
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206030.roa
File: AS206030.roa (raw, json)
Hash identifier: HqfjMMqLEm7BTvJtxg2/NK7iYIQzIzhoKM16kFnV7/g=
Subject key identifier: BD:6D:4A:9E:81:77:35:2C:96:7B:88:E1:62:B0:B1:1D:47:EB:7E:FA
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7B5F7EECA86C890CD4AF6AFB45CA931003F089DF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206030.roa
Signing time: Thu 07 Aug 2025 10:17:02 +0000
ROA not before: Thu 07 Aug 2025 10:12:02 +0000
ROA not after: Thu 06 Aug 2026 10:17:02 +0000
asID: 206030
IP address blocks: 2a0f:85c1:cd3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5f:7e:ec:a8:6c:89:0c:d4:af:6a:fb:45:ca:93:10:03:f0:89:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 7 10:12:02 2025 GMT
Not After : Aug 6 10:17:02 2026 GMT
Subject: CN=BD6D4A9E8177352C967B88E162B0B11D47EB7EFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:6e:ba:b9:3d:8f:51:44:33:6d:e0:c4:d0:
15:8e:47:6b:84:41:09:14:2c:17:7d:3c:30:c9:f2:
63:4d:fc:3c:cb:31:77:42:69:62:fb:ab:14:a5:64:
ad:b5:62:70:91:21:5d:a8:3c:9d:e3:93:e8:3d:8d:
62:c2:3b:9f:4b:d9:8a:86:88:dd:b2:cd:e3:49:b5:
97:f6:8a:c2:44:8e:d6:56:a6:04:f1:e5:e1:d9:e0:
36:4b:de:c9:92:41:bc:c2:dd:c8:02:4b:71:ee:b2:
a8:ff:b2:d2:28:08:df:83:c7:a6:83:ac:ac:2d:1b:
a2:6d:8c:5c:b5:2f:2c:30:4f:0f:c5:d3:65:56:60:
97:bc:23:99:c7:9a:a4:a7:95:e9:2d:9d:97:b0:98:
2a:2a:65:82:f5:0a:97:18:7e:0a:fb:c0:9e:86:c0:
cd:b2:b8:d6:af:d9:31:d5:ea:81:40:5a:e5:14:c0:
34:11:c5:f4:0d:92:a4:75:0d:e1:19:4b:f3:da:83:
80:ad:1a:12:c0:3e:66:dd:05:f3:6f:53:56:07:a8:
a0:b7:41:81:f1:a0:3d:da:3b:6a:0d:2b:f8:86:ae:
77:fd:c7:d0:d5:02:b9:9a:29:2d:de:2b:9b:25:df:
c9:37:2d:13:f5:38:46:d1:ec:b9:93:71:f6:ef:ba:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6D:4A:9E:81:77:35:2C:96:7B:88:E1:62:B0:B1:1D:47:EB:7E:FA
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cd3::/48
Signature Algorithm: sha256WithRSAEncryption
d7:07:02:c3:8a:e9:7d:a9:2f:86:4e:e9:8f:0b:a4:38:ca:3d:
94:8a:d3:6f:24:83:da:b8:c9:11:82:49:e1:cb:54:91:2d:a3:
eb:6c:d3:f2:b2:e3:ac:75:2a:6b:5d:a3:d5:bb:00:de:16:3f:
30:1e:6f:f5:2a:0c:8e:43:e6:6a:9b:1d:f2:b5:0e:67:b5:3a:
54:4c:9f:ef:0b:93:1b:cb:1c:18:e3:e2:74:90:d5:44:49:6f:
54:c5:78:7a:6e:3c:3d:78:5b:48:70:97:27:ea:cf:02:40:05:
9f:c7:cf:96:bd:57:ad:6e:81:96:4f:d6:c4:ea:5b:e8:cc:a9:
29:02:14:05:83:35:0d:2e:c0:fb:98:5c:88:e8:ab:7c:c9:f0:
61:cb:18:93:99:44:96:c1:3a:fe:ea:e9:50:c9:6d:8e:2f:29:
6d:a1:8e:74:0e:f7:61:66:6c:9e:e6:f9:51:49:14:e4:27:0d:
13:d0:0d:b0:9b:60:a2:6c:8b:8d:bb:da:d4:d3:ed:aa:38:0a:
f3:7e:df:51:6d:62:9b:72:06:0a:14:20:cf:30:51:2f:1f:7f:
0c:0b:46:ec:f3:b4:46:0b:65:b5:60:46:6a:91:19:d8:e9:e2:
b5:a8:7e:96:0f:08:38:e2:2b:a9:b2:92:5a:f3:55:de:c7:af:
d0:d5:b6:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUe19+7KhsiQzUr2r7RcqTEAPwid8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA4MDcxMDEyMDJaFw0yNjA4MDYxMDE3MDJaMDMxMTAvBgNV
BAMTKEJENkQ0QTlFODE3NzM1MkM5NjdCODhFMTYyQjBCMTFENDdFQjdFRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZW66uT2PUUQzbeDE0BWOR2uE
QQkULBd9PDDJ8mNN/DzLMXdCaWL7qxSlZK21YnCRIV2oPJ3jk+g9jWLCO59L2YqG
iN2yzeNJtZf2isJEjtZWpgTx5eHZ4DZL3smSQbzC3cgCS3Husqj/stIoCN+Dx6aD
rKwtG6JtjFy1LywwTw/F02VWYJe8I5nHmqSnlektnZewmCoqZYL1CpcYfgr7wJ6G
wM2yuNav2THV6oFAWuUUwDQRxfQNkqR1DeEZS/Pag4CtGhLAPmbdBfNvU1YHqKC3
QYHxoD3aO2oNK/iGrnf9x9DVArmaKS3eK5sl38k3LRP1OEbR7LmTcfbvuniFAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUvW1KnoF3NSyWe4jhYrCxHUfrfvowHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA2MDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQzTMA0GCSqGSIb3DQEBCwUAA4IBAQDXBwLDiul9qS+GTumPC6Q4yj2UitNvJIPa
uMkRgknhy1SRLaPrbNPysuOsdSprXaPVuwDeFj8wHm/1KgyOQ+Zqmx3ytQ5ntTpU
TJ/vC5MbyxwY4+J0kNVESW9UxXh6bjw9eFtIcJcn6s8CQAWfx8+WvVetboGWT9bE
6lvozKkpAhQFgzUNLsD7mFyI6Kt8yfBhyxiTmUSWwTr+6ulQyW2OLyltoY50Dvdh
Zmye5vlRSRTkJw0T0A2wm2CibIuNu9rU0+2qOArzft9RbWKbcgYKFCDPMFEvH38M
C0bs87RGC2W1YEZqkRnY6eK1qH6WDwg44iupspJa81Xex6/Q1bbn
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:58:08 2025 by rpki-client