Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: 6+hvCJLwIaYVgKC9Yzex51guSwF1/GSccNG+01L48y4=
Subject key identifier: 3E:4B:45:5B:E2:71:07:BA:F8:83:3C:B1:99:1E:B3:5C:74:40:2D:42
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3A937F30321431B6BE505E5896616B74BBCF89AB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206092.roa
Signing time: Tue 08 Sep 2026 07:36:30 +0000
ROA not before: Tue 08 Sep 2026 07:31:30 +0000
ROA not after: Tue 07 Sep 2027 07:36:30 +0000
asID: 206092
IP address blocks: 84.75.9.0/24 maxlen: 24
178.83.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:93:7f:30:32:14:31:b6:be:50:5e:58:96:61:6b:74:bb:cf:89:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 8 07:31:30 2026 GMT
Not After : Sep 7 07:36:30 2027 GMT
Subject: CN=3E4B455BE27107BAF8833CB1991EB35C74402D42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:bc:8e:e4:1e:8e:6b:c7:5a:46:c6:a0:d9:
44:95:dc:9b:c2:05:f8:fe:7f:40:d1:c3:d9:c1:98:
35:3d:37:6d:ab:96:f1:3e:a1:80:c1:2d:96:8c:2d:
d5:2a:11:81:e4:e4:c1:0a:47:3c:d8:ed:15:4a:cf:
11:f8:c8:be:7d:c9:23:f0:34:64:2e:30:3e:00:71:
c4:81:d8:8c:2f:2e:bd:ed:64:40:b4:63:a6:bb:37:
a4:14:e0:d5:0c:af:6a:43:01:c0:b6:da:43:83:8d:
f6:f9:87:93:bd:40:b8:53:b7:c2:e3:49:4b:49:f2:
7e:57:b9:5a:19:ed:f5:10:31:5b:d1:a2:3b:3c:c2:
3b:ab:ff:42:d2:73:40:04:d1:b5:f9:b8:b3:06:ac:
98:de:1d:08:4d:22:f1:8b:d0:d8:c4:95:13:ec:0f:
f9:8c:31:80:d6:2d:0c:b4:a8:77:08:86:b5:f3:c4:
da:48:9c:9a:dd:52:f9:98:32:1f:47:05:c3:80:34:
ed:56:95:68:aa:66:3b:06:35:66:ff:06:2f:b6:0c:
a4:e3:d0:e0:37:b8:ca:10:97:bd:ab:f2:1e:a1:f7:
25:87:8e:e0:0b:ca:9a:b0:24:18:09:03:e2:0a:d9:
72:46:2b:73:34:3d:a4:e2:8d:0e:ca:1d:03:f2:25:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:45:5B:E2:71:07:BA:F8:83:3C:B1:99:1E:B3:5C:74:40:2D:42
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.9.0/24
178.83.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b4:9e:18:4e:b8:a4:63:d1:e3:f1:68:fe:47:c6:95:d1:6e:
08:82:20:96:35:86:3a:f7:e2:54:2e:cb:c9:fe:d6:f6:3a:dd:
9e:6c:2c:b6:f0:33:5e:d1:ce:e4:05:03:f0:8a:48:b3:88:e2:
8d:0c:8e:87:6f:3e:64:f7:23:4f:72:b2:6d:bf:47:9a:53:f8:
14:7c:e2:72:35:45:5d:6a:cf:a7:19:5b:5f:a0:06:b1:70:2d:
e6:f4:f1:88:81:48:82:7a:e7:fc:d8:f8:76:77:ac:d8:2c:dc:
75:5f:b1:8e:d9:a3:ac:13:00:44:10:80:65:b4:c8:8b:bf:7e:
61:c0:9f:6d:c5:55:e9:9e:3c:fa:67:e3:49:47:04:9b:b9:28:
ef:ba:33:be:64:bd:06:00:5c:ce:53:28:c5:22:97:02:0c:51:
d1:c6:7d:04:39:ac:77:90:8d:f9:ca:44:21:92:11:a1:c7:53:
e6:c8:1e:da:d2:fa:30:57:fc:1b:70:56:0b:49:8e:a2:89:86:
a0:0d:12:b1:8e:e0:0b:87:4b:7f:54:62:97:6c:93:9f:15:cc:
fb:15:7e:fc:44:85:0a:45:d2:95:f6:85:1f:23:00:7d:27:94:
53:62:c9:d5:c1:cb:0a:5d:75:64:8b:27:ee:01:da:a9:b4:cf:
4f:3f:c1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:41 2026 by rpki-client