Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206016.roa
File: AS206016.roa (raw, json)
Hash identifier: jJRD9oc8jnS7ajtzZ+/x5CmX9/ox7dGpKwvubJqvCSE=
Subject key identifier: AC:38:E2:4B:63:41:84:72:D8:1F:2E:E5:F8:77:A0:87:BA:CC:30:34
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 014E76E3A95CB50AF6A9A43FFDF09E88DD0D79E2
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206016.roa
Signing time: Mon 20 Jul 2026 21:08:52 +0000
ROA not before: Mon 20 Jul 2026 21:03:52 +0000
ROA not after: Mon 19 Jul 2027 21:08:52 +0000
asID: 206016
IP address blocks: 2a0f:85c1:cd7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4e:76:e3:a9:5c:b5:0a:f6:a9:a4:3f:fd:f0:9e:88:dd:0d:79:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:52 2026 GMT
Not After : Jul 19 21:08:52 2027 GMT
Subject: CN=AC38E24B63418472D81F2EE5F877A087BACC3034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:f9:1c:21:01:34:ed:e6:49:a5:12:20:e9:
2b:96:5a:6b:62:a8:57:b3:6d:6e:82:5e:ef:83:58:
cb:60:ff:92:b1:8d:45:26:0c:db:aa:5b:28:cc:be:
c2:eb:80:b3:6d:b6:be:52:c7:a9:40:58:bf:1b:5a:
68:81:05:5f:14:d7:6e:8d:a8:6d:a7:d7:45:04:9e:
47:b3:15:91:f2:3d:db:ca:c6:d0:a5:98:81:fe:62:
3a:22:59:b8:aa:2e:2e:3a:a6:34:43:94:22:e4:48:
5b:bc:10:1f:a0:d6:20:76:42:75:fe:f0:44:d5:ed:
23:2b:52:a4:3d:81:65:ae:a0:e7:c4:7e:60:ac:90:
87:28:56:03:9c:e0:2e:9c:17:e5:15:9e:94:06:2c:
7a:7a:6d:d0:01:50:a9:7d:4e:61:3f:ee:10:0c:38:
5b:78:a1:1d:50:37:de:0d:2a:0b:25:37:83:58:2b:
2b:45:83:1e:a4:43:8b:12:87:7b:ad:76:b2:04:7c:
7b:d5:ef:3f:a6:70:8c:bd:ea:4f:57:e3:87:1c:68:
80:ef:16:49:a8:64:1e:6d:56:3a:e1:e9:56:b7:7c:
e7:5a:c7:e7:69:6c:a6:b2:14:73:c3:39:2f:3c:fb:
a9:d0:d8:98:dd:ae:c6:bf:88:9a:b8:b1:9f:04:b6:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:E2:4B:63:41:84:72:D8:1F:2E:E5:F8:77:A0:87:BA:CC:30:34
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cd7::/48
Signature Algorithm: sha256WithRSAEncryption
16:92:67:8d:48:fd:6f:16:51:30:ef:53:81:8b:76:c2:86:1b:
49:b2:11:60:5e:92:54:b7:6c:a7:8b:6b:f0:0d:8b:1b:23:70:
81:2b:44:0e:65:9c:ee:16:f3:ea:39:1f:6f:9d:76:de:cc:bf:
d6:f7:e0:3c:02:08:d9:1d:0e:61:77:07:26:94:6f:cb:b4:82:
c8:b3:cb:f7:e0:b5:7c:bd:3d:e2:76:5b:8b:7e:32:e8:25:df:
9e:a2:85:d7:14:62:b7:c5:f0:f3:32:b0:1c:8c:2e:63:79:d6:
48:56:e8:ac:ae:7d:af:84:58:0d:bd:84:f6:34:bd:af:c0:fe:
26:03:58:b2:dc:18:73:77:cc:66:69:af:83:ca:a7:40:fb:ca:
f9:34:e5:d6:f5:57:b4:8b:5b:78:b6:c9:37:ed:98:c6:0a:70:
25:d5:b3:21:e8:86:32:f5:74:76:f0:cd:37:22:a0:72:62:c2:
18:f7:ac:30:7e:5f:73:31:c5:d1:c2:6f:5d:6d:a3:6c:91:b0:
02:e2:59:58:4f:ba:78:ef:21:f3:77:c5:d8:78:e6:e1:05:ca:
bb:da:d7:db:7a:a0:fb:88:0b:f1:0c:a5:10:27:86:e6:e4:8c:
2a:93:1a:f8:5b:6f:0d:07:46:62:3e:ca:08:63:e1:31:14:1d:
1f:34:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:57 2026 by rpki-client