Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS206675.roa
File: AS206675.roa (raw, json)
Hash identifier: VRqnfSCjwskMQ2hgdAmsZkQ7GOCrkix0PpfS8jhOZi0=
Subject key identifier: 0F:8B:6F:86:02:38:8D:D0:58:D0:5C:0D:9D:C5:E2:53:92:95:7F:40
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 215F7E958A4022C5C4087371103F04BD54974399
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS206675.roa
Signing time: Fri 11 Sep 2026 16:50:34 +0000
ROA not before: Fri 11 Sep 2026 16:45:34 +0000
ROA not after: Fri 10 Sep 2027 16:50:34 +0000
asID: 206675
IP address blocks: 143.20.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5f:7e:95:8a:40:22:c5:c4:08:73:71:10:3f:04:bd:54:97:43:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 11 16:45:34 2026 GMT
Not After : Sep 10 16:50:34 2027 GMT
Subject: CN=0F8B6F8602388DD058D05C0D9DC5E25392957F40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c2:d7:d6:9f:0e:bc:64:0d:a6:2a:55:be:e1:
12:bd:11:3c:b5:e6:e1:62:02:c4:46:4b:b2:bb:4b:
86:32:db:b6:b1:24:e2:f5:80:43:e2:5b:ba:b1:8d:
28:c3:47:e3:e9:c5:d7:48:13:9b:6b:9c:11:33:56:
81:84:6f:3a:8d:74:05:8b:45:a2:b0:ec:de:55:2b:
38:b8:d6:a0:7d:90:b8:16:0f:6a:33:64:fa:3f:ca:
09:3b:bb:8c:6b:c9:fb:05:f6:41:1a:13:da:71:1c:
e8:09:38:c2:ec:6f:d2:d5:1f:00:90:e4:d2:48:ca:
fa:27:f2:f6:e1:05:06:91:17:44:4b:5b:d6:00:62:
4d:eb:c9:72:f4:31:6a:9d:6a:eb:46:82:01:38:ec:
8d:b4:6e:94:1e:2e:02:66:07:25:e9:1c:38:92:50:
8f:94:64:74:b3:54:8d:aa:5f:1f:a0:1d:56:45:02:
5f:67:97:5b:46:61:a9:33:b5:94:5b:a3:20:c7:d9:
61:c3:53:83:fa:2d:9c:40:b5:64:d2:4e:1d:b8:71:
4f:a2:31:65:64:e6:ec:7c:ce:f3:88:ee:fd:6d:5e:
65:90:dc:e3:5b:74:2f:cb:87:65:5f:e4:e4:11:dd:
42:26:94:d3:8f:ce:59:a3:9b:3b:9f:39:97:26:3e:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8B:6F:86:02:38:8D:D0:58:D0:5C:0D:9D:C5:E2:53:92:95:7F:40
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS206675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.70.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:db:4f:a9:a0:ba:ce:90:36:e5:01:fb:b6:8f:ee:83:b2:6f:
51:74:05:1f:7a:16:af:01:03:31:2c:6b:18:3f:2a:eb:5a:d7:
37:bd:23:c1:13:f5:15:3b:36:ea:ba:2f:d8:ce:bc:89:c3:82:
7f:62:40:11:4b:e7:ee:d3:c8:e9:ad:a8:86:68:07:f0:87:10:
87:c1:10:9b:7f:97:76:45:6b:d8:fe:1e:77:89:56:bb:06:12:
02:1e:5f:cc:a7:a8:34:c6:1c:65:db:9b:b4:f6:59:6b:2e:10:
95:be:79:c4:49:bf:56:a9:ee:67:5d:88:72:ea:7b:57:de:37:
be:5b:f6:c9:c7:63:52:f4:7a:b9:a3:16:52:68:43:30:c3:c6:
83:63:88:53:fd:5c:87:05:b3:f9:2f:e2:71:1a:e7:d1:24:99:
35:4f:6f:3e:c8:94:7d:b7:55:19:81:b0:94:78:17:e2:d5:d9:
d8:f7:9b:f2:29:50:d7:47:f2:c7:06:9d:84:47:d1:cc:b7:20:
4b:69:67:08:9f:9b:2c:aa:ca:7a:47:eb:0f:32:fa:53:4d:61:
fb:b9:66:2b:bc:c0:db:7d:62:84:f1:2b:54:24:d5:75:60:87:
bf:0b:6f:d4:19:49:7c:1c:78:18:25:35:74:a8:df:f5:e1:29:
8e:b1:6d:07
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUIV9+lYpAIsXECHNxED8EvVSXQ5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MTExNjQ1MzRaFw0yNzA5MTAxNjUwMzRaMDMxMTAvBgNV
BAMTKDBGOEI2Rjg2MDIzODhERDA1OEQwNUMwRDlEQzVFMjUzOTI5NTdGNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpwtfWnw68ZA2mKlW+4RK9ETy1
5uFiAsRGS7K7S4Yy27axJOL1gEPiW7qxjSjDR+PpxddIE5trnBEzVoGEbzqNdAWL
RaKw7N5VKzi41qB9kLgWD2ozZPo/ygk7u4xryfsF9kEaE9pxHOgJOMLsb9LVHwCQ
5NJIyvon8vbhBQaRF0RLW9YAYk3ryXL0MWqdautGggE47I20bpQeLgJmByXpHDiS
UI+UZHSzVI2qXx+gHVZFAl9nl1tGYakztZRboyDH2WHDU4P6LZxAtWTSTh24cU+i
MWVk5ux8zvOI7v1tXmWQ3ONbdC/Lh2Vf5OQR3UImlNOPzlmjmzufOZcmPnOjAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUD4tvhgI4jdBY0FwNncXiU5KVf0AwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjA2Njc1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjxRG
MA0GCSqGSIb3DQEBCwUAA4IBAQAf20+poLrOkDblAfu2j+6Dsm9RdAUfehavAQMx
LGsYPyrrWtc3vSPBE/UVOzbqui/YzryJw4J/YkARS+fu08jpraiGaAfwhxCHwRCb
f5d2RWvY/h53iVa7BhICHl/Mp6g0xhxl25u09llrLhCVvnnESb9Wqe5nXYhy6ntX
3je+W/bJx2NS9Hq5oxZSaEMww8aDY4hT/VyHBbP5L+JxGufRJJk1T28+yJR9t1UZ
gbCUeBfi1dnY95vyKVDXR/LHBp2ER9HMtyBLaWcIn5ssqsp6R+sPMvpTTWH7uWYr
vMDbfWKE8StUJNV1YIe/C2/UGUl8HHgYJTV0qN/14SmOsW0H
-----END CERTIFICATE-----
Generated at Mon Sep 21 04:10:06 2026 by rpki-client