Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206675.roa
File: AS206675.roa (raw, json)
Hash identifier: i+Wzfb6OVTL0E53huAz4aOqk7bHN3qgIkWYyBoIMb10=
Subject key identifier: 2C:D9:12:7B:41:D1:46:05:1C:72:D3:08:1F:FA:DD:52:AC:79:79:CD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 482884DF8E8C7A5484E60D439F716FFD7CE89D74
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206675.roa
Signing time: Mon 09 Nov 2026 00:05:51 +0000
ROA not before: Mon 09 Nov 2026 00:00:51 +0000
ROA not after: Mon 08 Nov 2027 00:05:51 +0000
asID: 206675
IP address blocks: 82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
178.83.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:28:84:df:8e:8c:7a:54:84:e6:0d:43:9f:71:6f:fd:7c:e8:9d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 9 00:00:51 2026 GMT
Not After : Nov 8 00:05:51 2027 GMT
Subject: CN=2CD9127B41D146051C72D3081FFADD52AC7979CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:e7:5c:a0:68:c2:28:ca:15:76:9f:32:4e:
4f:cc:30:84:83:12:11:24:b1:0b:34:83:a3:2e:d1:
c6:65:b7:2f:91:27:9b:2c:c6:1d:8a:fa:3c:7b:4c:
db:e3:1d:ff:06:5d:47:00:e4:5b:28:76:b3:0d:ec:
3e:21:b5:65:16:9b:2d:03:02:d4:52:03:02:69:0e:
82:fb:4b:06:2f:e8:8e:6a:c0:12:8f:dc:8f:34:9c:
4d:f9:dd:b0:b4:85:8d:6b:5e:c5:93:11:82:6e:57:
17:20:dd:e5:79:e3:3a:d1:87:40:ce:41:d8:25:e3:
54:e5:9b:3a:04:4d:89:34:d9:e8:22:c8:b7:f8:95:
f8:f4:a1:47:da:39:56:18:d9:7d:bd:a5:92:c9:5c:
5b:0a:39:a3:3b:83:f2:62:26:99:fb:5c:f0:b9:f0:
a0:11:a7:7a:62:97:6a:04:12:34:fc:65:87:0c:85:
21:d9:47:e1:a5:ae:92:4b:73:f3:96:cf:d2:c7:e7:
c9:6b:38:73:99:95:4b:57:1e:a0:43:6d:e8:69:e5:
d8:3c:0f:0c:9f:25:09:90:42:32:af:92:ed:d8:3c:
ea:59:cd:71:51:79:6b:eb:02:80:0f:cc:77:85:de:
63:09:c3:af:06:2a:44:26:b3:7e:7a:f5:3f:44:e4:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D9:12:7B:41:D1:46:05:1C:72:D3:08:1F:FA:DD:52:AC:79:79:CD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
178.83.82.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:b5:4a:8e:4f:35:dc:e2:fd:76:c7:1f:3d:bf:3a:9c:56:33:
ab:10:50:ca:0d:47:ff:17:72:fd:a9:86:77:a9:9b:c8:a0:bd:
4b:fe:cc:82:e5:bc:dd:d1:f6:df:78:79:67:53:3b:d0:73:d6:
85:b7:e9:f1:30:1b:fb:37:91:e7:3d:0f:0a:4b:2f:a0:55:ef:
45:88:74:c8:ae:91:3b:e3:cf:25:69:a1:43:b4:6a:68:cd:63:
17:54:8f:67:6a:35:84:2f:bf:50:38:9d:94:7d:4d:de:fc:f7:
84:e3:6d:a4:38:b6:b4:a5:72:27:6d:4c:04:4c:d3:18:f6:47:
d3:65:75:e2:f0:74:ad:bb:6f:8f:02:4b:c9:87:9f:4c:8c:7f:
59:82:78:16:89:a8:54:72:fc:e2:a4:51:2a:d0:a8:0f:f3:34:
82:bb:82:be:d9:55:74:dd:cc:be:37:b5:d6:05:5e:e3:9b:15:
5e:8f:66:4b:9d:c9:69:bb:ed:7c:50:33:41:b2:1f:a8:01:41:
09:b3:7b:e7:72:27:2c:32:64:8b:02:34:81:dc:c9:d4:23:e8:
a1:95:4b:92:0c:5e:88:c0:78:87:fe:04:7d:e0:e7:6a:48:7c:
69:bb:7d:d4:68:03:1a:7f:0f:33:d5:0c:d3:13:48:73:50:a8:
41:e4:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:11:36 2026 by rpki-client