Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206183.roa
File: AS206183.roa (raw, json)
Hash identifier: EEVR3vLSNkP4H35dqqRnROW7z/2hEULAQBKFVQ6FwGE=
Subject key identifier: 90:E1:48:E3:46:7B:37:8D:41:0A:03:D6:81:76:E8:DE:2D:84:74:17
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0C0D9FDDD7BA5F6E3DD4FFEA2D4B7C7E819CE0BA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206183.roa
Signing time: Thu 07 Aug 2025 10:15:04 +0000
ROA not before: Thu 07 Aug 2025 10:10:04 +0000
ROA not after: Thu 06 Aug 2026 10:15:04 +0000
asID: 206183
IP address blocks: 2a0f:85c1:cc9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:0d:9f:dd:d7:ba:5f:6e:3d:d4:ff:ea:2d:4b:7c:7e:81:9c:e0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 7 10:10:04 2025 GMT
Not After : Aug 6 10:15:04 2026 GMT
Subject: CN=90E148E3467B378D410A03D68176E8DE2D847417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:90:f3:5c:4e:17:86:41:fb:60:0a:99:ce:24:
bb:a0:96:42:22:78:ba:bf:94:c4:dd:f0:cb:f1:d6:
b2:51:27:0c:25:5a:99:06:ae:09:e8:a5:89:ea:fb:
17:26:1b:35:4a:26:6b:09:10:a6:2e:a2:16:46:21:
f9:e9:09:d6:2a:17:16:aa:af:2b:12:e3:b2:1d:4d:
cd:33:a1:5b:aa:2d:d1:db:cf:6f:42:61:cb:63:ec:
99:7b:04:bc:dd:7f:b2:95:77:7c:95:11:39:28:a2:
6c:7c:f5:b9:30:31:8e:d0:4d:2f:71:cd:62:20:d0:
d7:5a:c9:08:14:5d:e9:18:c4:c3:37:99:60:ba:4b:
ff:cd:0c:de:37:af:54:64:5f:24:c1:5c:8f:22:ce:
4d:a9:dc:41:2e:0d:5d:46:5c:fc:e5:fa:ad:7d:cd:
49:eb:39:29:a1:97:0a:3e:61:36:97:bd:06:26:cd:
88:fb:9c:2a:cf:2d:0b:73:e5:1c:0b:bf:19:83:0f:
72:08:f7:85:5c:97:38:99:ef:94:40:46:92:69:1f:
e5:cc:46:0c:fc:93:3c:e6:fa:ee:2e:16:6b:80:22:
c9:16:ef:74:78:f7:61:f1:f9:1b:21:49:b6:da:32:
2e:21:4d:44:1e:e6:30:fd:c5:e3:3e:cc:79:af:69:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E1:48:E3:46:7B:37:8D:41:0A:03:D6:81:76:E8:DE:2D:84:74:17
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cc9::/48
Signature Algorithm: sha256WithRSAEncryption
dc:50:d7:bb:82:ed:c3:75:d8:b8:e4:9e:2e:60:fb:c3:ff:26:
5c:78:38:27:9f:e6:13:90:14:b1:c0:60:7d:2f:6d:12:39:c1:
0b:25:91:1a:69:1d:78:ad:ac:75:32:64:ce:ff:0c:23:81:84:
2d:6a:0f:d7:5f:a5:33:0c:5a:1b:1a:f3:42:4d:19:b0:bb:dd:
26:c9:c6:be:fb:7d:0b:31:a9:42:f0:54:0b:2e:b0:ac:e9:67:
ca:19:05:b2:73:73:bf:81:69:8c:08:e0:68:13:c4:dd:8d:9a:
10:90:fe:74:75:27:de:3a:0a:96:d9:20:04:c0:6d:53:ae:30:
4c:06:55:2b:21:13:c7:c9:0c:a8:8f:01:b7:f5:71:3f:af:33:
0d:5f:09:7b:ec:be:11:2e:ef:40:99:34:8c:92:cc:4e:f2:d3:
19:83:06:7f:fd:a7:81:86:b9:e2:b3:6e:ca:e2:d7:e7:8e:66:
02:c9:e6:fc:08:cb:2b:d4:b6:01:93:40:ca:d1:6d:c7:0a:4e:
da:ee:ad:73:98:1e:10:68:8c:c7:a8:c6:21:26:76:2b:07:17:
c2:18:12:3e:ea:ad:d5:d5:c8:75:3d:f9:3f:11:e9:3b:bf:a9:
bf:0e:70:71:2e:65:27:21:8a:df:2d:09:ef:d3:c6:43:50:37:
19:ed:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:38 2025 by rpki-client