Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206526.roa
File: AS206526.roa (raw, json)
Hash identifier: lyuZ137YqtrBh9ylj8dzbhq9q/w47dPn2IWtQ5GQzlo=
Subject key identifier: B1:2E:2E:E5:8F:FB:0B:55:DD:D8:E8:AF:ED:BE:89:EA:5E:7F:33:CF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 34E096E71A4729B61CA59C8E727949385B5C8B64
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206526.roa
Signing time: Tue 21 Jul 2026 15:08:56 +0000
ROA not before: Tue 21 Jul 2026 15:03:56 +0000
ROA not after: Tue 20 Jul 2027 15:08:56 +0000
asID: 206526
IP address blocks: 2a0f:85c1:ce5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e0:96:e7:1a:47:29:b6:1c:a5:9c:8e:72:79:49:38:5b:5c:8b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 15:03:56 2026 GMT
Not After : Jul 20 15:08:56 2027 GMT
Subject: CN=B12E2EE58FFB0B55DDD8E8AFEDBE89EA5E7F33CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:46:b4:eb:51:42:29:2c:17:21:32:62:a7:
4f:d8:85:b9:fc:d7:7b:9f:60:da:7c:1c:e6:b3:05:
1d:a5:93:63:89:3c:33:09:0d:b2:88:fe:65:5d:7d:
18:1a:d4:e3:9a:59:73:ca:3d:a7:04:53:67:03:89:
a0:51:f3:d9:58:9a:00:a1:fc:9d:d5:c6:56:50:ec:
c4:5a:2b:2d:a2:41:18:5f:84:a3:15:36:2c:a3:02:
36:61:8c:4f:11:e7:d0:46:52:a9:82:74:68:4e:9f:
3b:1b:70:25:5e:cc:e1:c1:c3:c1:2d:33:09:5d:29:
13:d6:35:bb:54:88:d0:10:41:97:fa:16:6a:99:15:
db:6c:3e:c6:6e:c7:3c:ee:c8:83:55:e2:18:27:22:
e2:20:3a:42:ac:a9:57:ff:dc:a8:50:e2:c0:ec:cd:
1f:88:69:f9:78:3f:37:fb:b1:6b:98:a9:c8:c9:55:
56:f2:2e:c8:fe:3b:15:ae:51:8c:87:91:25:fe:67:
c4:e1:25:ff:28:0f:df:3e:93:be:3c:40:d3:a0:60:
f8:84:2a:16:c5:39:17:07:ea:30:b9:b5:b9:af:0c:
84:67:11:bb:c7:35:dc:09:07:2f:47:d3:87:33:44:
d1:3f:de:d6:10:a0:65:9e:c4:1c:31:4a:91:1e:3a:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2E:2E:E5:8F:FB:0B:55:DD:D8:E8:AF:ED:BE:89:EA:5E:7F:33:CF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ce5::/48
Signature Algorithm: sha256WithRSAEncryption
82:a4:55:e0:8c:6e:39:81:56:25:b5:63:ca:4d:ac:27:64:a1:
a7:0d:a8:13:44:d1:ba:9b:74:8f:7f:ca:ec:11:85:38:c5:61:
2d:6f:b5:09:8f:fd:1f:c8:49:54:bf:1b:bc:59:8c:52:38:37:
26:1f:4f:1a:37:c2:ae:e8:af:6b:eb:0c:87:8b:cf:8b:dd:bb:
22:c3:45:18:00:02:de:83:bc:a7:ea:7d:7e:55:9e:f1:63:9c:
91:11:b4:e7:a4:35:cf:9c:e4:3d:f1:24:fe:6c:fd:78:8f:a3:
e6:c5:af:8b:e5:cd:b3:9f:c1:40:c0:82:d7:18:6f:48:42:70:
f1:5c:10:dc:c1:8c:dd:16:e0:a4:d6:28:da:f6:e0:07:f0:c9:
fc:c9:ab:c6:bd:f0:34:31:2d:9f:cb:3f:c8:f6:a5:88:ba:df:
19:b7:a7:c5:80:de:c8:98:3c:f2:a2:0a:72:1a:b4:02:69:4f:
0f:a4:3d:66:7d:59:23:ef:d9:9c:d2:74:7e:d1:38:84:ba:a4:
65:39:4e:3c:5d:9c:84:7b:d7:6c:35:d7:62:f2:9d:4b:47:9b:
38:c6:e7:eb:ce:f1:dd:38:10:70:71:39:66:27:e0:e4:ed:90:
39:46:cc:45:96:16:04:5b:80:ca:68:7f:e5:ad:c7:42:b4:5b:
24:3a:a2:d3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUNOCW5xpHKbYcpZyOcnlJOFtci2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA3MjExNTAzNTZaFw0yNzA3MjAxNTA4NTZaMDMxMTAvBgNV
BAMTKEIxMkUyRUU1OEZGQjBCNTVEREQ4RThBRkVEQkU4OUVBNUU3RjMzQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NEa061FCKSwXITJip0/Yhbn8
13ufYNp8HOazBR2lk2OJPDMJDbKI/mVdfRga1OOaWXPKPacEU2cDiaBR89lYmgCh
/J3VxlZQ7MRaKy2iQRhfhKMVNiyjAjZhjE8R59BGUqmCdGhOnzsbcCVezOHBw8Et
MwldKRPWNbtUiNAQQZf6FmqZFdtsPsZuxzzuyINV4hgnIuIgOkKsqVf/3KhQ4sDs
zR+Iafl4Pzf7sWuYqcjJVVbyLsj+OxWuUYyHkSX+Z8ThJf8oD98+k748QNOgYPiE
KhbFORcH6jC5tbmvDIRnEbvHNdwJBy9H04czRNE/3tYQoGWexBwxSpEeOrYHAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUsS4u5Y/7C1Xd2Oiv7b6J6l5/M88wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA2NTI2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQzlMA0GCSqGSIb3DQEBCwUAA4IBAQCCpFXgjG45gVYltWPKTawnZKGnDagTRNG6
m3SPf8rsEYU4xWEtb7UJj/0fyElUvxu8WYxSODcmH08aN8Ku6K9r6wyHi8+L3bsi
w0UYAALeg7yn6n1+VZ7xY5yREbTnpDXPnOQ98ST+bP14j6Pmxa+L5c2zn8FAwILX
GG9IQnDxXBDcwYzdFuCk1ija9uAH8Mn8yavGvfA0MS2fyz/I9qWIut8Zt6fFgN7I
mDzyogpyGrQCaU8PpD1mfVkj79mc0nR+0TiEuqRlOU48XZyEe9dsNddi8p1LR5s4
xufrzvHdOBBwcTlmJ+Dk7ZA5RsxFlhYEW4DKaH/lrcdCtFskOqLT
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:53 2026 by rpki-client