Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS206092.roa
File:                     AS206092.roa (raw, json)
Hash identifier:          t4alqP1U9xWe+5Li+gXGJ3fEsK5x/0ONudTg6oSoDbM=
Subject key identifier:   6D:69:6A:9E:14:2A:DB:1B:9B:AB:79:62:7A:25:1A:DD:C2:4E:51:14
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       73E92E74780AD953F4E35F72385CEB3AFB320619
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS206092.roa
Signing time:             Wed 16 Sep 2026 19:32:02 +0000
ROA not before:           Wed 16 Sep 2026 19:27:02 +0000
ROA not after:            Wed 15 Sep 2027 19:32:02 +0000
asID:                     206092
IP address blocks:        51.241.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e9:2e:74:78:0a:d9:53:f4:e3:5f:72:38:5c:eb:3a:fb:32:06:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Sep 16 19:27:02 2026 GMT
            Not After : Sep 15 19:32:02 2027 GMT
        Subject: CN=6D696A9E142ADB1B9BAB79627A251ADDC24E5114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:2c:bf:92:9f:ad:2c:69:a0:03:eb:74:12:
                    59:46:33:49:4e:32:9d:b3:50:8c:f6:f9:9e:3b:5b:
                    ea:b8:41:6b:d8:0d:51:6f:3c:69:a7:70:cb:fd:6b:
                    da:5b:40:7e:78:99:85:62:ef:b2:2c:25:28:94:d1:
                    29:42:6f:13:cb:53:74:bc:61:73:f6:11:8f:63:f4:
                    61:b8:e0:67:8e:6d:2f:17:e8:58:25:40:a1:dd:3f:
                    1b:9f:d0:69:1f:b0:21:f8:85:c4:a2:b9:24:81:e3:
                    be:e0:88:b4:2e:4d:22:6d:40:48:a3:9d:4d:5d:fd:
                    1b:f4:1f:17:53:e4:a4:2d:3d:a6:b6:68:6e:8b:00:
                    26:dc:d3:47:ed:cf:f0:bd:6b:56:cb:6d:e1:cd:33:
                    3e:ce:a7:c0:be:70:4b:db:80:1f:cc:81:2c:ca:bd:
                    a1:63:ad:b6:2d:08:96:dc:72:a5:04:6d:75:d3:a1:
                    c0:5b:93:8d:43:d1:d9:f8:56:58:e5:6d:f5:01:38:
                    48:0e:df:de:7e:83:e6:4f:fd:e5:27:88:86:ae:03:
                    ff:91:ef:ff:94:f0:8e:71:38:e6:0e:a9:f5:89:8d:
                    11:34:a9:fc:0e:3e:ce:2b:43:7e:0b:55:8f:f0:aa:
                    c0:87:af:e4:5b:4d:b8:c3:3a:b7:7f:db:f4:af:6a:
                    fd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:69:6A:9E:14:2A:DB:1B:9B:AB:79:62:7A:25:1A:DD:C2:4E:51:14
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS206092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.241.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:05:8d:87:9c:ef:ac:42:e4:ce:a5:04:d9:eb:d8:d5:fc:2f:
         3a:ff:12:d0:81:00:db:f1:1c:11:65:7a:5c:bb:4d:ec:ed:1b:
         2f:a6:2f:e3:b9:20:15:49:7f:27:81:c3:72:52:ca:4e:60:7c:
         9c:5d:60:8b:b2:b5:5a:03:b9:ec:4b:9e:ba:6c:5f:10:6e:8a:
         0a:64:42:b7:5e:06:f6:85:1f:22:71:2d:6a:b9:7d:b7:ba:f2:
         fd:a1:66:54:2e:84:68:e3:69:51:b0:83:2b:d8:9a:c6:59:1d:
         44:d8:bf:58:e6:1d:36:82:5b:74:55:4d:34:0a:11:f4:98:57:
         67:eb:8b:c6:73:fd:02:65:2e:18:1c:2c:58:c2:0b:a0:ef:c2:
         91:0e:79:c4:9c:82:a4:e5:db:f7:d8:41:e5:ed:a9:bb:19:b8:
         03:42:3b:73:ca:07:60:6f:a5:69:16:59:3c:42:c9:5a:b4:3d:
         c2:ee:4e:fe:dd:8a:2a:93:c1:af:63:67:9b:e0:84:bf:55:6c:
         55:50:a9:bf:49:7b:ba:b3:77:78:44:39:a5:88:0b:6d:37:d0:
         eb:e5:94:86:78:65:63:5f:69:86:83:9d:95:1a:bd:59:b2:0e:
         a3:dd:31:79:39:6f:c0:80:f9:90:14:fc:31:e9:4b:8b:a8:8d:
         78:d0:83:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:53 2026 by rpki-client