Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS206300.roa
File: AS206300.roa (raw, json)
Hash identifier: BqXRE4Q1/U0lRDzyBl10U1oPqEdOfFYFOggxrxr8LNw=
Subject key identifier: A1:89:BF:66:37:1B:AF:31:67:E6:C3:0C:B1:E2:F9:C9:0A:6B:26:6C
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 62E4753DF44014F32B447B88D57E443EEC28C169
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS206300.roa
Signing time: Mon 27 Jul 2026 11:03:11 +0000
ROA not before: Mon 27 Jul 2026 10:58:11 +0000
ROA not after: Mon 26 Jul 2027 11:03:11 +0000
asID: 206300
IP address blocks: 212.17.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e4:75:3d:f4:40:14:f3:2b:44:7b:88:d5:7e:44:3e:ec:28:c1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 27 10:58:11 2026 GMT
Not After : Jul 26 11:03:11 2027 GMT
Subject: CN=A189BF66371BAF3167E6C30CB1E2F9C90A6B266C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:01:74:b1:d3:02:c1:cc:55:c3:2a:77:2d:
ed:42:56:b0:7b:08:2c:99:75:a6:c8:df:73:c1:0b:
93:66:7b:cf:a6:e6:d3:f8:6d:89:e3:23:d7:a4:27:
27:24:cc:1c:c4:1f:10:b7:68:5b:d3:74:2c:85:a3:
89:8b:9e:7f:7f:76:db:b0:d5:2f:a2:eb:ae:8e:c2:
75:6e:2e:02:2d:5f:94:8e:fb:5a:46:1f:b7:b5:a2:
80:fd:00:b4:78:47:56:4f:33:d4:30:21:fb:27:55:
96:6c:c0:60:27:ad:ea:ce:33:21:cd:80:e5:a2:83:
fe:10:31:9a:89:a6:fe:b2:ad:5b:a3:c4:10:35:f6:
54:7e:d5:cc:28:d6:6e:8c:33:df:90:81:a0:2c:cb:
ca:b9:80:7b:8a:02:6d:99:e1:db:0d:dd:3e:12:47:
87:79:94:c2:47:41:5b:b6:c3:65:b6:98:8b:66:fb:
5a:70:f6:70:cb:b4:ec:fa:85:ce:f0:e8:fc:2f:d4:
0f:75:ca:a7:5d:87:53:e6:0f:8f:53:0f:98:fe:df:
01:9d:d9:bb:19:c7:fa:e6:80:90:ce:3a:b3:6c:c2:
25:28:76:29:d5:64:3d:bb:67:af:e8:0b:8e:bd:ba:
3e:28:99:fb:9c:14:c4:ff:39:35:b1:23:e9:5a:3c:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:89:BF:66:37:1B:AF:31:67:E6:C3:0C:B1:E2:F9:C9:0A:6B:26:6C
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS206300.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.236.0/22
Signature Algorithm: sha256WithRSAEncryption
34:f0:0a:ad:25:f3:67:60:01:c8:4f:49:39:1e:2d:d0:2d:34:
84:41:44:60:60:bd:e1:8d:de:d5:69:6b:54:89:0f:36:99:60:
f6:69:96:f1:4c:2b:b4:7d:0f:80:66:c7:33:5b:7c:bc:a5:c5:
4c:4e:f1:c6:98:5b:82:c0:ac:54:9b:f5:ff:45:c4:ea:c8:eb:
bb:81:52:8c:49:b8:bf:7a:b3:9f:f2:27:ea:bf:99:30:9d:19:
26:d8:2c:64:de:54:71:06:ff:9f:f0:44:e8:b3:8a:76:e0:77:
91:af:ba:36:88:bc:2d:a5:a3:58:a7:63:d2:2a:92:72:67:e0:
9b:85:ab:18:88:d1:ff:bc:6b:95:cb:13:11:92:13:11:09:8d:
5c:34:c7:f8:6a:ba:97:c3:1f:7b:65:15:29:ee:da:3b:d8:5f:
3f:d2:62:45:d1:dc:f7:ef:dc:3c:f3:ba:77:90:ef:42:26:8f:
25:43:e7:12:cb:07:72:b2:e2:ab:c7:27:45:4c:c0:33:83:38:
d2:d5:0c:a3:d9:40:ce:56:f7:c7:cf:a2:ed:40:52:f1:7a:e4:
7a:84:74:fa:b7:c4:45:22:33:71:16:1e:6f:4e:1e:0d:82:bf:
e8:af:fa:18:5d:1f:5c:f9:bf:35:20:37:b9:85:1f:05:64:fd:
74:2c:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:59:54 2026 by rpki-client