
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206023.roa
File: AS206023.roa (raw, json)
Hash identifier: W/NrgKTasClWu2irTxosnEwv5bsRvAEq5V7EGPIleyc=
Subject key identifier: 54:89:DA:5E:BD:F8:09:66:7E:A7:61:43:A9:D5:9F:4D:EB:62:0A:99
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 37B4D094FDDACCD8B8283B899241E7B1F822E31F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206023.roa
Signing time: Mon 18 Aug 2025 20:55:10 +0000
ROA not before: Mon 18 Aug 2025 20:50:10 +0000
ROA not after: Mon 17 Aug 2026 20:55:10 +0000
asID: 206023
IP address blocks: 2a0f:85c1:cd4::/48 maxlen: 48
2a0f:85c1:d10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b4:d0:94:fd:da:cc:d8:b8:28:3b:89:92:41:e7:b1:f8:22:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 20:50:10 2025 GMT
Not After : Aug 17 20:55:10 2026 GMT
Subject: CN=5489DA5EBDF809667EA76143A9D59F4DEB620A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:ed:cd:67:63:c5:a8:67:48:18:7a:db:2f:
9d:29:eb:a3:7a:fb:64:e2:ed:1f:95:0c:a5:cb:06:
a7:3f:e8:a3:96:a2:8e:08:34:6c:c3:bc:6a:20:91:
41:d9:88:df:ae:6f:23:6d:bb:c1:11:41:36:2d:2c:
45:57:6b:dd:10:dd:e7:4c:3f:49:45:61:d7:d4:3f:
72:e6:15:ea:52:51:07:43:de:29:1e:2a:35:0e:ce:
0c:95:07:81:3f:c0:fc:df:a8:d8:9a:3b:44:63:6d:
ed:15:7a:92:27:b1:54:ad:5d:96:32:07:7b:12:a6:
ff:ca:fb:17:bf:b3:fd:a6:18:aa:2f:5c:fe:e2:0c:
08:39:1b:1f:60:3e:bd:df:7d:7e:df:10:4f:51:fe:
d2:f3:c4:78:e3:bf:ba:85:69:e4:58:09:0b:8c:bd:
e5:46:cf:8c:86:1f:94:83:4a:80:c1:16:5f:2d:ba:
95:a8:c0:28:23:36:0b:54:56:44:14:64:07:41:f4:
e0:dc:32:77:b2:57:39:a9:22:1f:33:11:05:fb:8b:
1b:d0:4a:87:56:b0:bb:39:1a:39:47:5a:04:d6:b3:
ca:c0:de:a6:e2:e2:40:1f:8d:4e:e8:58:66:53:f1:
88:49:d9:29:ce:af:14:0f:5b:92:e1:86:ed:73:e8:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:DA:5E:BD:F8:09:66:7E:A7:61:43:A9:D5:9F:4D:EB:62:0A:99
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cd4::/48
2a0f:85c1:d10::/44
Signature Algorithm: sha256WithRSAEncryption
a3:b6:a8:92:cf:b3:eb:1d:c7:d3:37:ba:76:08:65:a1:c6:0f:
25:ff:af:e9:18:8b:04:0c:47:12:f2:5e:f0:30:0a:6f:8b:e4:
c6:91:b6:8e:30:68:90:3d:00:02:05:cd:fa:94:f9:1f:28:65:
2f:70:44:58:f6:59:f9:0d:ee:15:08:7e:20:0d:be:79:17:8b:
29:ac:17:50:94:41:5f:26:84:4b:59:68:4d:34:10:5a:ef:b8:
2c:0c:cb:05:4d:3b:48:03:9e:f5:d7:0e:67:40:50:63:fa:c1:
2d:f6:a5:84:65:50:0e:23:73:32:42:8f:ce:a5:80:6f:bb:56:
ea:28:7b:64:39:72:1a:92:0d:e9:88:16:a3:03:6b:b4:d6:7f:
34:e7:ff:88:c6:08:c2:5c:98:c3:ee:26:19:f7:35:aa:e0:27:
88:d0:26:0b:80:f2:36:e1:2a:44:a1:50:cb:34:b6:8c:ff:e0:
77:76:09:0b:b0:c8:15:b4:9a:b6:e9:8b:db:84:73:85:e5:ac:
04:4d:f7:86:f7:98:76:db:2b:f3:41:49:0b:f8:19:13:6f:07:
f6:eb:ad:0f:62:da:7a:31:02:82:77:1a:03:2b:a8:b7:80:39:
38:14:25:6b:c9:30:0a:53:e7:23:f3:f2:e1:10:a9:e5:ba:84:
ee:7b:ef:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:15 2025 by rpki-client