Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206033.roa
File: AS206033.roa (raw, json)
Hash identifier: FG7TlzsJ1l8Q8eWzqhcjyEkqzIsYmgEtSUfyiVi5t34=
Subject key identifier: DD:87:08:05:0B:38:CD:62:63:C8:7F:16:DF:99:7D:AA:8C:F0:A9:DC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 67BB6E002EF7D1E41EEF1FC0EA15430DD6913CFC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206033.roa
Signing time: Tue 10 Mar 2026 13:25:26 +0000
ROA not before: Tue 10 Mar 2026 13:20:26 +0000
ROA not after: Tue 09 Mar 2027 13:25:26 +0000
asID: 206033
IP address blocks: 2a13:9500:6b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:bb:6e:00:2e:f7:d1:e4:1e:ef:1f:c0:ea:15:43:0d:d6:91:3c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 10 13:20:26 2026 GMT
Not After : Mar 9 13:25:26 2027 GMT
Subject: CN=DD8708050B38CD6263C87F16DF997DAA8CF0A9DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:8d:f1:81:44:b6:85:d7:bd:00:93:f6:24:
9a:01:38:e2:29:79:6c:ab:83:d0:8e:af:a0:dd:33:
d5:07:c4:42:73:b3:ca:f7:69:ac:70:3e:92:a1:43:
b3:97:d7:a3:1b:02:97:05:b8:5a:8f:b8:e6:6c:af:
1b:8f:ff:ba:09:a2:90:2e:67:23:4b:b6:5f:a5:a5:
0b:c6:c7:dc:b4:06:20:65:e6:55:8a:eb:1d:d9:0e:
f7:69:20:e6:97:d9:18:4e:b0:ec:ff:be:31:88:0b:
ad:28:f7:00:2a:69:ce:c2:16:f7:56:b6:bc:88:cb:
4e:f2:77:c1:1c:fe:73:c6:7e:7a:a2:45:e0:1b:49:
d9:b7:87:88:eb:17:ab:31:56:aa:97:95:d9:65:4e:
b5:b5:24:c5:55:67:fb:08:54:fa:27:33:20:8f:f5:
43:8e:05:0f:87:e3:01:de:12:6c:76:e1:dc:e3:3f:
51:33:7e:63:1c:c7:7d:7e:8f:63:84:20:55:37:f5:
56:e0:0e:0b:31:f6:bc:4e:55:5a:2c:49:53:4e:1d:
24:04:18:ff:21:b1:61:5e:d9:fe:9a:9f:61:2c:ac:
f6:8b:07:41:52:01:bf:d4:c2:1c:d1:2c:3f:0e:30:
dd:7d:70:18:2c:3e:67:41:27:6f:37:35:d0:b6:75:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:08:05:0B:38:CD:62:63:C8:7F:16:DF:99:7D:AA:8C:F0:A9:DC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:6b::/48
Signature Algorithm: sha256WithRSAEncryption
91:c2:bf:42:c2:c0:5c:73:67:55:1b:64:62:a3:0f:45:c5:d1:
21:f2:62:bb:24:6c:a6:2c:29:09:f6:11:cd:b5:f1:47:1e:fd:
0f:d9:7c:9a:31:42:d7:29:4a:c2:f9:31:54:3f:c5:44:6e:83:
89:4f:0a:75:33:2c:88:65:e0:e2:65:8e:83:86:53:a1:38:25:
3b:a9:7b:00:0a:4b:47:e7:23:c2:c5:11:9c:e3:cb:7c:53:b0:
36:03:cd:1b:8c:64:76:ef:6d:b7:ef:6b:e8:b6:6d:01:98:a1:
7b:47:41:ae:1c:f8:c9:49:a4:61:4a:a1:b5:c3:ee:c6:bb:90:
fa:64:2b:64:23:4b:bb:78:41:fe:e1:10:70:91:1a:1e:5b:26:
f4:66:2b:ce:78:b9:77:37:21:3d:df:a0:ec:b2:be:92:1c:c9:
75:fc:9d:42:28:e4:a1:68:f0:d4:fe:f0:ec:63:cf:34:72:83:
8f:c1:b8:73:2b:26:a4:e8:91:0c:2f:66:f4:88:ee:72:c0:d6:
7a:90:69:86:60:62:6e:81:f2:90:dc:4e:08:a8:12:82:db:b1:
ee:ac:4c:e0:fd:2d:3d:7c:73:c0:4a:73:d7:ab:af:e3:de:c7:
83:77:0d:34:f4:96:49:30:af:9d:b2:dc:cf:9b:7c:d4:bd:a5:
b3:0a:3d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:32:01 2026 by rpki-client