Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS208709.roa
File: AS208709.roa (raw, json)
Hash identifier: bXQvY+u9u5H9MAdV2rO+bBpnPzLVdc8OzQDOA8B598A=
Subject key identifier: 2D:74:76:85:77:4E:F7:B1:9A:BE:B9:CE:AD:38:73:74:91:09:E4:52
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 17EF2C4FC57FCE2090827E0DCA6C484F52F01576
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS208709.roa
Signing time: Wed 04 Nov 2026 20:32:52 +0000
ROA not before: Wed 04 Nov 2026 20:27:52 +0000
ROA not after: Wed 03 Nov 2027 20:32:52 +0000
asID: 208709
IP address blocks: 2a0e:8f02:2030::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 08:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ef:2c:4f:c5:7f:ce:20:90:82:7e:0d:ca:6c:48:4f:52:f0:15:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:52 2026 GMT
Not After : Nov 3 20:32:52 2027 GMT
Subject: CN=2D747685774EF7B19ABEB9CEAD3873749109E452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:59:7f:71:73:26:70:ec:63:24:80:a5:ed:
0c:90:4b:5e:2b:69:62:e3:4e:53:92:51:27:d0:f6:
38:42:b0:e8:87:b8:77:7c:11:13:45:07:01:11:59:
94:d0:3f:e4:98:71:ef:ed:86:40:80:37:87:a2:6e:
2f:fb:1b:7d:9c:01:f4:6c:8a:59:1c:df:e4:25:d2:
1d:12:d9:75:a8:3d:b4:21:11:ea:96:3b:ad:ad:6f:
c4:91:67:e5:d6:ae:3d:82:8e:0a:ee:21:9d:e1:ac:
d0:18:2b:38:17:29:16:f0:bc:8d:6b:0d:cb:54:cc:
53:6c:04:e5:29:b5:82:23:00:99:53:35:b2:54:5d:
6d:28:d4:fa:a2:3c:1c:16:ee:b8:f0:d8:39:13:39:
d9:36:19:57:77:ef:8b:cc:ad:83:bd:37:be:1a:f3:
0a:86:7c:30:6a:d4:5d:36:f0:d9:f4:44:de:c2:19:
25:55:83:8e:3c:d2:5e:f7:e7:8d:55:23:80:d5:b8:
2d:48:25:20:9c:05:67:2a:d9:a4:a2:54:d2:05:df:
b3:20:79:af:32:f1:c0:9f:87:39:ac:9b:92:0e:96:
5e:d2:9c:63:6c:b7:1d:d4:0a:59:c9:31:57:f7:70:
d0:b7:22:38:2e:16:13:1f:2e:aa:48:25:c6:61:ab:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:76:85:77:4E:F7:B1:9A:BE:B9:CE:AD:38:73:74:91:09:E4:52
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS208709.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2030::/44
Signature Algorithm: sha256WithRSAEncryption
7a:0a:83:53:57:0a:eb:2b:90:f6:8e:e5:c1:ce:89:88:8e:30:
4a:36:0d:36:0d:9b:d8:97:44:9c:76:03:c1:3e:b2:3a:f0:3c:
73:e1:cb:2f:47:94:f3:87:ef:9f:47:97:24:21:10:d7:64:32:
29:18:e2:ed:31:bb:b6:b7:22:be:27:8b:61:ae:cf:3a:53:2e:
8a:6c:31:69:8c:76:a8:d2:19:e3:b6:e8:34:aa:79:0e:7f:28:
e6:a9:7b:a8:d7:ca:d5:27:01:3d:b0:c7:28:26:58:f9:14:0c:
ed:43:53:e0:28:8b:62:3b:75:e2:d2:d7:b9:78:4d:22:9a:cc:
63:c7:76:25:aa:fb:db:c9:27:08:68:cd:f4:6f:9f:dd:7a:51:
8f:ab:a9:e0:d8:77:d8:f6:13:ff:43:b6:1d:44:92:0f:e7:ef:
5f:cc:a9:81:32:09:8b:c1:bc:2a:8b:10:03:63:fd:ea:0e:94:
fc:af:bd:f6:0e:3f:03:e6:f9:54:65:60:e1:0f:d7:50:42:ae:
bb:be:62:6e:a6:ec:27:2a:62:80:b9:c8:6d:87:63:06:4e:a8:
a9:ce:54:40:8a:f3:2a:d3:24:67:01:08:5d:37:bd:d4:71:ba:
85:01:7a:66:eb:c1:ac:c3:05:f3:42:16:6b:71:df:a6:e7:51:
c3:52:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:47:07 2026 by rpki-client