Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
File: AS206735.roa (raw, json)
Hash identifier: vqoRKZ7k7qf1bP3yUW3FBSABIo9aMuCVhFCvlmwWoOI=
Subject key identifier: DD:59:D0:88:B7:BC:CB:FF:C4:96:ED:BD:F9:71:A8:34:BE:7D:AB:52
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 50E40ED1013555CC7E1B37AC1ED11435B21FC89C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
Signing time: Mon 06 Oct 2025 21:51:49 +0000
ROA not before: Mon 06 Oct 2025 21:46:49 +0000
ROA not after: Mon 05 Oct 2026 21:51:49 +0000
asID: 206735
IP address blocks: 141.11.52.0/24 maxlen: 24
141.11.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e4:0e:d1:01:35:55:cc:7e:1b:37:ac:1e:d1:14:35:b2:1f:c8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 6 21:46:49 2025 GMT
Not After : Oct 5 21:51:49 2026 GMT
Subject: CN=DD59D088B7BCCBFFC496EDBDF971A834BE7DAB52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:52:5f:47:12:18:e7:2e:ae:18:ac:fd:e5:
a4:5a:ae:ae:fc:99:c0:98:3c:2e:8e:64:c0:be:2a:
89:8c:3a:5d:7e:e0:d1:da:bd:7b:68:6c:77:f9:46:
05:38:cf:ce:14:fd:8d:4b:7b:95:ff:7e:25:df:1f:
a4:eb:16:43:e8:63:86:ca:4f:2e:0a:fb:2f:97:b5:
ae:c7:30:43:55:19:95:40:97:49:11:62:a7:1e:90:
12:b9:28:c4:51:3e:ed:6b:9a:56:41:1e:16:f7:6f:
81:e6:a8:23:19:d1:79:26:5f:60:de:13:97:30:6f:
c4:23:fc:c0:6d:7d:8b:f7:b4:93:6b:4b:1e:b9:0c:
44:12:87:78:80:4c:c2:7c:9b:07:2e:70:41:47:57:
a5:2a:3a:5c:27:43:1a:00:21:d3:80:5a:75:3c:f8:
b4:5b:ab:3f:96:80:53:75:1f:79:ce:33:95:3b:f8:
5e:77:e9:3b:de:64:5f:ae:0c:6d:6d:cb:10:7a:d2:
50:51:f0:ec:7e:07:bf:58:5f:96:c5:24:4f:d1:f3:
56:7d:82:d8:c8:55:54:f4:7a:0e:2a:a6:af:ef:bd:
c0:bc:e2:36:da:76:88:dd:71:ef:72:ce:db:29:15:
e9:04:b8:9e:44:77:d1:e0:cf:3a:93:74:9a:ba:df:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:D0:88:B7:BC:CB:FF:C4:96:ED:BD:F9:71:A8:34:BE:7D:AB:52
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.52.0/24
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
17:fa:00:ef:1d:81:dc:09:ca:c0:5f:db:8d:1c:3d:b9:b8:46:
00:c8:45:ff:6d:2e:ed:4e:7a:26:d9:d3:9e:5b:fc:b2:71:68:
c4:6a:a3:46:b1:9e:e1:b1:ab:56:f6:f2:8b:87:d5:f0:72:f4:
e8:b8:ac:de:97:a8:b5:22:fa:23:37:8a:42:86:0e:f1:9c:1d:
c4:4f:31:ee:20:c4:7b:dc:7f:23:a0:58:08:81:e5:ac:7e:53:
88:c8:0e:da:ae:cd:c0:1b:17:91:a2:7c:87:0f:7c:63:00:4e:
2c:b0:32:d2:01:c6:a6:d8:04:c7:11:77:8d:21:e2:55:70:0b:
10:ef:76:fc:2d:b3:11:74:e7:55:d7:ce:0a:15:47:90:17:fb:
36:3f:0f:9e:d2:66:cf:d1:02:b1:4a:69:a1:12:ed:49:ea:a8:
6a:9c:60:a8:fb:d6:76:6e:bc:31:03:6c:d1:b7:e6:ba:19:a3:
4f:f0:c5:72:e8:13:93:3b:e2:ba:90:c2:db:45:ad:e1:a9:61:
da:5b:ff:29:c7:f4:95:a0:a5:63:41:bf:00:51:60:ad:b5:1e:
09:cc:cb:0d:04:84:41:f6:d7:78:90:a8:a1:43:1a:43:b5:81:
b5:88:cf:4a:ee:62:83:ca:b5:86:e5:64:14:23:e6:83:2f:0e:
a3:04:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:27:53 2025 by rpki-client