Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206183.roa
File: AS206183.roa (raw, json)
Hash identifier: Z9R6UdxnEqNYUCI5C4gbjSaMfmFCcxmAjjjSOR0TlRE=
Subject key identifier: 18:4A:23:2A:07:93:ED:D2:F8:9B:DF:1E:DA:04:14:BE:C4:74:60:99
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1B4EA80AFEEE9E1C896B3FFA8E887EF115C47F88
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206183.roa
Signing time: Sat 26 Jul 2025 13:48:54 +0000
ROA not before: Sat 26 Jul 2025 13:43:54 +0000
ROA not after: Sat 25 Jul 2026 13:48:54 +0000
asID: 206183
IP address blocks: 2a13:9500:4a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4e:a8:0a:fe:ee:9e:1c:89:6b:3f:fa:8e:88:7e:f1:15:c4:7f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 26 13:43:54 2025 GMT
Not After : Jul 25 13:48:54 2026 GMT
Subject: CN=184A232A0793EDD2F89BDF1EDA0414BEC4746099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:f8:96:1b:cf:34:d0:bb:92:16:8d:fe:dd:
a3:56:e9:ea:6c:9f:00:09:80:51:d4:e6:21:c9:da:
d2:68:20:6f:f8:26:d8:a9:c4:ee:84:ea:57:1a:ae:
64:da:58:6e:d6:94:90:6a:08:ef:7e:94:2a:0d:8c:
4c:9b:a9:7b:36:a2:b7:8d:01:55:f7:67:45:c5:c0:
9c:b7:cd:80:90:a9:74:c5:ee:69:10:0e:56:14:0f:
80:ee:49:7d:4d:b2:fa:ea:b7:af:21:26:ee:9a:79:
1a:26:4f:dd:89:dd:88:dd:67:b9:ed:f1:d6:4e:da:
e7:5e:d9:43:e4:ad:2a:11:31:a0:74:13:e2:e7:23:
d5:cf:e7:66:43:ec:fd:52:52:e4:4e:03:af:55:78:
4e:5b:a1:00:c9:61:b4:89:80:35:65:e0:f2:b6:b6:
1f:ee:27:f2:77:d4:c3:13:18:f1:5e:9d:9d:09:21:
43:02:9e:bc:15:b1:1d:c8:ef:d5:91:16:af:01:d1:
ee:6b:a2:1b:cf:c5:3d:c8:1d:2d:ba:2d:2a:fa:a9:
3e:eb:9a:a4:4d:ba:fc:d6:e4:9c:cd:1d:38:bd:1d:
5b:fb:90:d4:5a:bc:14:3b:1c:06:7c:ce:40:87:af:
86:63:fd:c9:1c:35:b7:18:f7:f1:58:4f:7f:a1:c2:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4A:23:2A:07:93:ED:D2:F8:9B:DF:1E:DA:04:14:BE:C4:74:60:99
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:4a::/48
Signature Algorithm: sha256WithRSAEncryption
a1:00:1f:66:41:63:85:62:94:b9:0f:99:4e:82:2c:84:96:88:
50:7f:32:57:e6:ed:36:4b:1c:64:04:85:9a:38:2c:f3:ce:d0:
7e:d8:1f:07:a2:c9:e1:be:bc:9e:d5:8c:a1:6e:75:8d:00:5d:
ff:ca:65:23:51:6c:92:1b:96:b1:96:0d:fd:30:8f:33:a9:fc:
44:c0:0c:bf:90:12:f3:53:00:d4:ca:66:23:c5:a0:e5:49:b2:
49:48:04:b8:d9:7e:fc:6e:3a:96:a2:6a:a3:f0:f2:50:be:ef:
33:a6:77:d5:e6:5f:08:cd:a3:9e:6d:cd:3b:99:60:ce:3e:08:
e0:2e:a5:d6:e6:95:e2:37:b4:fb:a4:36:88:2f:e7:a4:e6:f1:
a3:fa:2f:d5:39:77:a6:18:63:43:2e:4f:2b:d5:b1:94:5b:3f:
21:16:a1:20:b4:f7:26:81:0a:03:71:22:ef:44:90:8b:3a:3f:
0e:24:1f:36:30:a3:cc:f7:4e:73:6a:74:7e:4c:c7:4f:c9:0b:
fd:68:72:c2:7b:b7:cb:7f:00:ee:42:7f:33:15:92:6a:d2:28:
8e:46:2e:2f:f6:42:88:93:a7:45:29:83:a0:39:72:55:56:e9:
c0:b1:78:83:54:57:d7:ab:37:2a:bf:26:62:82:73:6a:da:18:
50:9b:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:39:23 2025 by rpki-client