Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206592.roa
File: AS206592.roa (raw, json)
Hash identifier: QYEHvvwmguj51wRXTIjgoIySj92OAz+DUWf10mlDGtc=
Subject key identifier: F0:EB:4D:41:B5:BC:88:A7:47:0F:A9:34:50:CC:8C:EC:F0:BA:FC:8F
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 37EAEC6F640325FCF3CFA529F9E5E36244B5D05E
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206592.roa
Signing time: Mon 22 Sep 2025 18:02:33 +0000
ROA not before: Mon 22 Sep 2025 17:57:33 +0000
ROA not after: Mon 21 Sep 2026 18:02:33 +0000
asID: 206592
IP address blocks: 85.235.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ea:ec:6f:64:03:25:fc:f3:cf:a5:29:f9:e5:e3:62:44:b5:d0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Sep 22 17:57:33 2025 GMT
Not After : Sep 21 18:02:33 2026 GMT
Subject: CN=F0EB4D41B5BC88A7470FA93450CC8CECF0BAFC8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:78:db:33:cc:dc:2c:36:44:3a:40:6c:d0:
86:81:97:bf:93:1b:34:eb:52:6e:d3:51:e4:f4:50:
54:76:f3:07:26:d9:d7:83:5a:8e:89:29:39:0b:27:
b7:17:36:31:1f:6b:50:45:25:ac:95:4a:67:c2:3e:
a9:97:35:49:9f:22:0f:22:c4:88:f9:03:62:8c:14:
dd:c9:62:28:bc:ca:7e:01:29:51:be:0b:07:ef:07:
be:41:02:47:aa:16:3a:54:88:41:4d:f6:c0:12:af:
6a:f3:5e:24:3a:3e:2d:11:1f:7a:53:f2:00:4d:d2:
0a:93:15:e2:64:f6:90:34:3a:46:38:0d:d5:7b:10:
f9:b8:a7:c0:f7:2d:ff:75:ac:18:1e:02:af:f3:73:
4a:6f:74:5d:00:8e:0c:df:08:62:4e:22:95:c1:22:
e9:ae:5d:13:37:e4:07:c2:ad:1d:1d:0e:9e:03:bb:
0c:dc:7e:f4:57:41:c2:fb:40:ce:24:b0:b2:39:1d:
0c:2e:b6:98:4b:b1:cb:56:82:04:44:cb:49:02:35:
23:a9:7c:db:6e:24:14:8b:6d:1d:95:02:4c:f1:86:
2e:6a:d9:3a:b3:5c:9a:49:09:4c:c8:e9:ae:25:ad:
c8:ab:2e:79:81:53:ee:14:18:9c:6c:78:ad:22:98:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EB:4D:41:B5:BC:88:A7:47:0F:A9:34:50:CC:8C:EC:F0:BA:FC:8F
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.72.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8f:25:bf:01:97:99:78:38:ce:2f:26:54:b0:7f:f9:12:05:
1b:3c:b0:a7:f8:5c:ce:ec:69:70:c1:a5:da:61:3b:a1:68:43:
1b:a4:43:2e:72:02:8b:91:78:48:29:77:81:ab:87:f2:16:07:
f4:b6:2b:4d:c3:87:66:10:75:f5:d2:5a:60:09:be:5d:bf:51:
19:b5:d3:e3:f0:29:32:4d:ac:54:91:94:8a:36:d4:03:a0:df:
f2:48:f5:68:d7:2f:a6:a2:72:a8:0d:c8:88:31:ab:24:80:79:
a1:5e:22:2a:7a:65:da:fb:7e:7e:a8:cd:b0:da:79:ae:e2:59:
1b:e1:3d:12:ac:1f:3e:e4:8b:a9:7d:c0:d9:be:8a:f9:9d:4f:
32:01:e2:85:00:69:b6:dd:96:ed:4a:24:ab:dc:f1:4d:1d:6d:
9a:9e:8e:e9:91:20:73:15:38:f8:ce:4e:6b:d6:33:01:50:8f:
33:28:31:26:85:0f:0c:0e:5e:2e:e5:5a:e0:5b:97:d1:87:ca:
d2:30:a2:f3:79:75:07:73:2a:ad:a8:2c:87:87:86:9a:bf:46:
f4:ac:aa:b0:bb:a9:83:01:8f:d6:4d:27:6e:92:10:b7:cf:ed:
61:c0:f7:e6:cf:3e:e9:eb:ee:34:1f:f0:c4:35:7b:8f:e2:8d:
50:18:b5:46
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUN+rsb2QDJfzzz6Up+eXjYkS10F4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTA5MjIxNzU3MzNaFw0yNjA5MjExODAyMzNaMDMxMTAvBgNV
BAMTKEYwRUI0RDQxQjVCQzg4QTc0NzBGQTkzNDUwQ0M4Q0VDRjBCQUZDOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71njbM8zcLDZEOkBs0IaBl7+T
GzTrUm7TUeT0UFR28wcm2deDWo6JKTkLJ7cXNjEfa1BFJayVSmfCPqmXNUmfIg8i
xIj5A2KMFN3JYii8yn4BKVG+CwfvB75BAkeqFjpUiEFN9sASr2rzXiQ6Pi0RH3pT
8gBN0gqTFeJk9pA0OkY4DdV7EPm4p8D3Lf91rBgeAq/zc0pvdF0AjgzfCGJOIpXB
IumuXRM35AfCrR0dDp4DuwzcfvRXQcL7QM4ksLI5HQwutphLsctWggREy0kCNSOp
fNtuJBSLbR2VAkzxhi5q2TqzXJpJCUzI6a4lrcirLnmBU+4UGJxseK0imAMnAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU8OtNQbW8iKdHD6k0UMyM7PC6/I8wHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjA2NTkyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVetI
MA0GCSqGSIb3DQEBCwUAA4IBAQAzjyW/AZeZeDjOLyZUsH/5EgUbPLCn+FzO7Glw
waXaYTuhaEMbpEMucgKLkXhIKXeBq4fyFgf0titNw4dmEHX10lpgCb5dv1EZtdPj
8CkyTaxUkZSKNtQDoN/ySPVo1y+monKoDciIMaskgHmhXiIqemXa+35+qM2w2nmu
4lkb4T0SrB8+5IupfcDZvor5nU8yAeKFAGm23ZbtSiSr3PFNHW2ano7pkSBzFTj4
zk5r1jMBUI8zKDEmhQ8MDl4u5VrgW5fRh8rSMKLzeXUHcyqtqCyHh4aav0b0rKqw
u6mDAY/WTSdukhC3z+1hwPfmzz7p6+40H/DENXuP4o1QGLVG
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:29 2025 by rpki-client