Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206446.roa
File: AS206446.roa (raw, json)
Hash identifier: SbQLf/b6igwmhTtj/8rXPfOUDYt5vrQ2PyfF32K1G0A=
Subject key identifier: E4:AC:F5:1A:C2:9A:B5:CE:8C:04:0B:A1:06:6E:91:06:CF:8C:2F:DE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 54AC9286B22C0B3C30F85968E830EECC563BFC4E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206446.roa
Signing time: Sun 03 May 2026 00:47:07 +0000
ROA not before: Sun 03 May 2026 00:42:07 +0000
ROA not after: Sun 02 May 2027 00:47:07 +0000
asID: 206446
IP address blocks: 45.93.46.0/24 maxlen: 24
181.214.135.0/24 maxlen: 24
181.214.214.0/24 maxlen: 24
191.96.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ac:92:86:b2:2c:0b:3c:30:f8:59:68:e8:30:ee:cc:56:3b:fc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 3 00:42:07 2026 GMT
Not After : May 2 00:47:07 2027 GMT
Subject: CN=E4ACF51AC29AB5CE8C040BA1066E9106CF8C2FDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:7d:46:03:ba:f6:84:dd:eb:8c:c1:6c:ba:
6d:67:aa:db:c7:77:9d:ea:53:e8:fc:24:e8:35:64:
30:d6:ab:36:28:3b:7b:11:3b:4a:e5:81:fe:1c:52:
2f:ba:bb:77:dc:13:3c:1a:18:8b:d8:90:94:05:28:
56:20:58:8a:2b:48:13:d8:6d:7e:83:17:9c:11:0a:
7d:01:8f:f4:05:13:3a:47:8f:82:e4:d5:7d:ac:99:
dd:e5:58:0b:71:6e:0d:99:d1:4e:22:f1:5b:44:0f:
88:46:7e:14:f1:90:ac:e5:ae:9f:16:7a:2f:3e:93:
d7:d7:08:14:af:6f:a0:78:46:8d:9c:b5:ad:24:9c:
5d:76:a1:05:d7:4c:09:cc:8c:c4:7e:8b:0d:3b:ca:
f1:9c:92:a6:1a:f9:82:ed:90:2c:2f:9c:6c:ee:ae:
db:83:a4:cd:5e:67:d4:77:47:98:49:64:ed:2b:10:
c8:4a:72:14:8e:fc:18:45:61:8f:37:7e:e6:cf:1e:
db:67:3d:9f:6c:27:79:f9:de:b6:11:dc:69:c2:fb:
d6:c9:fe:64:81:f7:e3:c2:e0:8f:bd:60:72:88:f2:
98:b7:04:2e:83:b2:b1:01:74:ea:ed:6b:de:7e:1e:
f3:47:92:1f:49:28:c7:c7:4f:8e:de:1b:f7:e1:c8:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AC:F5:1A:C2:9A:B5:CE:8C:04:0B:A1:06:6E:91:06:CF:8C:2F:DE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.46.0/24
181.214.135.0/24
181.214.214.0/24
191.96.229.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d7:69:77:9e:60:3c:15:8b:88:d2:40:88:ae:2b:2e:07:e5:
86:6b:d9:f7:0b:07:92:50:15:3a:11:1e:64:9b:c0:55:73:26:
f4:c8:63:c9:4e:60:05:3c:7f:9b:c4:6d:e5:b7:03:97:81:58:
78:42:ec:aa:26:7d:f5:92:c9:54:cf:85:0e:31:d6:95:68:bf:
10:44:ff:a7:9b:aa:7f:80:45:0c:27:25:d4:d5:b0:c0:36:58:
b6:ed:ff:24:33:a4:15:c3:18:ff:58:e2:60:c7:70:d7:78:fb:
33:33:3b:a3:23:aa:5e:5a:43:78:12:5f:a6:99:83:2f:c7:80:
63:89:06:ac:74:56:62:ec:82:f9:8a:10:9e:1d:0d:ad:56:ee:
21:19:1d:92:e2:ff:d6:8a:a4:e6:ea:e4:28:72:59:02:eb:e9:
34:30:84:83:f4:0e:ae:8c:e5:fc:3c:fe:73:b9:59:6c:e6:a0:
dc:3e:f4:19:fe:bd:db:54:44:d9:96:36:d5:61:b9:22:55:85:
e2:86:93:29:60:1c:4a:b3:8c:69:c4:b9:cf:2d:de:f2:b4:41:
4f:70:4c:74:86:c8:51:36:51:0f:d3:eb:f7:4c:77:e3:4d:fc:
fe:73:cf:9b:0b:42:61:50:ec:8e:c9:f4:e3:66:2e:ec:e1:f0:
bd:a1:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:42:26 2026 by rpki-client