
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209612.roa
File: AS209612.roa (raw, json)
Hash identifier: 8ViGmhWtQerlhqRK666tu2YrccETV6VnmLyrI9Yecho=
Subject key identifier: A3:85:AF:C8:2A:D1:3D:20:E1:A2:1C:83:45:CD:62:D7:16:E9:3E:85
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 06E7ADEDE0F5D25EA7E002BA7D128DFC9FB5BD87
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209612.roa
Signing time: Sun 19 Oct 2025 21:00:19 +0000
ROA not before: Sun 19 Oct 2025 20:55:19 +0000
ROA not after: Sun 18 Oct 2026 21:00:19 +0000
asID: 209612
IP address blocks: 143.14.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e7:ad:ed:e0:f5:d2:5e:a7:e0:02:ba:7d:12:8d:fc:9f:b5:bd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 19 20:55:19 2025 GMT
Not After : Oct 18 21:00:19 2026 GMT
Subject: CN=A385AFC82AD13D20E1A21C8345CD62D716E93E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:75:db:2d:ec:c9:81:07:a1:58:f1:5d:5e:
de:f1:c0:06:ee:a1:47:ac:ac:89:ab:e9:09:73:a3:
61:66:12:eb:d7:cf:89:4c:90:67:a2:71:06:8e:9a:
96:d9:88:01:52:f3:54:75:d2:25:a9:35:c8:54:c0:
a7:1a:98:6d:d2:b9:ae:ad:01:21:f3:0a:31:6a:3a:
8c:af:8a:9d:05:27:99:9c:67:99:9f:c9:ed:ef:31:
5c:27:23:58:45:6d:ec:9e:e8:06:8a:38:07:b1:ec:
f3:dc:65:8f:12:be:96:ae:64:f6:9a:92:d0:ee:63:
4a:87:58:17:87:6f:5d:06:b5:f2:2b:9c:16:c3:7a:
2f:e4:63:c5:27:17:0a:b3:86:5d:77:c9:80:e1:25:
12:ca:c6:d2:77:c9:f5:7d:11:c0:0a:6b:54:1f:b1:
4e:23:f7:af:62:99:55:d5:0f:fe:46:8d:97:2a:10:
2a:49:6e:6f:fe:48:07:6f:53:e4:36:89:93:0c:4a:
1d:27:c1:45:80:01:80:27:23:fe:f9:46:fe:de:5c:
cc:b7:56:dd:84:29:10:dc:94:50:a0:1c:9a:0d:ca:
e9:d6:11:18:84:2a:48:a9:9c:7d:28:23:f7:2b:77:
6f:ae:08:3b:95:f1:47:d7:bd:57:23:0b:c2:53:84:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:AF:C8:2A:D1:3D:20:E1:A2:1C:83:45:CD:62:D7:16:E9:3E:85
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209612.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.88.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ad:49:bc:84:eb:88:0b:c4:7b:5e:29:aa:1e:c6:20:ba:0b:
0c:1d:f8:22:59:02:4c:7f:18:71:c4:b1:3a:f3:fc:95:3c:1b:
81:90:8f:c3:71:2a:eb:46:4c:93:85:34:5e:1a:1c:b8:77:a8:
db:02:33:71:5d:a0:92:a2:0d:ec:2e:dc:00:b6:a2:59:c9:85:
ee:68:e7:94:11:ae:7c:be:4e:6f:9e:00:a9:4e:6d:1d:85:94:
81:55:29:21:50:6b:32:f6:69:d4:40:4a:5c:15:db:00:43:0d:
18:dc:38:e5:3a:fd:b7:b4:86:c5:dd:7e:4f:06:e8:14:ba:82:
83:90:63:86:0a:2b:f6:ae:51:dc:1e:b0:dd:70:2c:ac:a1:1f:
9b:6a:06:03:2e:33:73:b3:7f:fa:91:b1:71:67:59:ab:67:6b:
08:86:41:77:37:98:c4:00:b3:0f:3f:12:45:a4:65:d8:3a:34:
aa:9b:77:df:f5:87:2e:b6:9e:43:63:b9:b3:8e:c2:a1:ba:c6:
71:07:81:8f:81:31:1b:0c:c4:fe:20:23:92:23:08:44:87:14:
20:a5:83:20:2e:80:6b:a3:c2:b4:d8:84:c8:e6:48:52:45:31:
01:cd:a3:f2:0a:8b:4e:e2:3a:5b:7e:8c:e0:40:d6:f8:ea:df:
f3:b5:76:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:42 2025 by rpki-client