Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206069.roa
File: AS206069.roa (raw, json)
Hash identifier: PJdBXzJAkSsYEGqkLzgHtsXrMM2AEf0xAvyxJFNqZXg=
Subject key identifier: 35:BA:9E:90:A9:06:A9:00:2A:FC:A5:93:1D:B9:F3:59:18:4C:6A:71
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5AE5328382A69A9E83E0AF76A42EB610883BC08E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206069.roa
Signing time: Wed 18 Mar 2026 13:43:25 +0000
ROA not before: Wed 18 Mar 2026 13:38:25 +0000
ROA not after: Wed 17 Mar 2027 13:43:25 +0000
asID: 206069
IP address blocks: 2a13:9500:14e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e5:32:83:82:a6:9a:9e:83:e0:af:76:a4:2e:b6:10:88:3b:c0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 18 13:38:25 2026 GMT
Not After : Mar 17 13:43:25 2027 GMT
Subject: CN=35BA9E90A906A9002AFCA5931DB9F359184C6A71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:30:59:36:9b:d8:e1:01:83:4d:d6:bb:bd:
af:7f:73:cd:4b:df:17:36:bf:aa:62:7e:ca:ac:5e:
77:72:d6:04:7f:15:01:3c:48:55:37:5d:2d:7a:5d:
3b:32:65:c7:15:4f:4d:a7:2b:72:4e:71:30:1d:3b:
6a:1d:2b:a3:5f:37:4c:ce:b0:76:b3:ac:27:76:0c:
36:69:35:7b:7f:bb:23:f6:27:c3:5b:69:83:32:70:
c8:3b:c6:bb:4e:1d:04:0a:3e:06:6b:68:ae:5e:95:
cd:33:c0:b7:0a:b5:7b:98:03:df:05:37:b2:de:a5:
97:5a:61:24:d5:d7:36:83:c1:d1:b5:65:bc:cd:a7:
3a:9a:92:9a:23:e5:1a:1e:77:3e:b6:6a:da:6d:09:
ee:53:6a:27:22:00:67:71:1b:aa:31:c1:d5:38:ef:
1d:33:2f:1b:f1:1e:33:79:39:d5:d4:af:9e:fa:af:
51:08:d2:9e:85:89:4d:58:42:81:28:6b:b4:9d:ca:
94:d1:aa:b8:65:1a:93:cf:fb:84:98:3a:9d:f7:5c:
ae:e3:9a:f4:1b:c0:64:7c:e8:9b:3b:2f:59:ed:bf:
a2:10:eb:35:ac:35:c8:fd:50:40:47:80:b3:64:43:
fc:bf:66:a1:8b:21:0a:b7:46:88:9f:be:09:67:c0:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BA:9E:90:A9:06:A9:00:2A:FC:A5:93:1D:B9:F3:59:18:4C:6A:71
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:14e::/48
Signature Algorithm: sha256WithRSAEncryption
13:a3:a3:3c:c2:c2:da:de:87:d3:de:00:9c:ae:82:22:14:f1:
c5:08:76:14:f5:ac:7f:22:ad:f9:0a:e6:43:76:46:9c:60:5a:
b1:50:57:72:eb:2c:68:f2:c2:cd:3b:6b:d1:d9:89:8d:11:87:
23:20:64:09:de:59:8f:d9:6a:34:97:8e:89:02:73:40:84:8f:
3f:4e:a2:02:38:1e:e8:60:37:ce:b9:6f:07:57:ec:03:91:76:
f1:ab:ac:8d:06:9e:49:be:5d:7e:4f:bc:67:48:8a:52:4e:dd:
0d:e2:2b:bf:bf:0a:e1:87:a5:9b:e0:e7:0e:5e:22:a8:53:bb:
44:47:bd:ef:d9:0a:bf:79:b6:2d:4e:43:5c:9e:bd:05:ca:1a:
c2:fe:78:6a:96:e7:af:53:83:65:4d:f7:aa:53:2a:b5:9b:ec:
b6:46:ec:16:06:c1:97:32:d3:90:2e:7f:e0:d5:ba:59:5f:05:
a2:a4:c4:f8:27:ae:3a:41:23:31:96:fa:92:61:dd:5c:ed:20:
f6:52:da:70:81:94:30:90:56:a1:6e:df:98:37:04:3e:dd:d8:
fa:5f:f1:3a:08:19:e1:ff:d8:9b:b1:9b:a3:4d:d6:03:68:6d:
49:8e:29:22:8c:f3:ca:c5:c8:2a:aa:17:cc:ce:2d:29:77:8c:
08:79:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:44 2026 by rpki-client