Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206650.roa
File: AS206650.roa (raw, json)
Hash identifier: e2U2LGK6pR4XLLDAYjG/IKNKKrmUlGsZYVd6ebXroZs=
Subject key identifier: 59:D5:27:1A:E1:2F:07:F7:2C:24:9F:71:BA:56:0B:65:32:84:4C:90
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 30A849CB8DCC29C7A2A161CE4BBD98BAE0C3F600
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206650.roa
Signing time: Fri 30 Jan 2026 07:45:40 +0000
ROA not before: Fri 30 Jan 2026 07:40:40 +0000
ROA not after: Fri 29 Jan 2027 07:45:40 +0000
asID: 206650
IP address blocks: 82.41.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a8:49:cb:8d:cc:29:c7:a2:a1:61:ce:4b:bd:98:ba:e0:c3:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 30 07:40:40 2026 GMT
Not After : Jan 29 07:45:40 2027 GMT
Subject: CN=59D5271AE12F07F72C249F71BA560B6532844C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:14:18:a7:5c:c9:12:93:08:88:7c:e5:d7:
bb:75:c1:cf:ea:03:04:e6:f6:ec:e5:8e:cc:f8:e3:
af:74:8d:f0:47:a5:df:6a:73:82:12:0b:fd:0f:74:
e1:f0:ae:82:1c:06:cd:86:6a:d0:fb:83:bd:2c:6e:
25:0e:fc:0f:b0:bd:40:32:82:af:32:ec:1f:27:c6:
b5:6c:d8:71:71:e0:20:76:7e:28:c8:b6:3d:6b:f2:
d8:d0:7e:27:ad:62:bd:9c:b3:8f:4e:32:ec:f5:88:
0a:f5:fb:ce:f4:4d:73:d8:81:3d:4b:34:e5:c7:0a:
8a:7e:dc:4a:05:b8:d3:99:cd:26:6e:b8:66:d7:3c:
83:5b:9e:51:ce:70:dd:67:0e:fb:08:5c:17:56:4b:
d9:57:03:5a:c2:8b:e7:29:63:95:b8:76:63:4d:17:
23:a0:7c:d1:bb:0e:29:f3:85:b2:1b:05:de:19:28:
9b:89:db:d3:26:ac:5c:ed:0a:07:43:3e:ea:85:19:
fe:90:1a:ac:75:2f:23:be:53:9d:b1:ee:3a:11:96:
3f:34:26:80:e5:67:49:b3:6f:b2:37:bd:67:d8:01:
34:f7:6a:28:13:bd:b6:c1:10:dc:13:d4:95:74:ea:
9b:74:33:1a:94:a0:88:34:40:41:2e:5e:8f:87:88:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D5:27:1A:E1:2F:07:F7:2C:24:9F:71:BA:56:0B:65:32:84:4C:90
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.171.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ca:f3:64:0c:f0:13:e1:9c:3b:f2:c4:a2:9d:74:40:44:f9:
78:f9:b1:2b:9e:f0:df:ad:a8:c9:45:10:7b:ee:1c:57:72:45:
2a:68:e4:b1:46:6c:a1:81:b3:d3:1e:13:94:e6:1c:59:41:ab:
19:e1:e3:31:30:60:2b:b9:0f:e1:01:f2:4e:7d:61:d2:d6:35:
de:93:85:61:d1:1a:63:21:bb:59:82:05:32:40:3c:a9:f2:dc:
6f:82:be:46:21:75:01:76:2f:d4:50:7e:b7:0a:6e:2f:59:a6:
f2:0e:57:97:7a:6b:c9:98:75:5f:09:a4:b7:40:38:dc:05:9d:
97:b9:76:f2:b2:8d:b5:69:18:dc:9f:4d:8f:ca:b1:90:1f:f0:
db:1b:a5:c4:26:64:a0:37:8b:d0:ba:e9:12:be:2e:60:1d:9e:
2c:a7:fd:c5:c9:35:a8:f6:7e:ad:85:39:1f:d0:1b:11:3e:74:
c1:77:4c:c1:30:56:01:80:d9:d6:ec:f2:63:f5:8b:e5:9e:1f:
73:f9:e6:de:5b:06:62:c0:fc:71:da:b6:ed:11:9e:f2:7d:5c:
36:0b:5c:65:d1:81:bd:f6:d4:46:8f:bc:c1:c5:a0:1f:62:07:
85:45:24:e0:67:9b:a0:a2:64:67:76:ce:87:e0:0c:90:c2:c7:
e3:46:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:40:00 2026 by rpki-client