4:9b:d4:83:f2:19:fb:95:a3:78:be:
63:02:35:d3:f5:df:10:f7:75:51:de:87:b9:ae:58:
cf:c4:94:dd:85:27:c9:2a:ab:56:fd:d4:df:8c:71:
59:79:2f:56:f6:4b:d4:64:d8:f3:25:71:0c:89:28:
e9:9e:58:e5:d3:ae:e7:ca:c5:de:9d:86:1e:b9:2f:
a2:a7:8e:8f:79:ef:8f:be:fc:4d:72:85:63:74:c6:
66:ec:51:ec:39:ce:73:08:f3:e6:7f:7d:8d:94:57:
d8:ac:d0:8c:a6:92:b3:c7:e3:13:2a:cc:8d:4c:be:
39:a3:24:a9:e3:88:4d:4c:45:1e:da:be:5a:f2:d0:
22:c0:4f:b2:b4:4a:2f:3e:98:fd:e1:d8:4b:ea:58:
b4:d2:d7:4e:22:14:4a:27:b9:d2:cc:1f:0d:84:cf:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AC:A4:E0:7A:DA:BE:E6:9C:8D:2A:9D:42:C8:4D:8C:BE:79:07:D8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206848.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:0e:39:25:6b:66:49:b3:7e:c3:e3:7e:b6:73:74:11:12:af:
7b:3e:d7:3b:20:34:8a:66:35:35:45:2d:4a:b2:57:07:c8:ae:
76:b8:36:08:88:f8:82:e2:ba:e6:cc:af:02:37:3d:2c:b7:c1:
88:d0:77:5b:d6:43:b6:3f:8b:06:57:0a:c6:17:96:25:18:5a:
cc:28:ca:96:63:87:f0:53:48:23:57:ca:fb:da:2e:44:9c:44:
b2:6a:8a:66:db:c5:67:ef:46:4b:3a:c5:c2:a3:f1:bd:73:c8:
d6:5b:1a:96:39:3c:de:02:bb:86:e7:12:52:aa:14:6a:bc:f5:
b0:ea:3b:57:0e:a1:d3:0b:15:26:0d:cb:64:fb:9b:aa:45:31:
fe:01:7c:94:ea:10:86:22:50:f9:f7:4d:52:a9:44:16:77:64:
62:18:9d:06:21:45:25:ef:e7:a3:c5:c4:3a:39:2a:2e:58:46:
ce:52:a8:d6:fb:1c:43:19:3b:6d:23:35:c0:62:37:45:a9:23:
1d:1a:8a:06:0f:5c:6d:8c:f3:1d:5b:31:76:e9:ae:e4:f8:cd:
81:bc:7a:58:fa:ec:21:8e:5b:bd:ae:7a:e8:c7:96:ed:4a:53:
cb:0f:b9:6f:f5:55:de:e8:5b:61:0f:a8:52:15:fd:7d:15:c5:
dc:3d:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:54 2026 by rpki-client