Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS206098.roa
File: AS206098.roa (raw, json)
Hash identifier: Bax7lo4IlCwMitG5qNDZRUNl+gMRjZt55SXvrrpNmJ0=
Subject key identifier: 09:A6:2C:20:6F:1B:10:F4:DB:D4:AD:C7:E5:D1:E5:D5:05:8C:7F:2D
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 66FE68F9558BA580882F69DBAF56136ED0385572
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS206098.roa
Signing time: Fri 13 Nov 2026 07:33:13 +0000
ROA not before: Fri 13 Nov 2026 07:28:13 +0000
ROA not after: Fri 12 Nov 2027 07:33:13 +0000
asID: 206098
IP address blocks: 2a0f:1cc5:6200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 06:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:fe:68:f9:55:8b:a5:80:88:2f:69:db:af:56:13:6e:d0:38:55:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 13 07:28:13 2026 GMT
Not After : Nov 12 07:33:13 2027 GMT
Subject: CN=09A62C206F1B10F4DBD4ADC7E5D1E5D5058C7F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:2c:2b:97:23:53:4d:0f:73:34:ab:b5:d7:
76:07:e4:fb:bc:1d:f0:18:78:9d:45:52:9d:06:2d:
82:23:44:c8:b9:59:13:88:94:f6:25:22:e4:12:1a:
9c:cb:fc:87:a7:96:c9:e9:47:65:20:69:da:c3:26:
74:21:c6:8a:85:f8:02:ba:aa:95:0b:17:1b:e4:56:
f3:4f:76:18:b2:50:de:53:1f:02:47:ff:39:0d:ca:
e0:b4:51:75:9f:28:2d:49:03:dd:f2:74:a7:86:ed:
ee:da:cb:eb:b9:42:1f:48:4d:81:ea:0a:e9:68:81:
43:ae:d3:6d:19:46:c9:63:c8:42:e1:87:bb:da:65:
a8:f9:84:c2:30:8d:09:38:46:57:7b:e8:ca:54:24:
c0:9f:9f:ed:79:f3:77:87:6f:de:71:81:5f:59:12:
a4:ea:f6:55:b0:c8:31:da:83:72:87:67:94:aa:2b:
36:83:ab:6a:25:75:ee:6d:a4:9b:3d:05:9d:89:b1:
51:a5:17:22:fa:b6:48:53:ea:b0:dd:41:46:52:c8:
9e:43:07:ae:c7:58:32:9b:0e:2f:9b:17:b5:ec:e7:
ad:b8:6f:46:f6:f5:91:87:9f:0a:d4:3d:04:b6:bf:
a1:a2:0b:87:b1:92:15:b6:f7:a9:78:90:e0:9c:74:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A6:2C:20:6F:1B:10:F4:DB:D4:AD:C7:E5:D1:E5:D5:05:8C:7F:2D
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS206098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:6200::/40
Signature Algorithm: sha256WithRSAEncryption
02:15:fc:74:cd:e4:08:bb:2f:15:33:fe:21:17:fa:02:57:6e:
91:58:a6:83:08:78:1d:0a:f6:da:c7:19:03:ba:2a:ac:7c:a9:
d4:24:c0:74:4c:25:a4:93:09:91:d4:5d:ec:d6:d9:ff:38:2e:
b6:ad:80:d1:a2:92:c8:e7:80:51:57:4d:ea:31:5d:90:d1:f8:
25:f3:fd:97:1f:d0:25:36:a0:be:2a:46:e7:bf:44:83:32:83:
66:a3:49:df:b0:fe:a2:a2:4c:4e:88:7f:26:41:46:77:a5:6c:
c0:cd:4f:8b:c8:21:f3:1e:bb:33:ae:06:2a:99:bd:15:a9:c6:
70:c2:81:b3:57:93:00:3f:4f:3b:0c:ca:ff:3b:1b:e5:02:25:
fe:5e:52:73:d5:22:5c:9b:34:6a:6f:b3:cb:03:5d:3c:04:3f:
0f:96:c7:a0:dd:9b:ee:a5:4f:07:74:9b:9c:2e:4d:3a:a6:2f:
9d:3e:4e:c2:ee:62:4b:3c:94:75:a1:8e:01:ec:ad:51:97:62:
95:04:84:0b:b2:c8:fa:43:8c:39:68:f5:13:fd:c5:d3:4f:ff:
7e:78:a0:f1:09:50:54:75:d3:ae:b6:07:2b:47:bd:9c:9e:2c:
b9:5c:3d:01:ec:60:9a:49:91:bb:36:01:ab:b8:58:30:a7:52:
4b:af:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:18:08 2026 by rpki-client