Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206150.roa
File: AS206150.roa (raw, json)
Hash identifier: 7z/suiz0dfJCXdEgPfwO5ofPfCb8PddRHH1GrLOnSiM=
Subject key identifier: AC:B2:9B:F5:C3:48:E3:C7:DA:E9:38:33:95:76:9B:7A:49:49:99:ED
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1B0150FD1A2D50A518B18E5D76A21E07A9F4F555
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206150.roa
Signing time: Wed 15 Apr 2026 16:47:57 +0000
ROA not before: Wed 15 Apr 2026 16:42:57 +0000
ROA not after: Wed 14 Apr 2027 16:47:57 +0000
asID: 206150
IP address blocks: 2a0a:4e80::/32 maxlen: 48
2a0a:4e81::/32 maxlen: 48
2a0a:4e82::/32 maxlen: 48
2a0a:4e83::/32 maxlen: 48
2a0a:4e84::/32 maxlen: 48
2a0a:4e85::/32 maxlen: 48
2a0a:4e86::/32 maxlen: 48
2a0a:4e87::/32 maxlen: 48
2a0a:8e01::/32 maxlen: 48
2a0a:8e02::/32 maxlen: 48
2a0a:8e03::/32 maxlen: 48
2a0a:8e04::/32 maxlen: 48
2a0a:8e05::/32 maxlen: 48
2a0a:8e06::/32 maxlen: 48
2a0a:8e07::/32 maxlen: 48
2a0a:9600::/32 maxlen: 48
2a0a:9601::/32 maxlen: 48
2a0a:9602::/32 maxlen: 48
2a0a:9603::/32 maxlen: 48
2a0a:9604::/32 maxlen: 48
2a0a:9605::/32 maxlen: 48
2a0a:a704::/30 maxlen: 48
2a0a:be02::/32 maxlen: 48
2a0a:be03::/32 maxlen: 48
2a0a:be04::/32 maxlen: 48
2a0a:be05::/32 maxlen: 48
2a0a:be06::/32 maxlen: 48
2a0a:be07::/32 maxlen: 48
2a0a:d200::/32 maxlen: 48
2a0a:d201::/32 maxlen: 48
2a0a:d202::/32 maxlen: 48
2a0a:d203::/32 maxlen: 48
2a0a:d204::/32 maxlen: 48
2a0a:d205::/32 maxlen: 48
2a0a:d206::/32 maxlen: 48
2a0a:d207::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:01:50:fd:1a:2d:50:a5:18:b1:8e:5d:76:a2:1e:07:a9:f4:f5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 15 16:42:57 2026 GMT
Not After : Apr 14 16:47:57 2027 GMT
Subject: CN=ACB29BF5C348E3C7DAE9383395769B7A494999ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:82:98:ea:f9:9c:49:31:ab:59:60:4d:40:
63:af:0f:95:ad:a1:04:d6:0b:3b:5e:a3:91:f3:4c:
5c:b7:ec:e9:bb:09:60:f7:b1:87:ac:c7:b3:c9:3e:
cc:d7:a4:6e:3e:02:ec:2d:c6:3b:cc:a8:e9:16:50:
95:cc:fd:e7:ad:cb:5c:44:a3:54:aa:2f:09:0d:84:
c5:aa:80:1c:5c:8b:b1:96:cc:ba:6c:11:39:f1:90:
79:23:12:15:ea:26:a1:6f:d9:25:30:74:89:8d:9a:
48:a3:dd:a9:bf:59:24:ee:62:c9:17:3f:5c:cc:b7:
5c:35:b6:99:6c:d8:da:47:ea:49:e9:47:57:3f:f7:
1b:36:8d:b3:f7:58:6e:d8:1e:38:53:e2:3f:fc:48:
ae:d2:66:d5:21:c1:95:1b:c8:40:84:4c:78:74:15:
34:70:1d:0b:4a:b1:d2:6b:68:10:ff:34:6b:ec:4a:
07:4a:25:1a:f0:af:5a:99:a0:91:01:11:6f:d8:20:
ea:f9:b0:86:d8:44:b2:3e:0e:60:a0:6b:8b:f8:a8:
e3:34:ce:d2:9d:ea:66:e3:42:bf:7e:b0:23:a6:d9:
49:d4:1e:43:5c:be:c1:02:a0:1f:16:cd:d0:78:b4:
50:0b:13:73:26:c8:48:12:a5:09:de:1c:d3:91:76:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B2:9B:F5:C3:48:E3:C7:DA:E9:38:33:95:76:9B:7A:49:49:99:ED
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4e80::/29
2a0a:8e01::-2a0a:8e07:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:9600::-2a0a:9605:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:a704::/30
2a0a:be02::-2a0a:be07:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:d200::/29
Signature Algorithm: sha256WithRSAEncryption
07:2e:24:a7:fe:ea:2b:be:02:46:56:78:d0:67:47:70:32:4f:
c8:ba:78:a0:8e:f0:86:fa:8a:2d:3e:0e:f8:88:6e:b1:a7:f0:
1a:05:7e:31:cf:3c:42:ce:c3:7d:0b:0c:70:fd:6e:36:5d:c8:
5b:b4:be:03:68:b1:f2:bd:18:ae:9e:47:f7:26:af:51:e1:e0:
c4:83:14:c1:35:a6:b3:d5:b3:09:80:16:2b:80:ca:7e:60:b2:
58:b7:1e:fc:32:a9:bb:a9:b5:64:3b:8c:18:f3:42:be:d8:16:
8f:02:12:6d:cb:c3:ad:a8:aa:b2:72:0a:78:a7:d8:aa:59:4d:
f3:14:15:22:cf:e2:17:6e:5a:a6:de:aa:8d:e5:d2:89:49:20:
c7:28:d5:a0:cb:45:0e:5c:61:f6:17:da:82:5f:f9:87:f7:fe:
6f:bd:be:79:64:b7:d4:7e:11:87:80:88:85:ae:02:e0:dd:1f:
d9:81:ae:a6:f3:60:9c:c6:6c:70:3c:76:e3:ad:bd:ea:59:ef:
51:0d:17:b1:00:c6:6a:81:5c:01:5e:24:4e:49:47:90:8a:b0:
c5:0f:fc:d5:b7:22:f2:f7:39:59:94:9c:2c:48:7d:5a:fc:80:
2f:77:53:33:2a:bb:39:dc:dc:35:4e:7a:6c:c6:c5:f0:2e:45:
52:88:3a:de
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUGwFQ/RotUKUYsY5ddqIeB6n09VUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA0MTUxNjQyNTdaFw0yNzA0MTQxNjQ3NTdaMDMxMTAvBgNV
BAMTKEFDQjI5QkY1QzM0OEUzQzdEQUU5MzgzMzk1NzY5QjdBNDk0OTk5RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFyIKY6vmcSTGrWWBNQGOvD5Wt
oQTWCzteo5HzTFy37Om7CWD3sYesx7PJPszXpG4+AuwtxjvMqOkWUJXM/eety1xE
o1SqLwkNhMWqgBxci7GWzLpsETnxkHkjEhXqJqFv2SUwdImNmkij3am/WSTuYskX
P1zMt1w1tpls2NpH6knpR1c/9xs2jbP3WG7YHjhT4j/8SK7SZtUhwZUbyECETHh0
FTRwHQtKsdJraBD/NGvsSgdKJRrwr1qZoJEBEW/YIOr5sIbYRLI+DmCga4v4qOM0
ztKd6mbjQr9+sCOm2UnUHkNcvsECoB8WzdB4tFALE3MmyEgSpQneHNORdn67AgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUrLKb9cNI48fa6TgzlXabeklJme0wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA2MTUwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAAjBEAwUDKgpO
gDAOAwUAKgqOAQMFAyoKjgAwDQMEASoKlgMFASoKlgQDBQIqCqcEMA4DBQEqCr4C
AwUDKgq+AAMFAyoK0gAwDQYJKoZIhvcNAQELBQADggEBAAcuJKf+6iu+AkZWeNBn
R3AyT8i6eKCO8Ib6ii0+DviIbrGn8BoFfjHPPELOw30LDHD9bjZdyFu0vgNosfK9
GK6eR/cmr1Hh4MSDFME1prPVswmAFiuAyn5gsli3HvwyqbuptWQ7jBjzQr7YFo8C
Em3Lw62oqrJyCnin2KpZTfMUFSLP4hduWqbeqo3l0olJIMco1aDLRQ5cYfYX2oJf
+Yf3/m+9vnlkt9R+EYeAiIWuAuDdH9mBrqbzYJzGbHA8duOtvepZ71ENF7EAxmqB
XAFeJE5JR5CKsMUP/NW3IvL3OVmUnCxIfVr8gC93UzMquznc3DVOemzGxfAuRVKI
Ot4=
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:57:08 2026 by rpki-client