Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206533.roa
File: AS206533.roa (raw, json)
Hash identifier: nat9dpFEUhQeY6aUh/z7zTvdqP3N9z+hCu4mrZ3QHrg=
Subject key identifier: 68:5F:1E:A9:AB:8D:B0:0F:A6:6B:1E:FF:15:8C:40:D3:D7:6C:C9:C7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 698B0A3A765D57EEF9B6C0596259502610462FD8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206533.roa
Signing time: Fri 11 Sep 2026 09:30:15 +0000
ROA not before: Fri 11 Sep 2026 09:25:15 +0000
ROA not after: Fri 10 Sep 2027 09:30:15 +0000
asID: 206533
IP address blocks: 2a13:9500:1d9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8b:0a:3a:76:5d:57:ee:f9:b6:c0:59:62:59:50:26:10:46:2f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 11 09:25:15 2026 GMT
Not After : Sep 10 09:30:15 2027 GMT
Subject: CN=685F1EA9AB8DB00FA66B1EFF158C40D3D76CC9C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:1c:6f:91:7e:45:2a:5d:8b:63:9d:ab:5f:
f2:6a:91:85:05:67:56:bb:5a:e8:e4:75:be:d2:38:
6e:98:a5:ce:fb:8b:63:6b:67:cf:bf:da:2d:78:8c:
60:69:6d:65:f4:a8:32:55:d0:ad:c1:82:8a:63:f9:
88:a9:17:83:87:35:e5:fe:dc:88:c9:b1:84:61:17:
29:03:75:c3:af:6a:72:72:b7:e1:d9:89:85:7a:89:
c0:22:f6:50:41:12:5a:b5:39:61:f8:87:a1:dd:56:
a5:73:bb:a2:3e:ec:1f:19:1f:0c:b5:e9:3e:dc:bb:
a1:af:8f:b9:f5:b6:62:a3:6c:45:98:8b:d7:cc:f0:
f2:cc:d9:84:90:74:a0:eb:b4:2f:8e:e9:81:4c:df:
11:56:4a:d4:c4:fc:40:3c:02:d8:2e:67:85:59:eb:
4f:04:1e:86:e7:28:26:11:77:cf:85:98:74:45:01:
5a:8d:54:ef:8d:e0:1a:95:16:f0:a7:47:0a:94:ef:
a9:13:57:13:92:e3:3f:6f:64:35:23:e2:97:97:f4:
5a:82:aa:ba:4c:c8:81:cf:95:da:4b:f8:b0:2c:6c:
5c:01:1b:da:2c:cc:b2:1c:e1:ed:25:42:a4:25:ec:
e9:7b:a5:d8:0f:83:24:7e:c8:8b:93:fb:4e:f1:6e:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5F:1E:A9:AB:8D:B0:0F:A6:6B:1E:FF:15:8C:40:D3:D7:6C:C9:C7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1d9::/48
Signature Algorithm: sha256WithRSAEncryption
08:bb:ef:8d:c4:eb:b8:4e:e8:27:3a:cb:9c:79:58:6e:0f:d7:
c1:dd:66:e6:8c:2f:20:d7:5b:59:5a:d8:bf:1a:4b:d3:5e:46:
05:7c:cd:81:53:b9:75:a9:c0:b7:8b:7a:84:7d:c0:df:8d:db:
24:56:e6:f3:a2:9d:b3:b5:ad:0a:97:18:cb:24:e2:4e:23:29:
c8:da:dd:fd:32:06:6e:f5:1e:c4:29:24:de:74:b5:51:15:3c:
2f:33:32:b2:fc:b3:d3:33:03:16:c7:49:d2:f5:95:76:66:8e:
1c:31:8b:f1:4a:a7:b0:6a:92:7d:ed:91:b3:14:ef:ef:a6:4d:
c6:d8:fb:81:f0:1f:fa:7d:16:d3:89:af:05:9f:55:e3:17:f6:
36:61:b8:75:8f:f8:90:35:1c:3e:80:df:82:5f:71:af:c1:7f:
1f:8f:37:f1:4f:87:62:c3:f0:7d:5b:77:6d:0c:06:d3:db:a1:
68:27:1f:fe:ab:ac:eb:00:c0:b1:a0:af:88:b0:0c:b3:2a:33:
e8:c2:e4:18:94:9a:84:d7:4a:83:e5:5a:e2:86:d7:39:44:2b:
fa:2c:17:a7:15:54:b8:c5:c2:83:f1:1e:04:5a:04:57:7d:de:
13:05:77:cd:32:ad:90:08:a5:4d:6b:4e:be:4b:cb:b8:43:ff:
c5:ab:14:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:57 2026 by rpki-client