Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206766.roa
File: AS206766.roa (raw, json)
Hash identifier: hrqpJv8+m4Q0KGbTq5BUxL6IYBkEPwxYORXb4QykmVc=
Subject key identifier: EA:A7:1F:5F:EF:E4:A0:F9:BC:A3:A6:B6:A5:9C:1A:83:6E:89:33:CA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5E91FCC8E1933A22DC37A1AC5010734B57793A84
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206766.roa
Signing time: Mon 02 Nov 2026 16:49:39 +0000
ROA not before: Mon 02 Nov 2026 16:44:39 +0000
ROA not after: Mon 01 Nov 2027 16:49:39 +0000
asID: 206766
IP address blocks: 82.38.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:91:fc:c8:e1:93:3a:22:dc:37:a1:ac:50:10:73:4b:57:79:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 2 16:44:39 2026 GMT
Not After : Nov 1 16:49:39 2027 GMT
Subject: CN=EAA71F5FEFE4A0F9BCA3A6B6A59C1A836E8933CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:4c:41:7a:cd:61:68:8e:3d:7e:18:44:37:
84:92:29:7a:f6:85:c0:46:e8:95:71:05:82:8b:ea:
48:67:71:92:f8:cd:8d:5b:59:b2:7e:0f:2b:5e:b5:
71:21:0c:f1:5f:60:2b:52:db:a8:e5:66:ec:ee:5b:
69:fc:6c:33:cc:2f:2c:ec:d4:58:c7:2d:32:8f:77:
f0:30:8e:d2:2e:9a:f8:1e:5e:4e:22:98:32:94:1b:
68:58:6a:77:90:68:c3:4e:10:90:fa:5b:d2:56:ed:
0e:6b:74:49:df:7f:c1:3d:0f:42:54:37:6b:c3:7f:
96:c4:29:55:cc:35:9d:13:29:c4:23:73:d0:e9:db:
86:9d:ad:f1:02:d2:b5:1e:ce:13:1b:f6:dc:59:24:
70:c0:13:b8:94:f8:a3:cb:75:c6:ae:3b:d4:27:01:
82:b2:0a:e7:e4:07:5e:16:96:f3:7e:b8:ed:6f:85:
e0:f3:32:52:4f:81:43:72:57:74:27:e8:b8:38:b5:
80:6b:3e:42:00:4a:82:3d:e0:2b:33:b0:d1:79:79:
2c:ff:94:12:27:32:e6:81:f2:86:60:5c:29:0e:e5:
fe:65:17:13:52:e4:4d:59:d2:a5:85:e2:4a:75:2a:
f8:81:d9:7e:f5:0a:17:ff:c8:23:fe:68:e5:0e:35:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A7:1F:5F:EF:E4:A0:F9:BC:A3:A6:B6:A5:9C:1A:83:6E:89:33:CA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.13.0/24
Signature Algorithm: sha256WithRSAEncryption
16:03:b5:93:aa:8f:d2:10:6c:65:12:a9:67:1e:c3:e6:c3:69:
26:3c:ee:8b:ce:cb:e7:bb:78:80:e3:d2:5d:81:4c:1d:99:44:
32:14:2e:cb:4c:05:bf:7d:dc:ad:02:34:03:e3:8c:4f:68:8f:
95:92:0e:b8:3f:4a:83:f4:01:8c:6a:d5:97:f3:81:a4:60:46:
ee:fb:32:d2:62:79:fc:6c:dc:82:e9:63:c7:9b:91:70:4a:58:
7a:2c:33:58:57:61:d1:23:c5:8c:9e:1d:5b:e6:f6:cd:74:f6:
b9:f0:0e:06:85:a2:b3:14:f9:51:a0:68:af:f6:ba:80:56:a0:
88:20:30:79:8f:82:bd:1d:c5:ce:82:c7:56:35:d5:83:34:1b:
fb:13:c5:4e:3d:82:d4:c4:e4:3e:2b:a8:68:76:98:bc:e4:08:
76:24:b0:65:b2:54:dc:58:49:0b:d1:ab:4f:a9:c7:34:08:fd:
b3:67:29:67:e4:7a:14:b6:ab:21:dc:54:07:63:a0:68:3f:6e:
dd:35:10:89:0b:e3:71:40:1a:e0:45:ff:b0:9f:13:c5:c1:8a:
24:03:b1:c2:07:39:47:c6:89:3c:3d:8c:c5:a6:4b:24:cb:a0:
52:3e:89:3e:6a:23:cc:df:b8:9e:10:c0:3b:b8:09:7e:4e:3d:
51:65:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:23:34 2026 by rpki-client