Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206391.roa
File: AS206391.roa (raw, json)
Hash identifier: HiSkvfTwqBUorCYdm6hxCjGoCqiGh980OS7kHkOEeAg=
Subject key identifier: DB:94:D1:82:6C:82:F4:E3:1A:49:5F:E1:8D:93:9F:E8:D7:75:B4:CF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 08F2A5B5DC959C3E71B59277014BA6A875232849
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206391.roa
Signing time: Mon 13 Apr 2026 13:29:27 +0000
ROA not before: Mon 13 Apr 2026 13:24:27 +0000
ROA not after: Mon 12 Apr 2027 13:29:27 +0000
asID: 206391
IP address blocks: 178.83.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f2:a5:b5:dc:95:9c:3e:71:b5:92:77:01:4b:a6:a8:75:23:28:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 13 13:24:27 2026 GMT
Not After : Apr 12 13:29:27 2027 GMT
Subject: CN=DB94D1826C82F4E31A495FE18D939FE8D775B4CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:98:a9:44:61:25:03:a7:16:ee:47:31:2a:
d2:24:c0:92:23:53:43:7c:c4:ae:c7:85:d5:38:d6:
d7:bc:a5:2d:66:78:7d:57:dc:1c:38:ed:bd:63:58:
8b:95:18:68:c4:3c:a5:72:38:7b:d9:c8:49:d1:4b:
17:f1:3e:30:91:5d:19:60:64:3e:cc:ed:5b:d7:b8:
37:5a:2d:2a:57:4c:cf:79:c7:55:6c:89:1f:85:87:
c6:8b:72:f6:3b:eb:89:cd:26:99:e9:03:46:15:dd:
14:15:3f:bb:e2:a3:62:e4:01:5c:9b:27:91:22:99:
9e:53:e7:75:6f:ec:8b:46:c5:80:d3:eb:17:da:99:
b5:e0:fc:ce:e3:d5:fe:22:1e:62:0f:ad:16:dc:b7:
a9:4b:ab:d8:12:3d:17:b1:da:1f:db:90:7e:85:25:
15:c9:d1:82:29:c3:96:6c:2a:11:8f:8b:a9:64:1d:
a6:6e:5f:ca:2d:22:67:28:1e:b0:78:45:fc:44:c3:
51:d5:21:47:5c:8a:c2:b9:9e:d0:da:26:81:25:2c:
d6:97:b6:02:44:32:1a:f4:57:b0:01:d6:f4:00:67:
6d:dd:0c:1e:54:4e:2d:6c:ba:59:5b:95:cd:ed:69:
d3:b1:31:96:d1:26:58:8d:fb:5b:4a:f7:73:79:b6:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:94:D1:82:6C:82:F4:E3:1A:49:5F:E1:8D:93:9F:E8:D7:75:B4:CF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.109.0/24
Signature Algorithm: sha256WithRSAEncryption
78:69:52:23:77:ef:a9:cb:c6:f7:8d:b2:a8:ec:46:bd:d9:9b:
3c:29:11:07:41:2c:79:18:de:a2:6e:cc:42:fe:ca:a8:4c:25:
44:24:da:2c:bc:60:ca:69:0d:09:3e:ad:7c:a8:93:3d:8c:eb:
a1:d1:3e:70:0d:b2:12:6c:dc:ea:27:e7:83:2c:7e:55:37:33:
36:0e:a0:de:87:91:19:3c:3b:0e:7c:e6:b3:64:26:01:96:ce:
1d:bc:eb:f5:25:10:90:b2:68:f5:a2:45:dc:b6:3f:5d:d0:32:
33:14:c6:39:8a:49:63:10:86:28:f7:10:2d:8c:5e:b4:2e:9a:
90:6c:d1:d3:07:56:b1:7e:95:cc:0f:ac:2a:d0:17:ba:15:0e:
28:ab:57:85:ba:ab:c1:3d:0b:48:36:63:5e:3b:fe:ca:5a:c7:
8c:84:23:80:9c:11:74:cb:14:c5:a4:69:34:1e:41:9b:7a:95:
7b:42:64:b2:05:6a:da:94:49:86:2b:00:73:67:89:32:55:7d:
6c:93:62:ea:e8:95:24:74:a8:89:6c:8e:68:22:d5:e9:ac:2b:
26:5b:4f:34:42:bf:80:4a:03:1e:3f:30:8f:87:93:f3:2f:d6:
55:f1:1d:9c:9a:67:e4:48:19:25:f2:a3:3b:c5:71:91:e5:ca:
a4:98:91:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:05 2026 by rpki-client