Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206916.roa
File: AS206916.roa (raw, json)
Hash identifier: wrraY+4gI3nlSFQ9epYeKzzVL3EV/A3wGQdFLqY0TmI=
Subject key identifier: 82:BF:7F:CA:A1:95:AD:24:4F:BF:59:2D:FD:3A:27:F1:B1:2E:9F:E2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 47571D36ABB158CD6C8FE704AD7C2F9D66496E70
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206916.roa
Signing time: Thu 17 Sep 2026 06:44:24 +0000
ROA not before: Thu 17 Sep 2026 06:39:24 +0000
ROA not after: Thu 16 Sep 2027 06:44:24 +0000
asID: 206916
IP address blocks: 2a13:9500:1dd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:57:1d:36:ab:b1:58:cd:6c:8f:e7:04:ad:7c:2f:9d:66:49:6e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 17 06:39:24 2026 GMT
Not After : Sep 16 06:44:24 2027 GMT
Subject: CN=82BF7FCAA195AD244FBF592DFD3A27F1B12E9FE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:fb:0e:3f:29:29:b0:33:4c:9c:37:9c:e2:
a0:e7:c8:a7:54:20:cb:a2:c4:25:ba:99:a8:29:59:
1b:02:1a:d9:b8:ec:19:4e:41:69:f9:a9:2a:36:a6:
22:6c:66:47:a8:29:ca:40:2f:a3:b5:3c:6a:d4:a4:
99:5f:3a:33:1d:a4:91:e2:0d:00:07:08:fa:d2:7f:
8b:12:3c:8f:6c:02:6e:cf:1b:18:50:61:00:73:bf:
7a:33:57:c2:c8:e9:d5:c3:81:6a:76:b4:46:5d:04:
93:f8:ac:28:21:3e:05:c6:80:32:db:95:d0:ae:4c:
49:8f:93:1d:16:a2:a3:1a:7b:70:13:0d:ef:72:22:
5b:42:fb:e5:01:9e:9e:b6:04:8d:b8:67:ae:56:09:
9d:8a:b0:cd:01:7b:27:63:90:fd:35:71:3c:29:66:
8c:2c:d6:2a:e5:6a:43:ea:0e:c9:b5:f9:a8:8f:03:
9e:e1:fd:14:50:9c:49:45:fe:d1:74:67:3c:68:ae:
69:78:7a:95:95:ff:d6:fb:42:99:68:c2:cb:f5:72:
d6:ee:43:bb:21:9c:13:c0:d6:a3:cc:e8:2a:59:b9:
7e:24:3c:eb:71:db:46:a0:91:ab:2d:7b:3f:15:d9:
47:33:b3:65:4a:d9:ae:a3:33:88:6e:8d:66:c7:fb:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BF:7F:CA:A1:95:AD:24:4F:BF:59:2D:FD:3A:27:F1:B1:2E:9F:E2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206916.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1dd::/48
Signature Algorithm: sha256WithRSAEncryption
9b:36:cd:ce:99:62:b8:dd:a4:a9:ab:07:a7:fb:eb:87:8c:d4:
f4:0f:ef:ea:aa:eb:85:a4:b8:5a:60:7d:30:63:05:ac:96:da:
ba:28:4f:ea:1d:98:4d:41:0f:68:78:5f:26:d2:b8:c8:ee:e2:
9a:0a:d5:ea:50:c8:9c:04:b2:bc:84:52:1c:20:29:a2:05:91:
33:33:3f:f8:bb:bd:7e:03:55:f1:86:58:fc:a2:1e:1e:93:92:
9c:9c:1d:0a:34:6a:d7:a3:a2:b9:41:ba:b0:ca:a6:b4:ef:e4:
90:d8:12:ba:c0:0b:96:fe:84:da:71:15:b4:e6:7b:44:cf:87:
2c:03:ee:33:8c:e0:a3:96:88:93:d3:eb:36:74:30:af:b1:95:
89:ae:c7:c9:27:05:22:6c:83:74:14:50:56:b6:db:aa:13:9a:
39:a9:6f:76:40:be:52:db:fe:55:47:f4:04:bd:cd:28:a5:23:
19:d1:33:37:60:2f:73:77:90:16:96:f8:f0:83:63:5b:b4:91:
88:c8:d8:67:7b:0c:d3:d6:31:e0:d7:7a:00:a0:44:f1:99:a6:
5b:1e:c3:d9:11:33:fa:83:52:9b:23:90:73:2c:f9:2b:fb:48:
11:23:24:12:a0:de:bd:42:33:fa:18:0b:8d:11:3a:4a:25:10:
e8:6a:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:30:48 2026 by rpki-client