Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206115.roa
File: AS206115.roa (raw, json)
Hash identifier: ZQwmovZvcbyVBfMELrIr5r8w/MjDCURS09dHTa8YrJY=
Subject key identifier: 64:BD:48:79:6D:2C:03:D9:A4:A2:44:5F:2B:4D:44:53:16:51:A3:BF
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2F300A18F384CDC0E244F1C1536981B670080F06
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206115.roa
Signing time: Sun 10 Aug 2025 00:06:51 +0000
ROA not before: Sun 10 Aug 2025 00:01:51 +0000
ROA not after: Sun 09 Aug 2026 00:06:51 +0000
asID: 206115
IP address blocks: 2a14:7581:3a00::/40 maxlen: 48
2a14:7581:3d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:30:0a:18:f3:84:cd:c0:e2:44:f1:c1:53:69:81:b6:70:08:0f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 10 00:01:51 2025 GMT
Not After : Aug 9 00:06:51 2026 GMT
Subject: CN=64BD48796D2C03D9A4A2445F2B4D44531651A3BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:7c:6a:7b:fc:b8:32:14:75:b4:3d:4d:37:
91:f6:e4:3c:58:82:23:da:93:6f:3f:58:11:30:d7:
a6:01:43:88:84:f4:e7:60:05:ad:7e:01:ee:6b:3f:
6f:a1:a7:6f:37:1a:9c:29:c8:e3:71:5a:d4:60:c9:
63:03:36:a7:70:cb:da:ea:6b:48:2a:eb:4d:fe:c1:
41:6a:99:e6:ef:91:f7:4a:ac:91:eb:c4:d1:53:3c:
18:48:f7:ed:38:c2:3a:ff:6c:97:64:d8:1e:24:63:
6a:8d:7c:48:d7:df:e9:3f:4c:6a:58:49:46:8c:57:
21:89:d2:52:96:57:81:4a:a4:5a:5e:f7:5c:2b:36:
4a:5e:2c:b8:f8:a3:16:36:af:77:fb:cc:7b:72:a8:
f9:5d:f4:99:8d:e8:56:eb:5e:78:e0:9b:00:df:a1:
55:ec:e7:b5:c3:f4:3f:05:29:ee:ae:34:21:2d:b5:
5f:ab:b3:1f:3f:da:31:7d:51:27:5b:8d:8d:2c:0e:
d1:dd:93:ae:9a:15:3e:78:da:6d:85:a8:66:26:56:
5d:67:36:c2:a3:ea:f3:f1:53:1e:39:ed:bd:30:3c:
76:f2:fa:3b:c5:7e:0f:ed:d8:2d:e1:13:40:17:5e:
73:66:38:71:d9:55:9a:34:11:6e:1c:16:03:5b:80:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:48:79:6D:2C:03:D9:A4:A2:44:5F:2B:4D:44:53:16:51:A3:BF
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206115.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3a00::/40
2a14:7581:3d00::/40
Signature Algorithm: sha256WithRSAEncryption
81:5c:75:4c:ca:d3:0c:d6:31:b4:ac:1a:8a:42:20:79:6d:e4:
f8:47:1a:12:f9:33:95:12:ca:e7:7e:e1:af:97:53:b3:32:74:
a4:67:54:47:01:fa:88:1e:64:61:63:76:49:96:10:a1:7f:e2:
42:c1:f4:f4:ee:f3:37:28:86:b0:1d:68:d2:6e:63:67:15:96:
4e:ad:3a:15:2b:2c:ce:e9:93:c6:72:8e:74:21:de:66:ee:ec:
7c:04:e6:ad:24:ff:12:52:58:30:c0:bc:6e:0d:72:aa:6a:e4:
fb:de:06:b0:9f:1c:0d:c3:3c:37:4a:3d:4c:a0:30:7e:18:7d:
14:f2:be:d4:06:5d:db:85:7f:cd:d1:89:75:45:54:78:f7:01:
bf:5a:62:b6:49:aa:0b:bc:a2:09:e6:40:00:21:86:70:aa:66:
fc:d6:d5:c0:13:90:cf:c7:00:f0:a3:d7:c8:52:7a:b5:e1:9f:
60:15:31:53:5b:d7:0a:c5:e9:96:fe:9c:04:ee:bb:b6:43:3e:
bf:1a:d7:2c:54:c7:71:64:f9:45:2c:44:e8:64:d7:f9:0f:7d:
65:79:9c:de:04:6b:5e:90:9e:38:6f:dc:cf:5f:a1:91:75:03:
7a:bf:da:23:ab:85:22:44:33:50:d7:3d:70:33:17:f7:4b:27:
31:b1:6e:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:55 2025 by rpki-client