Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206136.roa
File: AS206136.roa (raw, json)
Hash identifier: BRBsMD3GeDCGwm3iGeBwy8cAsYVD7UgRr8c2VDq3lFg=
Subject key identifier: 89:1B:B4:03:EE:04:B8:43:E7:3B:68:1C:F9:1C:F1:8D:AC:DD:F4:44
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 75CC1ADE0360E1D8543451E4A148ADC6E2E16B74
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206136.roa
Signing time: Thu 27 Aug 2026 13:08:34 +0000
ROA not before: Thu 27 Aug 2026 13:03:34 +0000
ROA not after: Thu 26 Aug 2027 13:08:34 +0000
asID: 206136
IP address blocks: 178.93.54.0/24 maxlen: 24
178.95.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:cc:1a:de:03:60:e1:d8:54:34:51:e4:a1:48:ad:c6:e2:e1:6b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 27 13:03:34 2026 GMT
Not After : Aug 26 13:08:34 2027 GMT
Subject: CN=891BB403EE04B843E73B681CF91CF18DACDDF444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:d7:75:5c:a2:bd:39:8c:47:95:1b:11:66:
79:1f:47:8c:29:b1:03:d6:c3:27:c8:ee:26:e9:01:
fa:b5:d1:21:5c:26:b2:9e:a8:c9:a7:37:d4:f3:4e:
99:5d:d1:b3:7a:c1:ad:e4:93:f4:24:62:37:53:74:
88:d3:83:e5:6b:ef:ab:ee:15:41:76:8d:4e:a3:e1:
fc:e7:12:0d:f5:bb:a5:da:20:45:84:95:2e:11:9a:
5e:b5:79:04:2f:8c:e4:b6:82:cf:6c:10:54:79:0a:
14:a8:a4:73:c5:7e:d4:52:e8:5c:18:92:4f:ed:16:
34:e2:1b:a6:ed:0a:2c:57:3c:52:de:1e:de:12:6f:
a5:31:c0:56:ed:6c:d3:13:9c:1f:74:88:2f:b1:2a:
d4:78:06:d5:2e:31:f1:7e:d5:27:51:96:66:74:c7:
71:16:8b:29:91:c1:33:63:b1:43:e1:a9:0c:f7:3d:
8c:a2:8c:23:49:45:5f:b1:48:48:e5:fa:2b:02:dc:
66:e5:e1:76:8a:72:5f:ff:de:a9:d2:3e:44:f5:0d:
b0:89:79:e9:5f:b4:d9:6e:c1:5e:21:63:dc:f8:6f:
47:23:ff:c3:a2:27:8c:14:98:37:7d:69:e6:86:06:
46:a3:2c:85:96:e9:ef:8c:1b:59:71:91:34:9a:d2:
b0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1B:B4:03:EE:04:B8:43:E7:3B:68:1C:F9:1C:F1:8D:AC:DD:F4:44
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.54.0/24
178.95.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:37:03:37:50:1d:e0:60:21:74:03:67:54:cc:6b:cd:df:77:
05:ea:5a:b4:ed:fe:50:44:b7:32:c1:b0:46:c6:99:33:65:7d:
09:6c:25:75:cc:61:b2:5c:63:b9:9e:29:00:13:6d:2c:77:64:
03:ba:13:be:e0:2b:3d:24:60:d0:ed:b5:92:f4:39:21:fc:38:
35:0e:a2:d7:4c:64:1c:1b:11:47:6c:e2:0d:21:11:04:c2:42:
e2:79:a7:de:b3:89:7b:b5:88:4b:9c:e2:50:04:49:7c:c3:40:
18:68:fd:93:65:88:dc:cb:d4:eb:e9:43:02:1b:f8:a7:ec:df:
a6:21:16:0b:c4:c3:90:f8:a5:42:46:13:b9:37:b8:75:f2:8c:
bd:7d:af:3b:1a:a1:2d:42:48:33:74:56:8f:5e:bc:d7:a1:61:
c7:4f:5a:80:4b:74:4c:5b:eb:11:ab:8c:3e:3d:9f:b9:cd:f1:
9d:97:ea:04:71:99:ce:e4:be:45:55:91:01:8a:e6:14:7f:56:
5b:db:ef:09:1d:16:db:3f:cc:39:44:88:fe:f1:62:22:06:12:
fd:7c:25:3d:ab:79:2f:57:32:f1:cd:a6:4e:59:78:d5:d8:5a:
b9:e7:be:04:30:27:69:be:d4:5e:fc:5b:01:0a:ea:94:cd:e0:
1d:b8:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:43 2026 by rpki-client