Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: 23HYO33jZm2OBBbWEejRe0Y8xeXXagMV6B0JF/7BW8A=
Subject key identifier: 06:5F:16:0D:FB:78:DB:99:20:04:CF:8F:92:5E:8E:17:F1:24:88:D4
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 44B5B30200AC0C6B72E8F6972FA40958558EF80D
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206092.roa
Signing time: Tue 01 Sep 2026 16:49:31 +0000
ROA not before: Tue 01 Sep 2026 16:44:31 +0000
ROA not after: Tue 31 Aug 2027 16:49:31 +0000
asID: 206092
IP address blocks: 141.11.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b5:b3:02:00:ac:0c:6b:72:e8:f6:97:2f:a4:09:58:55:8e:f8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 1 16:44:31 2026 GMT
Not After : Aug 31 16:49:31 2027 GMT
Subject: CN=065F160DFB78DB992004CF8F925E8E17F12488D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:37:af:ee:2d:8b:36:cc:95:2e:26:db:d3:6e:
d2:32:3b:46:96:21:53:8d:49:50:32:8b:01:0b:cd:
33:ae:b3:22:53:69:6a:9b:35:40:a8:83:b5:bf:9a:
d7:2f:1b:13:e2:5f:be:c2:8b:c3:38:71:09:03:4d:
5c:37:12:7b:fa:92:6b:68:5f:c0:d6:ff:02:4f:b2:
f6:90:00:5d:65:ff:4d:a8:63:39:09:52:ce:c1:75:
6d:09:c9:8e:e4:3b:f6:22:a7:31:67:81:a7:6e:87:
eb:18:c0:b7:b5:16:14:21:64:87:b2:29:8b:e6:30:
86:47:f0:d7:83:36:f0:02:ae:97:f3:a7:5b:67:ca:
2a:33:52:45:69:60:74:17:d4:39:50:bd:0d:76:e8:
d8:51:99:66:2f:71:78:6a:ff:ab:2a:47:11:c0:2d:
f6:a7:03:4c:e6:90:e7:4b:39:86:5f:08:95:15:16:
85:91:71:3c:68:a8:a9:c5:63:e4:a5:ce:a4:8d:b3:
4f:e2:67:38:0c:7b:41:9e:c7:0d:56:8d:e2:80:f8:
d5:b9:b8:a0:6d:19:92:fe:02:b5:79:a7:3e:6d:e9:
c5:23:c6:2b:38:c3:85:a8:67:94:16:6f:a6:cb:0b:
c6:2c:1e:36:64:2a:9f:02:93:de:73:8d:eb:82:9a:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:16:0D:FB:78:DB:99:20:04:CF:8F:92:5E:8E:17:F1:24:88:D4
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
Signature Algorithm: sha256WithRSAEncryption
41:11:1e:f9:e7:a7:cd:3f:39:46:b2:ef:50:ca:30:3c:bc:0e:
60:c0:03:ec:6c:90:b9:53:98:75:da:7a:08:cd:45:87:5c:e9:
12:c3:26:48:85:a2:b7:4b:0e:3a:46:9d:1e:87:14:99:4e:4c:
0a:53:21:8a:17:66:e6:c7:d6:e3:e2:7e:a4:d0:65:dc:4f:67:
36:7d:48:af:c4:11:8e:f8:e9:6a:42:bf:19:bd:e8:30:15:09:
c7:73:38:ba:57:53:54:e9:4d:64:83:68:e2:fb:26:21:0d:4e:
c7:90:3a:b9:d2:be:12:0a:44:2e:ab:c5:0b:33:6e:a9:a6:71:
a3:dd:54:ee:54:61:d0:aa:03:d0:7d:a0:89:0a:00:cf:3b:2a:
b8:e2:24:98:1e:de:e0:27:ca:18:fb:02:30:4f:54:4d:fa:5c:
49:ba:1d:4f:af:7b:74:e8:d3:93:c6:36:f5:64:76:21:0f:a6:
89:74:be:a5:90:fd:54:f9:98:cd:07:f9:76:34:82:3e:77:a9:
92:d5:5b:c8:08:82:b7:04:70:67:e0:e5:56:9b:cc:a2:37:4f:
09:2c:2e:44:5c:ad:5b:06:5a:80:06:0e:ab:f9:d1:a6:06:86:
8f:3a:6f:7e:f9:89:91:fa:19:dc:37:07:1d:c7:57:aa:73:df:
e1:c2:59:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:53:56 2026 by rpki-client