Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206085.roa
File: AS206085.roa (raw, json)
Hash identifier: DmID3Dsl4coECj+6gLOI1vK0k6bCHnUC/5QAVONRCr4=
Subject key identifier: 19:FF:4D:EB:40:B3:8A:C6:4E:C7:C0:FA:83:5C:74:9A:F0:5C:C2:A9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 16849F38D0F26A4DF08F0CB84A9EC5515A920DC8
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206085.roa
Signing time: Wed 11 Jun 2025 07:26:16 +0000
ROA not before: Wed 11 Jun 2025 07:21:16 +0000
ROA not after: Wed 10 Jun 2026 07:26:16 +0000
asID: 206085
IP address blocks: 2a0c:fa47::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:84:9f:38:d0:f2:6a:4d:f0:8f:0c:b8:4a:9e:c5:51:5a:92:0d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 11 07:21:16 2025 GMT
Not After : Jun 10 07:26:16 2026 GMT
Subject: CN=19FF4DEB40B38AC64EC7C0FA835C749AF05CC2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:a8:d1:4c:a3:1a:39:fb:6b:3d:c0:20:f6:
a1:07:34:3a:05:dc:4a:14:81:9c:55:57:a6:6f:7f:
91:c6:b3:0e:a3:8e:35:61:c4:32:f6:70:31:9f:db:
10:bf:48:c8:34:a0:32:78:00:0f:53:46:2c:b4:50:
f8:a6:b5:b6:44:25:48:04:5e:13:a8:1b:c5:31:fb:
f6:ae:2f:42:a4:54:60:37:f6:8e:48:4b:c9:93:38:
52:7e:3a:66:5d:28:ce:e2:e7:db:7c:2b:2c:a5:e0:
75:83:09:a6:08:39:c4:a9:cc:21:9e:e4:19:31:35:
87:53:5f:d4:63:da:a1:31:1a:de:55:88:d4:a1:f8:
db:7f:92:e7:4c:44:cf:5e:1b:11:e2:5c:8f:77:ee:
59:31:80:43:77:d8:19:18:93:5d:aa:07:2e:e3:65:
af:fd:70:a8:14:b5:3a:f5:71:f9:c8:d8:85:d8:d3:
38:7b:ff:e3:0a:1e:34:e8:c5:4d:8e:67:53:47:74:
a4:d2:00:7f:89:30:80:5d:5c:78:4e:4b:9f:93:2f:
dd:a1:96:84:eb:15:2a:9b:a2:d7:82:cf:49:fc:ff:
a0:66:b5:94:2b:52:c9:1b:d9:0f:ad:4e:f0:19:9f:
37:d3:65:92:6b:69:51:29:e2:c2:59:52:8f:6c:98:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:4D:EB:40:B3:8A:C6:4E:C7:C0:FA:83:5C:74:9A:F0:5C:C2:A9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:fa47::/32
Signature Algorithm: sha256WithRSAEncryption
72:1b:af:f5:0c:14:7b:42:63:b6:43:38:d3:5a:9d:3d:be:f1:
5f:c5:e4:d1:bf:40:22:54:05:2e:8d:41:c4:83:36:6a:66:cc:
47:16:c4:af:94:f1:f0:ac:9c:2f:61:f0:db:7e:d9:1e:17:c6:
1d:aa:81:09:b4:62:78:7e:a9:a4:e6:0d:52:33:21:61:58:47:
ed:bf:34:97:ca:e5:2b:b3:4e:ba:ea:5b:08:f8:b8:3f:fc:6a:
75:96:69:5c:ae:95:bd:e3:07:29:94:44:90:0c:63:62:70:2b:
f5:29:25:e1:ee:1b:ee:ad:4a:a3:28:7e:2c:ab:27:93:bd:70:
8d:70:1b:39:17:8f:e0:10:c5:3a:82:2f:bd:c1:1f:e5:44:74:
4d:4e:f8:50:21:b5:51:9e:f1:73:ad:38:43:56:cf:f4:d2:f7:
ba:25:90:cb:9c:e2:9f:a6:c7:a1:b6:b3:0d:65:aa:51:b4:c4:
27:c8:8a:e8:3a:2a:3e:a6:7d:c7:80:f8:41:44:6a:0c:ff:b2:
03:bc:f5:22:01:dd:63:95:31:45:91:ff:34:de:60:24:a1:e8:
cc:28:04:f9:da:12:12:ff:9e:cd:78:1b:b1:98:0d:bc:17:a4:
52:bf:67:09:ce:53:13:dc:99:c0:77:ad:e4:be:29:ab:e9:8b:
16:ea:5e:b4
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUFoSfONDyak3wjwy4Sp7FUVqSDcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA2MTEwNzIxMTZaFw0yNjA2MTAwNzI2MTZaMDMxMTAvBgNV
BAMTKDE5RkY0REVCNDBCMzhBQzY0RUM3QzBGQTgzNUM3NDlBRjA1Q0MyQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIb6jRTKMaOftrPcAg9qEHNDoF
3EoUgZxVV6Zvf5HGsw6jjjVhxDL2cDGf2xC/SMg0oDJ4AA9TRiy0UPimtbZEJUgE
XhOoG8Ux+/auL0KkVGA39o5IS8mTOFJ+OmZdKM7i59t8Kyyl4HWDCaYIOcSpzCGe
5BkxNYdTX9Rj2qExGt5ViNSh+Nt/kudMRM9eGxHiXI937lkxgEN32BkYk12qBy7j
Za/9cKgUtTr1cfnI2IXY0zh7/+MKHjToxU2OZ1NHdKTSAH+JMIBdXHhOS5+TL92h
loTrFSqboteCz0n8/6BmtZQrUskb2Q+tTvAZnzfTZZJraVEp4sJZUo9smG+ZAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUGf9N60CzisZOx8D6g1x0mvBcwqkwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA2MDg1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgz6
RzANBgkqhkiG9w0BAQsFAAOCAQEAchuv9QwUe0JjtkM401qdPb7xX8Xk0b9AIlQF
Lo1BxIM2ambMRxbEr5Tx8KycL2Hw237ZHhfGHaqBCbRieH6ppOYNUjMhYVhH7b80
l8rlK7NOuupbCPi4P/xqdZZpXK6VveMHKZREkAxjYnAr9Skl4e4b7q1Koyh+LKsn
k71wjXAbOReP4BDFOoIvvcEf5UR0TU74UCG1UZ7xc604Q1bP9NL3uiWQy5zin6bH
obazDWWqUbTEJ8iK6DoqPqZ9x4D4QURqDP+yA7z1IgHdY5UxRZH/NN5gJKHozCgE
+doSEv+ezXgbsZgNvBekUr9nCc5TE9yZwHet5L4pq+mLFupetA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:43:57 2025 by rpki-client