Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206069.roa
File: AS206069.roa (raw, json)
Hash identifier: AiLQUaY+L1xX4rBA8uT6bKjmrxsx08oSLAVlV5/jEoY=
Subject key identifier: 4A:F6:A0:6E:D0:D2:5C:17:51:1C:8E:8A:E3:C1:D5:DC:C4:26:7D:2B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 40B6AD6249539D3CCC266A3D11B726532A7ECD2A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206069.roa
Signing time: Mon 26 Oct 2026 10:30:59 +0000
ROA not before: Mon 26 Oct 2026 10:25:59 +0000
ROA not after: Mon 25 Oct 2027 10:30:59 +0000
asID: 206069
IP address blocks: 82.22.26.0/24 maxlen: 24
82.29.38.0/24 maxlen: 24
84.75.179.0/24 maxlen: 24
2a13:9500:14e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b6:ad:62:49:53:9d:3c:cc:26:6a:3d:11:b7:26:53:2a:7e:cd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 26 10:25:59 2026 GMT
Not After : Oct 25 10:30:59 2027 GMT
Subject: CN=4AF6A06ED0D25C17511C8E8AE3C1D5DCC4267D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:54:e8:f6:fc:59:85:b9:c3:19:47:2e:c5:
a1:a4:04:26:83:7e:91:0f:1d:a2:7d:17:c1:e3:ba:
6f:0e:fe:81:66:c5:75:71:93:f3:cf:54:c8:b9:b8:
5f:e2:df:3a:41:6c:2e:44:1b:f7:1f:38:e2:b5:2e:
21:14:a2:ea:c6:89:f1:66:ac:5c:b8:87:61:c3:78:
e8:5b:78:38:84:a4:97:58:87:59:82:02:a6:ba:39:
5c:b1:e3:0a:27:0a:37:e2:c9:0f:2d:01:87:73:e2:
c2:34:a4:71:67:58:5d:60:25:17:d8:a2:5a:1a:24:
a8:38:da:e7:df:a9:e5:2c:48:85:75:ce:52:99:67:
bd:7f:6d:93:50:5d:23:65:48:1f:15:cf:db:ed:22:
02:a5:1c:40:72:4c:c2:0b:0a:ed:b3:b4:7d:25:77:
48:0a:2e:69:c1:c8:f1:9a:5a:65:94:41:08:72:bb:
c3:bd:59:7f:4c:27:f2:48:5c:b4:b1:3b:17:a4:ce:
11:3f:b8:12:23:95:d8:d4:b4:2e:02:28:e8:cf:1a:
c6:6e:f2:13:16:e3:44:e2:aa:a2:6c:b3:46:22:fa:
f8:4a:0c:a3:80:74:0c:46:89:7f:7f:16:b1:e5:c1:
e8:4b:0b:5c:41:65:92:4f:1a:4c:9c:b4:c8:ad:89:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:A0:6E:D0:D2:5C:17:51:1C:8E:8A:E3:C1:D5:DC:C4:26:7D:2B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.26.0/24
82.29.38.0/24
84.75.179.0/24
IPv6:
2a13:9500:14e::/48
Signature Algorithm: sha256WithRSAEncryption
2e:89:11:2a:f7:22:55:6a:47:02:f0:02:10:3f:7a:55:7f:8f:
9c:f4:1b:a4:3c:dd:ef:bf:fd:0c:ad:89:55:73:31:95:9b:2e:
93:19:b0:f2:4d:de:08:d5:a0:67:e6:4f:cb:07:de:bb:e0:41:
82:25:a6:7e:53:66:4c:ef:77:dd:2c:43:e9:3c:ed:d5:30:c6:
20:fb:41:74:b8:19:fb:16:75:f1:91:79:d8:c3:3e:e3:2d:e0:
9d:62:0f:f6:d5:75:78:16:a4:00:12:05:3e:27:33:1c:d5:97:
f5:39:e8:c7:7a:f4:f2:58:fe:c4:c0:60:ee:77:d6:60:ab:89:
d9:04:ae:54:bd:4d:4f:1a:99:1a:c4:ff:c9:e8:da:15:7e:18:
38:87:6f:30:be:82:5f:bf:d7:09:bd:59:de:4c:a2:df:a6:fa:
ea:49:a6:1d:3c:9a:0b:cd:bc:f9:29:e1:8b:d9:d2:55:7e:49:
5b:b2:89:86:c9:34:7f:7a:fe:5b:bf:33:15:c3:76:63:01:21:
21:3b:a5:a4:43:37:16:09:23:22:50:46:d8:75:e8:36:2c:33:
7d:a3:35:a7:f0:6c:8c:46:58:52:a4:68:3d:97:62:da:2f:a3:
67:24:bc:1c:2a:2f:9a:22:e3:a3:7e:a4:86:89:34:86:e5:7e:
61:43:30:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:21:02 2026 by rpki-client