Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206119.roa
File: AS206119.roa (raw, json)
Hash identifier: pFY/ajFLC2teiu0iiFYh9pDAIDKKgwL5dWEP+4i+MyM=
Subject key identifier: 4A:D0:7D:E2:09:26:62:21:B0:3B:35:5B:02:40:FA:F8:04:52:9C:ED
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6543DC0725619ABA93D28CC1E3146E4485F674C2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206119.roa
Signing time: Sat 02 May 2026 15:47:07 +0000
ROA not before: Sat 02 May 2026 15:42:07 +0000
ROA not after: Sat 01 May 2027 15:47:07 +0000
asID: 206119
IP address blocks: 2a13:9500:79::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:43:dc:07:25:61:9a:ba:93:d2:8c:c1:e3:14:6e:44:85:f6:74:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 2 15:42:07 2026 GMT
Not After : May 1 15:47:07 2027 GMT
Subject: CN=4AD07DE209266221B03B355B0240FAF804529CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:07:04:a4:0f:27:21:81:12:94:d1:ab:62:
19:30:70:a0:4b:f2:20:3f:c5:a1:bd:15:7d:dc:98:
2f:8a:3a:e5:3b:83:53:72:cb:6e:ee:0c:e0:dc:e6:
f5:dc:08:26:2e:b0:3e:6a:e4:69:9c:71:47:56:d5:
55:0c:39:32:39:65:55:2f:b5:ed:db:22:65:e9:96:
80:22:d4:29:eb:36:de:31:00:14:b2:01:90:c4:fe:
fe:15:b2:7e:87:fc:99:7d:85:16:dc:6f:fe:57:d1:
1b:4b:d6:42:14:8b:3d:eb:54:b8:f0:ec:10:87:ec:
07:4b:37:80:87:48:34:b5:dc:7e:0f:73:6b:b3:51:
20:0d:24:11:17:cf:10:0d:e1:93:55:54:e9:da:23:
87:79:b8:4f:61:fe:6f:da:21:62:df:2b:43:f1:74:
42:73:53:e9:1b:85:42:87:6f:03:76:6f:25:fe:7f:
29:1c:08:53:32:54:22:9d:2d:8d:c0:bf:0c:46:8f:
53:3a:96:b7:f8:92:dd:32:f0:29:a9:dd:df:5c:9a:
52:c6:1e:01:66:5a:55:53:89:53:f4:aa:ef:be:7f:
ec:d0:94:6e:8e:cf:c2:89:79:cd:48:2b:70:5b:11:
b3:a0:a8:0e:f2:3c:0c:a5:de:a9:04:3a:0f:20:88:
78:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D0:7D:E2:09:26:62:21:B0:3B:35:5B:02:40:FA:F8:04:52:9C:ED
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:79::/48
Signature Algorithm: sha256WithRSAEncryption
0b:e7:ec:3c:af:32:23:47:c3:13:d6:2c:c0:78:53:c9:80:13:
b5:96:90:40:ed:49:d5:56:1e:19:9f:41:d6:a8:e1:79:5a:0c:
11:b3:fd:f7:4b:ac:b6:df:90:94:4e:09:e5:c7:f5:b9:64:6b:
27:fe:b4:1b:e8:19:7f:44:2a:7b:83:3d:2d:17:6f:a9:9d:38:
9a:7d:d9:8a:0c:92:57:4c:79:e4:1b:2a:86:f9:f4:d6:90:5a:
67:9f:9f:14:2b:02:e7:66:3e:44:c1:17:6f:d2:85:75:6e:b2:
c3:d5:ad:c9:7c:9f:2c:62:75:ba:36:e4:10:e9:f2:eb:ac:2c:
3c:ac:23:d9:1c:b6:71:f0:a7:02:1e:8f:04:11:b1:2f:f3:d1:
e6:8a:c1:8e:cd:e3:5f:1c:2b:de:23:bd:87:aa:c5:f3:67:e4:
79:94:b6:97:57:0b:00:1a:dd:04:b0:a1:5d:d1:f1:99:b7:62:
c3:5f:f0:53:9a:7b:d8:bf:cd:53:e4:f0:cf:3d:f2:34:ab:a8:
37:9f:5f:5d:16:44:69:02:be:d0:6b:85:07:b7:03:d6:a1:2c:
4d:11:bf:8e:85:8e:25:55:50:55:c7:e9:9c:fc:91:67:d0:06:
9c:f8:91:8b:bc:e8:74:7d:57:91:0e:e5:86:0c:d8:b4:ba:24:
9d:e1:24:c1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUZUPcByVhmrqT0ozB4xRuRIX2dMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MDIxNTQyMDdaFw0yNzA1MDExNTQ3MDdaMDMxMTAvBgNV
BAMTKDRBRDA3REUyMDkyNjYyMjFCMDNCMzU1QjAyNDBGQUY4MDQ1MjlDRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwwcEpA8nIYESlNGrYhkwcKBL
8iA/xaG9FX3cmC+KOuU7g1Nyy27uDODc5vXcCCYusD5q5GmccUdW1VUMOTI5ZVUv
te3bImXploAi1CnrNt4xABSyAZDE/v4Vsn6H/Jl9hRbcb/5X0RtL1kIUiz3rVLjw
7BCH7AdLN4CHSDS13H4Pc2uzUSANJBEXzxAN4ZNVVOnaI4d5uE9h/m/aIWLfK0Px
dEJzU+kbhUKHbwN2byX+fykcCFMyVCKdLY3AvwxGj1M6lrf4kt0y8Cmp3d9cmlLG
HgFmWlVTiVP0qu++f+zQlG6Oz8KJec1IK3BbEbOgqA7yPAyl3qkEOg8giHg9AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUStB94gkmYiGwOzVbAkD6+ARSnO0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA2MTE5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAB5MA0GCSqGSIb3DQEBCwUAA4IBAQAL5+w8rzIjR8MT1izAeFPJgBO1lpBA7UnV
Vh4Zn0HWqOF5WgwRs/33S6y235CUTgnlx/W5ZGsn/rQb6Bl/RCp7gz0tF2+pnTia
fdmKDJJXTHnkGyqG+fTWkFpnn58UKwLnZj5EwRdv0oV1brLD1a3JfJ8sYnW6NuQQ
6fLrrCw8rCPZHLZx8KcCHo8EEbEv89HmisGOzeNfHCveI72HqsXzZ+R5lLaXVwsA
Gt0EsKFd0fGZt2LDX/BTmnvYv81T5PDPPfI0q6g3n19dFkRpAr7Qa4UHtwPWoSxN
Eb+OhY4lVVBVx+mc/JFn0Aac+JGLvOh0fVeRDuWGDNi0uiSd4STB
-----END CERTIFICATE-----
Generated at Wed May 13 02:45:07 2026 by rpki-client