Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
File: AS206735.roa (raw, json)
Hash identifier: n4TIVzBvz6giWvruwPyNnc9XLfSEa6c3/AZuv+HIlFc=
Subject key identifier: A6:AB:AD:A9:16:DF:6D:0F:3C:A8:D6:FF:9E:06:6F:45:B9:D9:16:9E
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2B32937BD1816C2A7190A313C8C982E1F15BC64F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
Signing time: Wed 10 Jun 2026 09:22:55 +0000
ROA not before: Wed 10 Jun 2026 09:17:55 +0000
ROA not after: Wed 09 Jun 2027 09:22:55 +0000
asID: 206735
IP address blocks: 141.11.52.0/24 maxlen: 24
141.11.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:32:93:7b:d1:81:6c:2a:71:90:a3:13:c8:c9:82:e1:f1:5b:c6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 10 09:17:55 2026 GMT
Not After : Jun 9 09:22:55 2027 GMT
Subject: CN=A6ABADA916DF6D0F3CA8D6FF9E066F45B9D9169E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:22:af:ea:ed:59:3e:78:85:e2:40:b6:70:
3a:8c:65:f2:42:81:85:23:dd:9e:e0:d2:4f:51:cb:
59:d6:d4:e9:e4:64:99:7a:f3:f1:58:2b:f7:21:f6:
fe:7f:03:a6:51:2b:46:9e:f7:74:7e:0c:66:a1:b6:
db:c2:28:05:9c:7b:6e:b7:6e:7b:44:9f:86:8f:ce:
89:6b:b6:01:b0:8a:c7:66:61:b2:cc:fb:e2:b2:ad:
f7:c3:97:32:42:e7:36:76:28:d9:1b:aa:87:6f:a6:
02:46:11:fb:9a:f1:fc:01:32:ab:0f:44:0f:ec:a4:
a8:bd:a4:2d:46:35:4d:68:78:36:a2:22:e6:49:47:
0e:5d:f1:66:1f:b0:35:38:00:a7:11:87:56:a9:0d:
73:2b:82:86:21:70:fc:d0:53:db:94:63:51:f7:4f:
f8:2e:a4:57:3d:6a:7f:4a:1c:84:b5:d8:45:ff:65:
f8:4e:15:ab:a7:23:50:2d:ad:62:0f:62:df:5d:31:
be:6a:f4:a9:8b:bc:61:17:e4:0e:c5:1e:8a:cd:ad:
3c:75:47:ff:7f:2f:26:0f:ba:9e:c7:50:e5:60:88:
64:bb:00:ac:12:c7:29:f3:b7:68:59:c7:f1:d6:97:
9d:a1:42:64:99:e4:f0:c1:cc:bf:cd:65:6f:f6:4c:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AB:AD:A9:16:DF:6D:0F:3C:A8:D6:FF:9E:06:6F:45:B9:D9:16:9E
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.52.0/24
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4b:40:51:37:4a:89:f2:5b:9b:01:b6:01:2a:7f:4d:34:43:
8c:36:cb:b6:0a:64:62:d6:dd:09:1e:81:f5:ec:82:75:f1:62:
3a:5c:2d:05:b5:02:ee:e5:0f:77:8e:14:a1:a8:27:21:01:3d:
d2:9a:47:78:53:44:cd:11:3e:9a:5c:cd:e9:68:1f:78:06:32:
05:78:1e:bc:39:90:f3:fa:7d:b8:61:5d:65:4b:e5:45:59:fc:
ff:ad:a0:92:8c:72:a7:d8:c0:6b:7e:01:88:90:ce:87:5e:0a:
43:de:0e:70:78:b5:36:37:9f:9c:29:4a:5b:8f:98:7f:80:dc:
c9:67:1a:04:b2:c8:2a:6c:61:69:01:c5:3e:cd:2a:f4:4c:cf:
41:c6:3d:74:cd:a6:21:1e:ea:7e:6b:09:1e:b3:4a:6c:f5:a6:
ba:30:fd:01:e0:d1:00:da:c2:2f:3f:e8:26:c8:81:5f:8e:3b:
7e:42:a4:23:10:c8:0a:cf:85:b8:4e:d7:e4:39:9f:ff:31:33:
7e:ae:a8:16:97:3d:c6:a7:2a:86:f3:ab:29:36:a4:ac:36:85:
5c:67:2e:de:f6:10:9a:0c:32:a0:8f:3a:5e:d2:d6:1e:ba:65:
1a:a8:b3:c9:25:6a:88:a6:1e:cc:98:55:8a:e0:14:a4:01:fb:
cf:57:c4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:34 2026 by rpki-client