Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206787.roa
File: AS206787.roa (raw, json)
Hash identifier: dd1TggFTG7KV8sR2wAeGPvEBbs8mNwRKKzFZAZHuqb4=
Subject key identifier: 09:6A:08:07:EE:D7:29:5E:C8:19:42:C2:A3:E2:7B:9B:B6:55:19:A1
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 1BEC7D996BBAD14E955996F74BAD0378CB944BBF
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206787.roa
Signing time: Thu 07 May 2026 10:12:15 +0000
ROA not before: Thu 07 May 2026 10:07:15 +0000
ROA not after: Thu 06 May 2027 10:12:15 +0000
asID: 206787
IP address blocks: 176.53.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ec:7d:99:6b:ba:d1:4e:95:59:96:f7:4b:ad:03:78:cb:94:4b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: May 7 10:07:15 2026 GMT
Not After : May 6 10:12:15 2027 GMT
Subject: CN=096A0807EED7295EC81942C2A3E27B9BB65519A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:64:20:4f:de:cf:3c:6f:b8:53:13:3f:b1:
23:34:c4:1d:80:7f:ce:0c:20:15:44:e6:11:b2:f3:
42:f7:4f:0f:e5:ca:df:bd:a8:46:cb:45:f7:f0:cb:
36:fd:90:bb:3d:b0:dd:59:36:19:90:f4:c0:b1:67:
84:5f:c9:ac:63:1a:42:00:d3:65:0d:82:b9:6d:f0:
50:58:bc:2e:84:b5:13:79:06:d5:d3:15:30:a5:36:
70:c4:30:cf:5d:dc:14:40:00:7a:f5:2b:00:b5:1d:
29:ff:ad:c1:ab:ae:bf:9f:d3:59:a9:12:39:17:dd:
e0:63:9e:a0:7e:e3:83:d6:2b:75:f6:bd:0c:e3:08:
9c:64:e0:4a:c6:3c:4e:f4:c3:d9:fb:fa:2e:3b:1c:
1f:b4:05:67:e7:a3:5f:1c:c1:d1:d2:dc:cc:07:ab:
76:d1:71:b6:77:39:12:1f:ef:8f:34:fe:3f:87:7c:
86:17:67:db:03:6b:95:75:4c:c2:12:26:ee:a3:f4:
fa:3c:bb:49:36:4d:ae:5f:b0:15:48:10:25:e4:27:
7b:ce:c1:d6:ae:59:f3:31:50:4e:45:60:b2:84:62:
7e:87:47:e6:6b:69:7b:a2:24:f1:7d:d2:3a:5b:8a:
a9:d1:e1:09:0a:9d:68:70:40:65:be:4a:61:51:78:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6A:08:07:EE:D7:29:5E:C8:19:42:C2:A3:E2:7B:9B:B6:55:19:A1
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206787.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.157.0/24
Signature Algorithm: sha256WithRSAEncryption
53:33:28:b2:1f:f4:1a:4b:26:79:cb:31:4a:4a:32:15:8c:3d:
8c:f9:61:49:23:b6:74:f5:72:e0:7a:c2:37:36:a2:4e:2a:90:
fd:17:76:07:16:fe:0f:4f:2a:e7:d2:05:e8:72:44:0d:01:89:
b0:2f:fd:50:d1:a9:7e:93:74:5a:bd:1c:f9:b0:06:f2:6d:97:
32:a7:f6:ba:c4:ee:08:1c:37:d9:5d:0a:b0:82:dc:ed:8c:ee:
ab:fc:6b:0e:21:1f:7e:70:ca:36:5c:0b:b5:bf:bc:4a:69:ad:
ab:f9:6b:32:7e:e2:c0:dd:2c:d0:2f:06:58:39:06:11:75:17:
ae:f9:41:05:48:b3:d5:af:ba:c7:aa:cd:05:73:2d:d4:50:88:
32:f8:44:c4:ae:c3:b0:cd:a8:a9:bb:98:db:7f:93:da:cf:00:
bd:58:05:bc:ef:b7:63:f2:52:ef:a9:f8:63:49:f4:8b:6d:27:
c1:a4:f5:a4:03:79:7f:1e:3d:16:f9:a1:a6:b1:0d:61:d3:5c:
10:f2:29:e9:fd:6a:7f:f0:8b:53:14:2b:ea:da:2e:0e:1f:1a:
0b:d8:79:90:e5:c3:a6:db:98:03:ba:df:97:00:8e:84:fd:4d:
e9:06:e7:dc:24:c2:86:4c:db:f2:9b:82:ce:79:34:5f:40:00:
44:bd:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:25 2026 by rpki-client