Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS206216.roa
File: AS206216.roa (raw, json)
Hash identifier: u7wkYxEC5ndWFvyXiBE7Cp4juVxJvsG5zlBy7AjbcGM=
Subject key identifier: F8:C6:50:84:33:4F:95:6E:E8:95:AB:A9:41:E6:8C:73:F5:C0:FC:29
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 1D79860530F0172EBCF7F6E5C3304AA799D1F997
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS206216.roa
Signing time: Mon 02 Feb 2026 09:50:56 +0000
ROA not before: Mon 02 Feb 2026 09:45:56 +0000
ROA not after: Mon 01 Feb 2027 09:50:56 +0000
asID: 206216
IP address blocks: 212.60.151.0/24 maxlen: 24
212.60.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:79:86:05:30:f0:17:2e:bc:f7:f6:e5:c3:30:4a:a7:99:d1:f9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Feb 2 09:45:56 2026 GMT
Not After : Feb 1 09:50:56 2027 GMT
Subject: CN=F8C65084334F956EE895ABA941E68C73F5C0FC29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:e1:5c:da:f9:07:fd:4b:70:6e:18:2e:3a:
d6:ba:10:92:4d:0a:64:3a:a4:86:95:5c:89:2c:ad:
5b:58:84:f2:52:88:55:a2:eb:f5:62:62:fd:6e:0f:
54:0a:51:58:07:d9:94:7f:00:c8:c9:9f:73:f0:ad:
08:79:db:39:09:f0:ae:73:96:c9:92:26:c8:76:73:
52:55:22:4d:e9:82:ee:79:21:0c:ed:e2:30:53:c3:
46:83:88:d2:3e:7b:09:0f:a0:e4:a3:03:63:15:55:
7c:c9:75:00:28:ef:47:90:45:e9:4d:58:a0:83:79:
40:bb:31:5c:92:38:72:6b:41:66:7d:bc:2f:49:92:
fa:73:2a:3f:74:3e:a8:37:cc:9d:e7:20:10:a1:94:
c6:d8:c9:57:1c:40:09:2e:8e:17:81:40:92:41:11:
65:80:ac:05:fb:13:d6:41:6e:a6:39:7f:98:db:14:
98:b1:70:43:19:c2:f1:dd:15:c8:40:e6:43:e2:b9:
ff:ac:63:1d:b0:07:8b:46:82:bf:fd:73:dc:77:6c:
82:11:8f:ae:82:e9:c8:9f:85:b4:31:d0:a6:13:b1:
86:8c:98:7f:b8:a0:73:17:f6:d5:8c:e5:cf:1a:37:
5c:15:ed:4a:2f:1d:06:6e:89:53:4d:46:bc:75:70:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C6:50:84:33:4F:95:6E:E8:95:AB:A9:41:E6:8C:73:F5:C0:FC:29
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS206216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.151.0/24
212.60.153.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:91:89:f2:31:46:fa:cc:e9:2b:38:75:cc:03:f2:f9:30:bb:
98:f2:91:d9:b9:9c:c4:cd:f7:f4:e3:7e:46:4d:b0:91:69:fa:
f0:29:f0:ca:64:66:59:81:be:ea:08:9c:08:e3:9b:1c:cf:02:
57:f7:59:26:2e:bb:48:90:55:58:cb:42:cb:ab:d7:43:00:2b:
c4:ae:d9:cb:c9:6a:c7:80:4b:cf:8b:10:72:69:84:69:44:31:
45:da:5c:cf:1d:2d:d7:c7:7e:a9:2c:80:42:43:3b:30:e4:be:
03:f7:7b:9c:83:3c:de:5e:a8:81:23:3d:67:12:06:e6:ac:a6:
3d:dc:09:55:8c:2c:1a:c0:87:53:7c:85:9b:17:13:f1:47:52:
48:4c:f3:88:51:8d:12:74:6d:85:d5:0c:08:43:52:aa:de:a5:
3f:bc:3d:22:dc:e5:e1:08:41:db:15:a6:30:45:7d:fc:d8:36:
d3:ab:15:59:06:8b:14:b5:9c:14:97:80:90:29:7c:2e:90:3c:
09:c8:2d:08:f8:eb:3f:3c:71:18:e7:ef:73:de:86:ea:90:88:
1c:38:69:8b:02:b7:8c:ed:51:d1:ad:bc:8d:23:7c:38:c0:ec:
7a:54:72:35:69:23:aa:6f:30:bf:db:b2:2a:3d:4c:f1:cd:ac:
a1:78:a6:da
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUHXmGBTDwFy689/blwzBKp5nR+ZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjAyMDIwOTQ1NTZaFw0yNzAyMDEwOTUwNTZaMDMxMTAvBgNV
BAMTKEY4QzY1MDg0MzM0Rjk1NkVFODk1QUJBOTQxRTY4QzczRjVDMEZDMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xOFc2vkH/UtwbhguOta6EJJN
CmQ6pIaVXIksrVtYhPJSiFWi6/ViYv1uD1QKUVgH2ZR/AMjJn3PwrQh52zkJ8K5z
lsmSJsh2c1JVIk3pgu55IQzt4jBTw0aDiNI+ewkPoOSjA2MVVXzJdQAo70eQRelN
WKCDeUC7MVySOHJrQWZ9vC9JkvpzKj90Pqg3zJ3nIBChlMbYyVccQAkujheBQJJB
EWWArAX7E9ZBbqY5f5jbFJixcEMZwvHdFchA5kPiuf+sYx2wB4tGgr/9c9x3bIIR
j66C6cifhbQx0KYTsYaMmH+4oHMX9tWM5c8aN1wV7UovHQZuiVNNRrx1cFPbAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU+MZQhDNPlW7olaupQeaMc/XA/CkwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjA2MjE2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1DyX
AwQA1DyZMA0GCSqGSIb3DQEBCwUAA4IBAQCNkYnyMUb6zOkrOHXMA/L5MLuY8pHZ
uZzEzff0435GTbCRafrwKfDKZGZZgb7qCJwI45sczwJX91kmLrtIkFVYy0LLq9dD
ACvErtnLyWrHgEvPixByaYRpRDFF2lzPHS3Xx36pLIBCQzsw5L4D93ucgzzeXqiB
Iz1nEgbmrKY93AlVjCwawIdTfIWbFxPxR1JITPOIUY0SdG2F1QwIQ1Kq3qU/vD0i
3OXhCEHbFaYwRX382DbTqxVZBosUtZwUl4CQKXwukDwJyC0I+Os/PHEY5+9z3obq
kIgcOGmLAreM7VHRrbyNI3w4wOx6VHI1aSOqbzC/27IqPUzxzayheKba
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:55 2026 by rpki-client