Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206226.roa
File: AS206226.roa (raw, json)
Hash identifier: Q9hsvHU4SDVzy+U49YawMRUL43SOVHtbLyZY+i6EjOQ=
Subject key identifier: 7D:96:31:E4:2D:3D:88:49:2F:72:F6:46:72:8E:E5:A8:2C:68:A0:C2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0A87F4670D953FCF7DAFF5FEC2F9AC48EBE2CC67
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206226.roa
Signing time: Mon 26 Oct 2026 20:49:39 +0000
ROA not before: Mon 26 Oct 2026 20:44:39 +0000
ROA not after: Mon 25 Oct 2027 20:49:39 +0000
asID: 206226
IP address blocks: 82.39.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:87:f4:67:0d:95:3f:cf:7d:af:f5:fe:c2:f9:ac:48:eb:e2:cc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 26 20:44:39 2026 GMT
Not After : Oct 25 20:49:39 2027 GMT
Subject: CN=7D9631E42D3D88492F72F646728EE5A82C68A0C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:db:47:de:97:f3:90:7f:80:d4:cf:11:fd:
20:d5:08:3e:75:d7:0b:72:73:97:41:37:19:3c:10:
9e:8f:66:6c:23:78:a3:2c:d8:3a:a7:e1:b8:a8:71:
dd:00:65:8c:09:18:f5:4a:fb:e7:ec:f1:23:3a:a7:
68:3d:dc:e9:77:3a:ff:e2:dc:d4:e0:95:7a:a5:10:
0c:6e:ad:5b:ec:b3:fd:48:4d:2a:cd:45:55:59:10:
6a:41:c1:f5:50:f1:28:21:7b:a2:6b:7a:fa:81:98:
2b:54:4a:db:d4:85:f9:c0:0b:a5:5b:43:be:bd:d5:
00:69:ee:ea:2a:3a:43:aa:d1:f6:ff:41:bc:f8:68:
a7:43:d9:00:32:ba:49:c6:83:3b:9d:4b:7d:c8:dc:
67:2a:e7:84:86:95:05:ad:27:e2:ca:23:c3:49:eb:
40:2c:21:09:d7:d5:ed:86:49:e5:28:dc:78:42:53:
c1:13:72:5d:42:33:fd:7a:33:19:d8:d5:ea:79:77:
b2:26:c0:8a:72:76:26:6f:25:d8:a4:13:c6:94:1c:
95:ff:88:b1:f6:24:3c:1e:40:c5:45:df:d8:19:f3:
f0:dd:46:ac:a3:2d:e8:c0:1f:0f:17:da:51:9f:f9:
b8:34:ce:f5:d0:35:8e:02:34:07:9b:d6:bc:b7:b4:
ff:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:96:31:E4:2D:3D:88:49:2F:72:F6:46:72:8E:E5:A8:2C:68:A0:C2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206226.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.105.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5d:22:ea:2e:ce:13:be:a7:99:bb:ef:3a:4d:b9:13:06:47:
f4:c2:76:b6:a3:79:65:a7:1f:41:be:e4:ae:a9:58:98:cb:80:
05:98:5e:2d:d8:82:3e:f7:e6:0f:16:1a:6b:09:f7:60:b6:ee:
c4:f6:b6:d2:a7:fa:7c:6c:43:bd:63:8d:77:e2:06:01:07:26:
ed:f7:65:ac:77:0b:b2:71:82:c1:2e:7b:57:b7:a6:73:33:bf:
c4:e7:b4:d5:60:3c:b5:02:3d:b2:91:94:27:53:b7:44:13:a9:
3b:2b:4f:ba:19:8a:14:cd:04:09:69:63:2e:62:81:4d:10:62:
cf:92:ea:d7:c8:59:da:1e:63:33:1f:3b:34:01:ac:46:35:27:
12:33:a6:55:31:a5:6d:8a:99:08:38:5c:d4:ed:e4:6c:6f:56:
9e:e9:8a:ad:e8:81:97:9b:39:87:2e:f5:c9:4d:0f:88:af:a4:
92:43:f0:b5:e1:7b:3f:a1:bf:e0:00:fe:76:8f:d5:55:e4:d6:
8d:45:66:1e:8d:95:38:77:7b:56:f2:68:06:21:2e:35:ad:b5:
c5:2f:1f:f2:46:f8:71:5c:c0:65:69:68:b2:85:e6:ac:3f:30:
23:67:57:9c:2d:04:9c:13:26:15:c2:0e:b0:06:29:b5:c6:bf:
9a:30:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:25:05 2026 by rpki-client