Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
File: AS206735.roa (raw, json)
Hash identifier: dK60dfymbBslRKK5WeDvDAS3XeWnpXHrbxldAMF5gE0=
Subject key identifier: 39:40:B2:AB:2F:B6:4B:F7:4F:AF:20:F3:68:20:1F:1C:C3:10:C1:52
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0500629D3702E6E744942A14E31326E3FF03FEB9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
Signing time: Tue 24 Jun 2025 13:54:11 +0000
ROA not before: Tue 24 Jun 2025 13:49:11 +0000
ROA not after: Tue 23 Jun 2026 13:54:11 +0000
asID: 206735
IP address blocks: 141.11.52.0/24 maxlen: 24
141.11.53.0/24 maxlen: 24
141.11.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:00:62:9d:37:02:e6:e7:44:94:2a:14:e3:13:26:e3:ff:03:fe:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 24 13:49:11 2025 GMT
Not After : Jun 23 13:54:11 2026 GMT
Subject: CN=3940B2AB2FB64BF74FAF20F368201F1CC310C152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:20:79:43:2b:74:f6:83:a8:cb:ec:dc:28:
e1:1e:9b:59:39:77:23:f1:8a:1d:52:fb:96:51:94:
8c:19:80:8f:c8:ca:47:59:7e:3b:f1:d4:83:83:ce:
b8:53:b7:1d:54:b4:84:89:b3:30:91:cc:75:e7:de:
9d:df:c0:17:71:81:cd:fa:3b:f2:ed:d0:99:07:84:
a7:70:08:72:13:7c:21:bc:b1:fc:23:59:d6:1c:79:
0b:e6:77:9d:b8:8b:22:f5:e5:4b:bc:76:cd:cc:2e:
09:10:c0:bf:8f:bc:15:9d:76:eb:2a:89:25:52:4f:
5b:d2:3f:bb:7d:11:62:22:33:1a:2c:83:f7:32:55:
35:0b:11:d2:55:52:b2:b6:fb:64:f1:98:5b:1a:58:
7d:67:a1:a0:25:33:8e:cc:5d:f8:75:c6:50:7c:cf:
7c:e7:fb:6d:77:dd:c4:93:5f:e1:89:ae:fd:cf:3f:
6f:94:34:6a:df:b0:ca:b0:8f:ed:8b:62:67:b5:ee:
2a:e7:07:b0:0d:62:da:74:31:53:95:77:bf:3c:5f:
a7:d6:61:46:9a:82:5e:b6:99:86:a6:8f:39:27:89:
2c:d7:9c:34:09:79:8f:bc:60:83:60:69:7d:c0:fb:
b2:f1:5e:13:f8:1a:41:df:08:f0:c0:16:cc:f2:1f:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:B2:AB:2F:B6:4B:F7:4F:AF:20:F3:68:20:1F:1C:C3:10:C1:52
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.52.0/23
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:25:13:b0:59:1c:34:a1:4f:a6:a6:7c:a8:73:9b:17:6a:2f:
d3:8d:d0:28:d1:a4:b5:fc:bb:e8:56:16:82:7d:54:0d:bb:a6:
ee:7a:81:dd:b9:f3:67:7f:40:a7:c4:20:c4:70:04:36:bb:61:
6a:e8:e2:85:ae:7a:5b:2b:96:e4:e9:7f:2d:10:79:bf:f1:7c:
d6:79:80:68:d9:60:41:ff:8a:44:a5:53:6b:b5:e0:46:19:f0:
81:a1:3c:b4:91:86:2a:8a:90:c8:cb:ef:28:b0:00:40:7d:55:
44:cb:5e:f6:cd:af:b0:c0:21:b4:41:e8:f7:55:e6:c5:4d:47:
75:0e:c1:d8:01:2d:55:52:6f:ad:a2:e9:07:ca:0f:98:e9:e9:
8f:11:07:57:7e:55:d0:23:f4:cd:5c:f7:c2:de:53:90:3f:a5:
94:a1:b0:05:02:7a:37:74:64:a3:fc:6c:cb:0b:db:52:26:05:
94:9b:19:d3:b1:c0:9c:d6:1c:6d:63:56:34:ee:13:60:96:4a:
de:ef:71:2e:e0:9d:6f:ff:f6:9b:2d:c9:0e:85:dd:57:3f:77:
2a:5c:37:c5:13:b9:fb:d2:dc:9a:de:fa:eb:49:b9:d7:fb:7f:
20:15:0b:01:c1:67:1e:cf:ac:5a:48:18:39:53:3d:e9:2f:e5:
5e:ad:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:46:16 2025 by rpki-client