Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206822.roa
File: AS206822.roa (raw, json)
Hash identifier: 1ITf0r3nuv5ZaDEbInfjWPX4kf0QeAY6nPSX2ibQ4FI=
Subject key identifier: DA:47:42:97:64:E2:0D:5F:19:D6:F0:81:38:2C:52:FD:1B:61:7C:C7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 78F52F5F579BC380C513039851C1DD018E7F9E92
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206822.roa
Signing time: Fri 17 Apr 2026 09:49:00 +0000
ROA not before: Fri 17 Apr 2026 09:44:00 +0000
ROA not after: Fri 16 Apr 2027 09:49:00 +0000
asID: 206822
IP address blocks: 82.39.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f5:2f:5f:57:9b:c3:80:c5:13:03:98:51:c1:dd:01:8e:7f:9e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 17 09:44:00 2026 GMT
Not After : Apr 16 09:49:00 2027 GMT
Subject: CN=DA47429764E20D5F19D6F081382C52FD1B617CC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:d2:86:63:3a:2f:c7:f2:bc:f1:6e:39:29:
c1:90:c4:9d:50:e6:b8:e4:e1:74:44:53:e5:42:1b:
95:f0:3b:d2:10:0e:28:3f:8f:e7:8c:a1:da:00:19:
2c:d7:e5:fe:a7:4f:2f:48:70:8e:7a:5a:90:d3:82:
93:84:d3:b4:17:1c:43:ff:dc:5e:86:f6:18:ad:f9:
75:53:cc:5e:71:db:f1:3e:a4:d1:2c:6f:b0:0f:ca:
83:97:fe:87:15:e6:27:9d:89:b9:b4:35:11:f5:46:
f2:14:5d:f7:be:ef:50:88:9d:c2:4a:6d:5c:4e:80:
3a:fb:cd:58:c6:3f:4d:60:4b:01:3e:7e:2e:aa:c0:
ac:c4:c5:41:ed:98:b4:88:ce:2f:42:cf:1e:8d:06:
d7:38:39:b5:2d:c0:c1:94:6d:9a:c8:18:48:58:fa:
a0:ac:a4:35:97:74:47:2f:e4:ef:e5:aa:4e:90:f5:
16:b4:bd:bc:a8:c9:4c:d7:e6:44:f7:73:2e:f4:57:
40:2c:41:cb:a1:05:b3:17:86:9a:a5:07:de:b4:a3:
19:30:df:48:09:ad:9f:52:1c:88:a2:df:00:c6:ec:
12:af:95:b0:64:37:1b:8f:82:ae:09:3b:39:69:05:
49:42:ec:3c:26:65:1d:1a:8a:4c:78:bd:f7:c7:6d:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:47:42:97:64:E2:0D:5F:19:D6:F0:81:38:2C:52:FD:1B:61:7C:C7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.171.0/24
Signature Algorithm: sha256WithRSAEncryption
93:19:15:1f:08:0b:01:26:bb:ac:a8:89:67:72:f3:97:ef:78:
2f:f1:69:02:75:ca:b7:85:5f:89:48:35:c2:af:a1:95:87:0e:
67:be:f7:f5:e1:90:a8:d0:bb:90:47:49:6e:04:ed:1c:e4:41:
31:dd:76:af:e4:2e:cf:92:60:b0:38:25:c0:87:35:48:af:78:
65:42:a7:e9:fc:a6:3f:14:f9:0f:32:cf:b2:2f:fb:f5:6a:db:
2e:d0:b7:9a:6b:d3:a6:d1:ce:5b:71:23:b2:d9:90:ce:d5:45:
41:81:df:7d:25:17:2a:bc:bf:13:0f:d3:49:a6:33:78:34:4d:
23:9b:ff:48:56:b0:29:e9:f1:d9:d4:37:5c:d7:fd:c2:bf:66:
a3:89:4a:9a:50:53:97:57:96:5a:1e:6c:8b:35:29:db:a9:40:
23:44:92:80:3f:29:20:91:15:8c:c1:f4:1c:bf:e7:a1:d6:3a:
68:d0:12:15:ba:4f:bb:e0:c0:05:58:64:39:ca:ad:27:22:fe:
8e:d6:40:ae:a3:e6:7b:32:3a:7b:94:99:27:73:70:e1:2b:65:
2c:23:77:05:33:89:9c:2c:fb:e9:85:82:58:51:35:0a:d9:1b:
41:5c:1b:15:46:77:eb:5f:a7:b1:eb:eb:8f:f8:62:b5:aa:24:
77:b7:86:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:49 2026 by rpki-client