Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: oC9+vEkl6zj/oz6Pjc5lr9vT7UlrhmHQN4mWDjGjBoE=
Subject key identifier: 30:80:6C:5A:AD:AF:4D:6D:89:93:97:44:B7:13:A4:A3:6F:C3:EA:01
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3CE852476864C5AF7EB90D9B57EB815031822C8C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206092.roa
Signing time: Tue 30 Sep 2025 15:55:07 +0000
ROA not before: Tue 30 Sep 2025 15:50:07 +0000
ROA not after: Tue 29 Sep 2026 15:55:07 +0000
asID: 206092
IP address blocks: 141.11.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e8:52:47:68:64:c5:af:7e:b9:0d:9b:57:eb:81:50:31:82:2c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 30 15:50:07 2025 GMT
Not After : Sep 29 15:55:07 2026 GMT
Subject: CN=30806C5AADAF4D6D89939744B713A4A36FC3EA01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:fa:01:8e:98:4a:23:34:48:39:58:78:0d:
bc:66:54:ae:06:ab:12:93:e3:5b:de:b5:ac:55:e4:
6b:af:7f:55:35:4e:d2:da:6a:ed:a4:58:1e:97:14:
7c:79:3c:46:c9:ee:12:94:58:28:f9:3e:e5:35:be:
6d:ac:4c:41:0a:73:9f:9e:9a:f7:fb:f5:32:d8:a9:
a4:4d:f8:da:b3:3a:52:79:d5:b4:7d:a1:83:15:46:
6d:1f:c6:fb:58:9f:fa:49:61:9b:b9:13:3f:75:38:
64:86:6d:c0:19:24:9f:82:ef:e9:03:7e:6e:bb:22:
0c:88:48:bf:21:cd:d6:97:05:db:51:d8:0e:73:37:
e7:a5:ac:b3:7b:8b:15:41:82:95:19:9c:ef:2e:b5:
5b:8e:bf:dd:0e:a0:13:c4:b1:e1:5f:cb:4d:4e:7b:
b1:c0:b8:42:1e:5e:50:f2:70:85:aa:03:51:cb:b2:
0d:d8:73:32:54:d0:96:62:76:8a:2a:0e:b6:80:94:
5c:20:42:98:1e:70:20:0b:49:0f:81:90:bd:8e:b7:
d1:24:3c:1f:bd:f4:f1:8b:24:4a:d0:3f:52:ff:85:
22:90:c8:93:08:dd:d8:7c:5d:2a:90:7e:3f:6c:15:
d6:60:63:64:89:e4:85:6d:d7:8b:b3:dc:15:1e:b5:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:80:6C:5A:AD:AF:4D:6D:89:93:97:44:B7:13:A4:A3:6F:C3:EA:01
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:3b:64:ff:9e:a4:41:c6:b5:32:e4:9e:fe:94:d6:c4:5b:f6:
67:2d:44:5d:8c:bf:f8:97:88:3d:92:3c:2e:0f:8b:ab:22:36:
04:e9:4f:1c:ef:a2:6a:35:d0:22:be:b3:ac:be:21:1c:48:cd:
12:34:83:31:24:4e:1b:b9:33:ee:d5:37:88:5b:4f:dc:1f:54:
6b:2f:2d:19:ba:fd:b2:eb:66:b2:b1:f6:2d:5b:2e:0a:12:f8:
e3:9e:3a:14:d5:88:b8:12:0d:86:41:75:c0:1d:21:1e:e6:f8:
74:50:55:40:8f:52:01:cf:ea:ba:59:66:53:dc:fb:e8:04:f3:
59:16:91:31:52:c2:5c:e4:0f:e0:c8:49:46:ec:85:15:56:0a:
8c:7b:81:96:c0:b5:4e:d7:69:ec:bb:12:97:62:4e:c1:6a:b6:
4f:42:15:bc:6e:c4:3e:c0:27:8c:4e:08:c5:64:6e:71:f7:53:
49:7a:33:1a:15:c8:fb:e8:24:6c:ba:90:eb:22:86:4d:53:b8:
1a:08:2b:ff:e3:d9:33:2e:de:3c:7e:ce:d9:06:7e:0d:c8:38:
6b:c3:64:35:21:9d:4c:2a:ae:c4:16:07:2f:2b:11:56:5f:d5:
77:47:e4:43:9f:01:e6:1f:1d:58:2a:a2:9c:ef:c9:7b:cb:91:
5b:d9:fb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:20:21 2025 by rpki-client