Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206822.roa
File: AS206822.roa (raw, json)
Hash identifier: Vm8HhrUFoVzQKTDwVyJOe8SlhpkE1+Cm9tVYbMFbbAY=
Subject key identifier: FF:E6:E9:E3:C5:75:5F:1E:13:4A:45:FD:0D:CC:9F:54:AD:62:E0:F0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6FF98A1F35CB5C052115BCB009EE3D3FD1BDC30E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206822.roa
Signing time: Thu 27 Aug 2026 13:08:33 +0000
ROA not before: Thu 27 Aug 2026 13:03:33 +0000
ROA not after: Thu 26 Aug 2027 13:08:33 +0000
asID: 206822
IP address blocks: 178.92.203.0/24 maxlen: 24
178.95.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f9:8a:1f:35:cb:5c:05:21:15:bc:b0:09:ee:3d:3f:d1:bd:c3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 27 13:03:33 2026 GMT
Not After : Aug 26 13:08:33 2027 GMT
Subject: CN=FFE6E9E3C5755F1E134A45FD0DCC9F54AD62E0F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:22:a4:7b:0b:0c:31:43:37:1c:24:f5:c5:
0f:f3:ee:ec:74:a3:45:1c:07:fb:35:63:e4:e2:92:
35:01:db:e7:7f:6a:71:f9:b9:fa:29:02:b7:67:79:
e3:95:5b:ee:6b:bb:d3:71:ed:39:45:be:31:f8:54:
81:30:a3:cc:41:1d:3a:5a:48:73:5a:15:26:2e:25:
e3:26:3e:78:e1:71:00:01:a0:60:74:f7:74:b4:82:
a6:bb:b8:5f:d4:aa:d4:50:56:d9:9d:8b:b3:c5:11:
20:d3:3b:a1:e9:01:85:3c:42:d5:06:f5:fa:62:47:
d8:db:ad:5c:85:01:59:63:35:00:35:db:f8:c6:dd:
76:bd:d5:f8:32:ea:a0:8a:cf:d6:2b:2b:f3:f5:df:
c8:80:bf:ab:c0:61:39:fe:1a:a6:1c:e2:6d:c2:90:
34:80:95:bb:a0:ab:94:89:ee:88:96:18:ac:10:7f:
43:35:92:f4:bd:7f:fb:35:c0:3d:c9:3e:38:99:b1:
db:e3:8f:ee:e9:85:73:6e:37:2e:4c:1a:d3:e6:66:
3e:22:75:d6:55:53:ac:c0:00:d2:5d:0e:f9:30:6c:
4d:95:07:36:27:26:4a:2b:8c:bd:5b:e4:6d:05:af:
07:9e:12:d0:64:dd:00:63:6b:2f:45:8e:d9:4f:42:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E6:E9:E3:C5:75:5F:1E:13:4A:45:FD:0D:CC:9F:54:AD:62:E0:F0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.203.0/24
178.95.234.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e1:12:9c:fb:46:68:8b:3a:e7:2c:20:b9:4a:41:32:c0:77:
0b:6e:de:dc:58:31:8e:54:fc:b1:99:d4:cd:85:04:2d:a5:87:
ee:13:fa:cf:31:84:65:75:96:63:a2:5e:d9:45:1b:e7:56:92:
e8:5c:85:8e:ba:73:61:ea:db:e4:a6:7f:1c:52:06:19:19:f3:
d4:e1:35:5c:21:ef:df:63:05:29:1c:40:40:b5:f4:4f:d4:8f:
b9:b5:e8:b3:7a:56:d9:50:a2:3d:7f:f5:f6:35:76:be:a5:d4:
22:da:44:7f:79:f3:0e:f8:16:d9:95:d3:0d:e9:62:51:10:9d:
13:7a:db:28:e7:b1:3f:a6:e6:9a:f9:17:1e:79:6b:d8:86:e4:
d2:09:41:62:ed:fa:77:3a:0f:41:3b:30:4e:7f:ca:4b:7d:40:
77:41:6c:90:f5:3f:34:f6:da:94:3e:a8:c5:7d:40:1e:be:c4:
10:51:b7:c1:7c:99:a8:33:8b:81:e0:83:db:56:05:1e:59:94:
97:c7:34:1e:0b:e8:ec:08:43:de:7b:b8:96:0c:dc:c6:f7:28:
60:e2:11:4a:0e:dc:b0:06:0f:55:f3:0b:4a:a1:22:24:f0:38:
45:49:4c:86:47:23:ae:d3:a1:da:e2:0f:4e:19:ea:c2:2f:cb:
65:1f:86:9c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUb/mKHzXLXAUhFbywCe49P9G9ww4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA4MjcxMzAzMzNaFw0yNzA4MjYxMzA4MzNaMDMxMTAvBgNV
BAMTKEZGRTZFOUUzQzU3NTVGMUUxMzRBNDVGRDBEQ0M5RjU0QUQ2MkUwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8MiKkewsMMUM3HCT1xQ/z7ux0
o0UcB/s1Y+TikjUB2+d/anH5ufopArdneeOVW+5ru9Nx7TlFvjH4VIEwo8xBHTpa
SHNaFSYuJeMmPnjhcQABoGB093S0gqa7uF/UqtRQVtmdi7PFESDTO6HpAYU8QtUG
9fpiR9jbrVyFAVljNQA12/jG3Xa91fgy6qCKz9YrK/P138iAv6vAYTn+GqYc4m3C
kDSAlbugq5SJ7oiWGKwQf0M1kvS9f/s1wD3JPjiZsdvjj+7phXNuNy5MGtPmZj4i
ddZVU6zAANJdDvkwbE2VBzYnJkorjL1b5G0FrweeEtBk3QBjay9FjtlPQtOzAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU/+bp48V1Xx4TSkX9DcyfVK1i4PAwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA2ODIyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAslzL
AwQAsl/qMA0GCSqGSIb3DQEBCwUAA4IBAQAx4RKc+0ZoizrnLCC5SkEywHcLbt7c
WDGOVPyxmdTNhQQtpYfuE/rPMYRldZZjol7ZRRvnVpLoXIWOunNh6tvkpn8cUgYZ
GfPU4TVcIe/fYwUpHEBAtfRP1I+5teizelbZUKI9f/X2NXa+pdQi2kR/efMO+BbZ
ldMN6WJREJ0Tetso57E/puaa+RceeWvYhuTSCUFi7fp3Og9BOzBOf8pLfUB3QWyQ
9T809tqUPqjFfUAevsQQUbfBfJmoM4uB4IPbVgUeWZSXxzQeC+jsCEPee7iWDNzG
9yhg4hFKDtywBg9V8wtKoSIk8DhFSUyGRyOu06Ha4g9OGerCL8tlH4ac
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:27:21 2026 by rpki-client