Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: ltPfDpnkPLf3/bkYub2vdiG/Y5NmLJJhl7EavD9YerQ=
Subject key identifier: 6E:65:0E:BD:D8:B0:67:B8:D1:C3:FB:BF:7C:C0:C4:4C:D4:D3:C9:73
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4C79DAB440C2FBA1F13AE158461A6187177A43B5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
Signing time: Mon 16 Mar 2026 05:46:48 +0000
ROA not before: Mon 16 Mar 2026 05:41:48 +0000
ROA not after: Mon 15 Mar 2027 05:46:48 +0000
asID: 206092
IP address blocks: 146.103.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:79:da:b4:40:c2:fb:a1:f1:3a:e1:58:46:1a:61:87:17:7a:43:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 16 05:41:48 2026 GMT
Not After : Mar 15 05:46:48 2027 GMT
Subject: CN=6E650EBDD8B067B8D1C3FBBF7CC0C44CD4D3C973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:36:c4:7e:2c:86:9d:92:e8:e3:44:ec:53:
d6:d4:2c:be:9c:94:84:db:1a:55:55:dd:92:6c:0d:
81:c4:00:1e:0e:af:d9:e8:95:59:50:bf:7b:08:1b:
76:09:46:56:07:3b:81:98:d5:6a:d3:e7:21:c7:d7:
79:7d:bc:8e:0d:41:c6:08:a2:28:70:80:8d:ed:7e:
9f:2e:b7:5a:73:9d:48:56:fa:58:2f:cc:4e:bc:29:
fc:23:d0:c7:59:db:38:43:1d:1e:f0:5b:7c:e3:db:
b4:02:f9:df:f4:0d:ca:a2:20:f0:0b:21:de:a0:ab:
43:ba:8c:62:15:b4:16:63:86:bc:a3:ce:4c:b1:bc:
25:2d:90:9e:b6:5c:ef:0b:2a:27:8b:05:d9:71:ed:
42:dc:57:9f:da:0d:fa:ee:2d:21:9b:ce:a1:4a:cd:
a3:45:71:2f:fc:95:20:5a:d1:8e:53:b4:5c:61:f2:
ad:e7:4c:aa:85:53:ae:8b:1b:77:14:f7:0b:bd:91:
74:13:1a:14:dc:3f:bc:fa:b6:30:7b:10:1a:f9:44:
72:4f:c0:e2:58:cc:86:b9:28:0b:db:b6:20:44:fd:
c5:06:35:1e:fb:f8:39:a9:d1:90:17:ba:7e:d2:d8:
69:3b:15:8c:1a:5b:ae:bd:5f:ed:c4:d4:99:59:0f:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:65:0E:BD:D8:B0:67:B8:D1:C3:FB:BF:7C:C0:C4:4C:D4:D3:C9:73
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.39.0/24
Signature Algorithm: sha256WithRSAEncryption
81:72:2e:1e:c8:39:c4:07:ce:bd:b8:22:e9:11:f4:aa:cc:47:
6b:3b:c6:d3:a1:a3:51:03:89:f8:4e:b2:5a:76:aa:db:0f:27:
bd:7e:08:ce:a2:cb:a6:b4:83:d9:cd:ac:49:64:24:09:e2:8a:
57:c8:a6:39:b0:46:43:39:36:be:1a:79:43:40:0b:94:13:dc:
49:f1:e1:6c:09:9c:47:fc:be:2f:d6:d5:43:93:3c:99:f5:cf:
ea:71:ad:9c:b1:88:f8:b1:3a:ae:e3:73:ea:37:dc:0f:51:7e:
fa:61:4a:a9:fd:db:34:92:62:cd:75:eb:e3:b1:65:e6:bd:44:
6a:7f:57:f6:57:83:d3:20:30:ea:9e:fe:d5:4a:62:ea:c9:74:
76:7f:e5:0b:f4:96:c4:8b:21:26:ea:dc:e2:47:d7:bc:8d:ca:
47:49:b9:5b:4f:45:d9:9c:a4:33:5f:36:53:18:d1:8d:7f:ef:
eb:37:56:ad:d3:49:7b:ad:55:9b:9a:22:09:b8:a3:91:2a:17:
8a:3b:5c:87:8f:cc:64:48:8f:68:66:1b:e1:44:8a:e8:eb:57:
25:6a:ad:9f:94:72:8e:16:ab:7f:63:4b:5d:f2:6c:12:be:3b:
5b:c2:14:b9:30:a9:83:57:5e:70:44:37:78:8d:2f:e3:a4:ad:
a9:bc:f3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:48:47 2026 by rpki-client