Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206971.roa
File: AS206971.roa (raw, json)
Hash identifier: Zpfw2HZgZC9pTUpBn7iGhuugNqxSCgbVrmA9I8nOKh0=
Subject key identifier: 3B:B1:2E:50:7D:EF:8E:AC:F0:04:7C:FB:32:60:E9:01:35:ED:35:DF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3B85E1E585854E386E05247A080DEEA0588B682C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206971.roa
Signing time: Sun 25 Jan 2026 23:39:51 +0000
ROA not before: Sun 25 Jan 2026 23:34:51 +0000
ROA not after: Sun 24 Jan 2027 23:39:51 +0000
asID: 206971
IP address blocks: 143.14.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:85:e1:e5:85:85:4e:38:6e:05:24:7a:08:0d:ee:a0:58:8b:68:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 25 23:34:51 2026 GMT
Not After : Jan 24 23:39:51 2027 GMT
Subject: CN=3BB12E507DEF8EACF0047CFB3260E90135ED35DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:24:44:f2:0a:e9:3f:ca:61:9f:6b:33:c0:
9e:80:a9:c7:49:33:3b:5e:c2:b9:79:f9:02:02:75:
ee:c1:49:f9:f0:db:85:c8:e3:27:e5:3e:79:a6:59:
18:b1:8a:36:b5:7c:26:a0:98:59:db:40:7e:83:3f:
85:1c:43:c0:85:31:be:8b:90:cb:8d:d7:97:bf:8d:
9e:e7:b2:9e:ba:3c:c4:73:81:5c:4b:f7:cf:2f:b0:
ae:2e:1a:c2:a3:4a:c0:27:f4:53:76:dd:51:90:99:
f4:ed:d9:5d:68:24:0b:69:05:2d:de:b8:a1:31:f1:
06:cc:59:69:d5:5e:8b:c1:c4:d9:9c:d1:91:57:0e:
ea:1f:6a:e1:eb:25:7b:8e:6d:05:9e:c5:86:1f:27:
73:86:eb:0e:e6:9c:80:38:38:7e:7c:40:a4:b1:2b:
07:9b:5e:98:e5:1d:ce:3d:09:f9:be:30:df:b7:70:
32:b5:55:83:be:09:00:da:0c:8c:62:62:02:ce:0b:
0a:a6:cf:66:a1:b9:4c:54:fe:9c:c1:ce:af:d6:28:
15:40:0a:21:8a:52:79:ff:83:f4:90:bd:9e:9a:58:
06:e8:2f:0b:cd:ee:6a:90:d6:54:f4:9f:27:e5:fc:
0a:f9:ed:de:e9:ec:8f:5c:b7:46:57:38:8f:25:0b:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:2E:50:7D:EF:8E:AC:F0:04:7C:FB:32:60:E9:01:35:ED:35:DF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206971.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b3:86:f4:7d:fe:f9:d5:08:92:6d:cf:97:65:c3:63:57:c2:
19:b0:12:36:7d:16:d2:f3:98:98:37:dd:ed:c6:50:9b:e5:9e:
aa:58:57:47:9e:29:14:f6:5c:3f:bd:a7:c8:7b:49:9f:5b:9d:
71:b9:ad:fa:d6:7b:69:35:28:f1:87:e7:8a:8e:7c:82:ec:26:
9b:92:30:2d:4b:65:3e:48:66:02:63:4c:6a:8f:cd:98:89:3a:
1a:d5:9b:ce:a4:b9:e0:12:37:92:7a:6b:a4:a3:b8:82:06:a4:
a8:29:b6:29:a6:6a:09:80:c2:3d:30:ef:85:bf:67:59:53:cc:
61:8a:52:02:7d:1a:85:2b:70:42:f6:13:9d:e8:34:78:a7:3a:
4c:89:cc:2c:57:15:e9:b3:eb:07:08:d3:2a:91:3f:8d:c6:7c:
20:58:a7:d6:d1:ed:78:38:9e:90:a7:96:12:4f:a6:0a:f0:dd:
d6:50:59:eb:46:18:08:66:14:71:da:3b:5e:76:bc:c7:f5:24:
7d:73:3a:60:60:eb:54:93:a9:c9:2b:ab:fc:9d:c3:86:4b:45:
8e:f1:8a:af:1d:98:00:6c:2d:c6:1d:29:6f:84:5c:f5:ef:44:
73:b5:37:b3:ec:84:9c:de:39:30:8d:f1:71:b5:82:2b:8e:ec:
93:e2:50:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:45 2026 by rpki-client