Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206064.roa
File: AS206064.roa (raw, json)
Hash identifier: 2lgKg6Z73KLyRzcZeewELLJgLkyFQjvIZWoGyIb93lc=
Subject key identifier: 4A:54:16:E2:7C:2C:B4:EF:27:94:A7:A5:97:66:DD:D6:68:86:62:B4
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 1FFD45031A67DF7E149CB18F270D62D46B778464
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206064.roa
Signing time: Wed 20 Aug 2025 15:16:49 +0000
ROA not before: Wed 20 Aug 2025 15:11:49 +0000
ROA not after: Wed 19 Aug 2026 15:16:49 +0000
asID: 206064
IP address blocks: 176.53.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:fd:45:03:1a:67:df:7e:14:9c:b1:8f:27:0d:62:d4:6b:77:84:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Aug 20 15:11:49 2025 GMT
Not After : Aug 19 15:16:49 2026 GMT
Subject: CN=4A5416E27C2CB4EF2794A7A59766DDD6688662B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:82:90:b6:12:ff:52:46:94:20:f5:f2:c0:f9:
b7:e3:33:05:c0:56:8e:90:c8:7b:9e:98:7a:e9:2a:
14:e8:d7:d7:c3:d1:00:c4:e7:2a:94:7c:6b:3c:df:
ae:6e:84:98:9c:a6:8c:52:fb:a8:a7:25:a1:99:ef:
88:63:8d:a6:e8:01:96:af:13:45:53:2a:32:0a:f4:
25:fb:86:66:be:85:94:42:92:8c:b3:07:45:87:74:
98:04:3c:a2:2d:d2:e3:0d:f9:91:a1:9a:0c:65:5d:
97:ee:d7:dc:85:b0:60:ea:90:3f:09:0e:a7:c1:5d:
a3:93:14:35:25:9e:6f:e9:5c:2c:4f:0f:6d:8d:3a:
78:53:3e:8b:af:17:d2:5c:7e:b2:2d:1c:1b:55:e1:
1d:01:7a:ec:47:11:3f:4b:f1:c2:b9:40:35:38:47:
9c:4e:79:7a:f8:5d:37:d4:eb:c4:7a:6d:26:07:03:
3b:f5:2a:42:f9:59:27:de:5d:2c:cd:8e:d8:d9:82:
28:7f:a6:2f:60:f0:77:ec:28:07:47:7e:34:96:2f:
75:d3:c4:a0:f2:aa:6b:b7:78:ca:9d:ae:c1:b3:98:
e8:5d:b7:93:a7:87:33:25:0e:8c:18:07:ff:8c:19:
d9:ae:41:70:b0:0f:6b:32:12:63:01:32:ba:1b:1c:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:16:E2:7C:2C:B4:EF:27:94:A7:A5:97:66:DD:D6:68:86:62:B4
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206064.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.171.0/24
Signature Algorithm: sha256WithRSAEncryption
79:03:f2:9e:91:bf:00:a2:a1:4a:19:58:59:b8:8f:f7:15:99:
9b:8c:44:a2:99:7a:36:55:fe:55:d2:1b:94:b2:20:c3:e9:89:
bf:79:04:0f:fb:85:6a:d7:37:1f:04:3d:6d:5a:4f:df:7e:7b:
21:88:36:86:b7:ef:b3:95:a4:6d:1b:98:68:6d:66:ea:7d:1d:
99:72:94:3e:ba:33:a5:64:eb:14:c8:5b:e7:98:67:f1:a4:98:
1d:4d:60:68:57:97:87:e0:d1:4c:9c:69:8d:d3:1e:0c:00:c7:
ae:94:ac:4e:3f:52:bc:48:60:58:60:aa:96:f7:66:ce:3b:8d:
e6:77:88:82:f5:87:4e:c4:25:25:41:c8:02:e7:3a:fb:c0:fe:
c8:10:fe:e1:6e:38:ed:fc:aa:65:25:d0:c4:dd:6d:92:06:ed:
5f:72:48:84:87:b8:62:ff:14:3a:fd:92:b5:27:bb:df:6b:d9:
9c:c9:8d:00:2a:3c:16:96:9d:8d:5d:e0:c7:e1:d8:f7:a2:d4:
f2:33:dd:9c:68:9f:25:87:4a:41:72:b6:6f:bb:77:97:50:b2:
f4:2d:8e:5b:54:d1:05:cc:18:63:b5:71:55:54:35:2e:a3:9e:
c6:b4:f1:e3:ce:5c:32:9f:15:08:f0:bf:2f:e0:48:a8:82:49:
a1:dd:3b:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUH/1FAxpn334UnLGPJw1i1Gt3hGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTA4MjAxNTExNDlaFw0yNjA4MTkxNTE2NDlaMDMxMTAvBgNV
BAMTKDRBNTQxNkUyN0MyQ0I0RUYyNzk0QTdBNTk3NjZEREQ2Njg4NjYyQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkgpC2Ev9SRpQg9fLA+bfjMwXA
Vo6QyHuemHrpKhTo19fD0QDE5yqUfGs8365uhJicpoxS+6inJaGZ74hjjaboAZav
E0VTKjIK9CX7hma+hZRCkoyzB0WHdJgEPKIt0uMN+ZGhmgxlXZfu19yFsGDqkD8J
DqfBXaOTFDUlnm/pXCxPD22NOnhTPouvF9JcfrItHBtV4R0BeuxHET9L8cK5QDU4
R5xOeXr4XTfU68R6bSYHAzv1KkL5WSfeXSzNjtjZgih/pi9g8HfsKAdHfjSWL3XT
xKDyqmu3eMqdrsGzmOhdt5OnhzMlDowYB/+MGdmuQXCwD2syEmMBMrobHIHFAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUSlQW4nwstO8nlKell2bd1miGYrQwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjA2MDY0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWr
MA0GCSqGSIb3DQEBCwUAA4IBAQB5A/Kekb8AoqFKGVhZuI/3FZmbjESimXo2Vf5V
0huUsiDD6Ym/eQQP+4Vq1zcfBD1tWk/ffnshiDaGt++zlaRtG5hobWbqfR2ZcpQ+
ujOlZOsUyFvnmGfxpJgdTWBoV5eH4NFMnGmN0x4MAMeulKxOP1K8SGBYYKqW92bO
O43md4iC9YdOxCUlQcgC5zr7wP7IEP7hbjjt/KplJdDE3W2SBu1fckiEh7hi/xQ6
/ZK1J7vfa9mcyY0AKjwWlp2NXeDH4dj3otTyM92caJ8lh0pBcrZvu3eXULL0LY5b
VNEFzBhjtXFVVDUuo57GtPHjzlwynxUI8L8v4Eiogkmh3TvI
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:29 2025 by rpki-client