Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206000.roa
File: AS206000.roa (raw, json)
Hash identifier: Q0t6IzkRp7tqlWoXge1R0yaY9lAeoHMQuGocX7xqWzU=
Subject key identifier: 19:D9:01:49:F6:F8:30:10:F2:57:DB:A4:01:B1:90:7C:94:16:8A:9C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0B7E220AAF0522580493F9E95FA514A59F68B55D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206000.roa
Signing time: Fri 30 Oct 2026 04:09:20 +0000
ROA not before: Fri 30 Oct 2026 04:04:20 +0000
ROA not after: Fri 29 Oct 2027 04:09:20 +0000
asID: 206000
IP address blocks: 2a0f:85c1:cd8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:7e:22:0a:af:05:22:58:04:93:f9:e9:5f:a5:14:a5:9f:68:b5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 30 04:04:20 2026 GMT
Not After : Oct 29 04:09:20 2027 GMT
Subject: CN=19D90149F6F83010F257DBA401B1907C94168A9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:9f:1c:37:f0:83:0c:99:d1:dc:96:98:75:
0c:f4:4b:c5:64:cc:71:8f:ef:18:f8:5d:d5:04:2f:
42:4f:7b:b4:58:59:e9:1a:5d:05:cf:30:71:53:7f:
0d:39:ef:a0:c0:82:ba:f0:4e:22:ca:e3:50:a0:e6:
53:d1:38:30:1f:7d:96:c5:23:d9:26:ce:fe:7d:5b:
37:8b:ff:87:3b:11:88:d9:66:66:04:c1:d0:56:70:
ff:5e:15:88:70:64:af:c3:50:e9:b1:97:29:a3:c5:
e8:0e:8b:22:7a:6a:c8:e5:44:ff:73:7d:4a:f6:d8:
eb:a6:62:41:ba:10:78:48:61:4f:33:94:15:22:89:
4d:bd:44:e3:c4:ab:a9:36:76:55:7c:2a:2b:12:a4:
7f:8a:e7:30:0a:82:54:c0:60:6d:b5:88:51:98:2b:
43:02:6b:35:c2:32:9b:f0:36:43:86:29:aa:9c:92:
93:c4:dd:e7:94:49:b2:88:eb:cf:3f:78:18:58:17:
87:cf:50:16:c3:03:ae:9f:7a:42:0d:97:c3:fe:83:
0f:47:01:4e:12:73:2f:24:e2:3b:50:40:ec:96:06:
51:87:c2:e4:e7:c4:90:f1:b1:3e:06:63:06:06:2d:
0e:f4:e9:87:f4:55:d7:52:9f:3c:dc:9c:38:f5:29:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D9:01:49:F6:F8:30:10:F2:57:DB:A4:01:B1:90:7C:94:16:8A:9C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206000.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cd8::/48
Signature Algorithm: sha256WithRSAEncryption
50:7e:60:7a:21:a9:f6:86:4f:81:69:48:95:f0:ef:0a:2c:d9:
a3:c3:64:b9:02:e7:10:97:6d:90:c5:32:83:ff:fe:ee:b2:35:
8b:f0:45:c8:8e:52:5d:0b:2c:61:80:99:8d:c4:f8:bd:0e:ee:
a1:be:37:c0:b5:ef:2a:9d:fc:d1:64:6d:aa:c5:2e:6c:ba:4d:
84:81:7f:d9:6a:7a:a7:62:50:97:9a:87:71:31:6b:92:53:78:
e8:a5:f7:20:4e:df:fd:f5:3d:9d:b7:9c:38:27:1f:2f:4b:c8:
e3:e4:a6:7e:8f:6a:17:24:98:ca:63:2a:15:d6:b7:69:66:e4:
65:91:76:d8:8c:6c:00:b3:f4:1d:58:84:71:58:72:5d:b9:be:
47:48:65:f4:6e:94:2e:4c:0b:6a:f9:a6:fe:9c:e9:48:9b:3d:
3e:78:ef:0d:6e:2d:25:03:62:ec:7d:03:b6:10:40:5f:d7:b6:
48:17:17:24:7c:fb:68:82:72:f4:aa:f0:00:14:70:cc:9f:50:
04:ee:a5:4e:10:a4:d0:68:9e:e5:b5:8e:d0:08:c1:3e:c7:78:
a6:d2:1f:b7:fe:6c:52:9e:cf:66:5a:64:a0:cd:55:9e:fd:f8:
64:63:1b:48:14:36:48:40:32:61:7e:10:27:35:13:07:d0:56:
4c:a5:20:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:34:36 2026 by rpki-client