Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206016.roa
File: AS206016.roa (raw, json)
Hash identifier: Nk39L9BGAyKcmBoNr7BWKwPSDEdYM7SsWqCqFGzhkxw=
Subject key identifier: 18:57:41:C7:76:FD:CD:E5:5B:A7:4D:08:86:B0:8B:70:76:97:BF:77
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6CCF5E84EA76683F23C3A59A02BE8EDE819C024D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206016.roa
Signing time: Mon 18 Aug 2025 20:53:50 +0000
ROA not before: Mon 18 Aug 2025 20:48:50 +0000
ROA not after: Mon 17 Aug 2026 20:53:50 +0000
asID: 206016
IP address blocks: 2a0f:85c1:cd7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:cf:5e:84:ea:76:68:3f:23:c3:a5:9a:02:be:8e:de:81:9c:02:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 20:48:50 2025 GMT
Not After : Aug 17 20:53:50 2026 GMT
Subject: CN=185741C776FDCDE55BA74D0886B08B707697BF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:e3:c3:af:34:c7:60:24:73:dd:59:2b:ed:
12:89:ed:5a:bd:84:d8:af:ef:e7:b7:b8:ca:de:4a:
09:ce:2e:de:0c:1d:35:77:06:1f:6d:f8:50:4d:97:
a1:bd:77:76:5a:69:ee:60:d1:b5:df:80:23:d6:84:
2a:22:b4:ac:6a:b7:18:4b:00:ad:47:7b:4e:11:5f:
e7:0b:85:f4:f7:2e:61:c3:15:26:51:f7:42:41:46:
38:45:b2:de:7c:38:06:d1:12:6e:16:10:0e:82:ac:
58:97:9a:61:8d:2b:88:5d:63:85:c1:a2:fb:2f:8a:
82:f3:c5:87:43:b0:c3:34:8c:0e:98:51:01:7e:1d:
1d:07:e6:fb:17:b8:fd:fd:4c:e1:e1:a1:f0:d2:c3:
fb:0b:e5:1a:83:08:b5:0f:c2:f3:70:6b:48:52:45:
33:e6:e1:d0:79:28:74:03:c8:b4:21:e2:f9:34:89:
e2:da:e6:b7:27:b7:6a:50:a4:98:84:d9:04:a0:01:
6b:35:22:ad:ec:e6:31:60:7b:96:c2:db:20:1f:3f:
db:5b:dc:4b:06:0d:da:9a:56:45:70:a8:6d:70:b1:
3b:ed:20:bf:03:31:11:e6:c2:8b:9c:67:e0:0a:07:
79:89:73:47:8c:99:b0:ba:11:b7:57:ca:c1:fc:f2:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:57:41:C7:76:FD:CD:E5:5B:A7:4D:08:86:B0:8B:70:76:97:BF:77
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cd7::/48
Signature Algorithm: sha256WithRSAEncryption
c2:bd:d9:a4:d0:8a:e9:78:98:d3:0a:50:b1:36:2c:dd:a8:d5:
70:f6:92:78:2f:af:71:00:35:c5:c1:2e:9d:4f:6d:27:ff:7e:
ad:02:46:3c:0f:f5:b7:a3:22:c0:d4:be:00:0a:c6:4b:8b:57:
d0:db:c8:57:1b:bd:a1:8e:32:c0:55:d4:5d:3a:fd:be:4a:1d:
d2:73:9e:a3:d4:2f:e9:fc:74:58:63:b1:b5:97:a2:b7:e8:e8:
63:57:a3:5f:5d:13:d9:0b:63:94:24:d1:56:38:dc:6e:9b:5b:
cc:f7:11:72:17:d6:2e:9b:98:97:cf:55:70:b0:d4:ab:6f:e0:
71:8b:a5:4c:aa:09:8a:a3:79:af:0e:60:8b:75:95:53:dd:4f:
35:55:76:52:54:94:24:a5:eb:f6:46:f1:bf:b2:b2:8a:a6:3b:
9f:55:ec:5f:1d:89:92:14:c4:e4:f1:25:04:7c:63:ae:ec:53:
34:8c:d9:46:56:63:27:2a:9c:53:bb:13:0a:48:34:09:80:c1:
ef:c8:88:a2:5d:d6:43:87:74:d9:8b:47:20:d3:f3:02:1b:6b:
04:fc:e0:0b:a7:b8:7a:ec:3a:95:84:d3:af:fa:fe:59:21:27:
39:57:84:3b:a2:93:e5:41:a0:45:1d:46:83:16:2b:ff:51:0d:
e8:3f:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:19 2025 by rpki-client