Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208690.roa
File: AS208690.roa (raw, json)
Hash identifier: mc/qTxeb4oHxOwanT5xXmV1GcB+CEv/sQz301EGEiCY=
Subject key identifier: AA:9E:58:85:C8:42:CE:B3:19:C2:3B:5B:64:6E:37:13:CC:14:3C:44
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4291FB7CD7F6EBB88E78A0221225BC328E3AFF77
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208690.roa
Signing time: Tue 22 Sep 2026 07:42:09 +0000
ROA not before: Tue 22 Sep 2026 07:37:09 +0000
ROA not after: Tue 21 Sep 2027 07:42:09 +0000
asID: 208690
IP address blocks: 2a13:9500:1a6::/48 maxlen: 48
2a13:9500:1e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:91:fb:7c:d7:f6:eb:b8:8e:78:a0:22:12:25:bc:32:8e:3a:ff:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 22 07:37:09 2026 GMT
Not After : Sep 21 07:42:09 2027 GMT
Subject: CN=AA9E5885C842CEB319C23B5B646E3713CC143C44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:e1:e4:5c:50:fd:ca:81:36:89:05:15:55:
5a:bb:c9:81:c4:8b:52:1d:75:7f:c8:7d:30:ab:52:
89:f1:97:2f:4a:2a:6a:05:02:f9:25:7d:e4:00:14:
60:4d:80:24:11:f5:ac:a3:ad:14:b0:52:6c:00:7c:
be:24:f7:f2:f9:64:4f:e2:f7:51:7f:0c:64:c9:4f:
7e:b7:76:f3:50:72:ff:a1:39:31:cf:7b:06:74:dd:
f0:a3:70:18:26:4d:78:85:cd:a1:a9:da:6e:d4:68:
cc:53:48:9d:6e:7a:0d:02:fa:1c:c7:cb:7f:fa:83:
fc:99:f4:74:22:21:12:d8:d8:7d:66:a6:e8:94:fa:
f2:8c:da:3e:c7:21:e0:b8:aa:e3:8b:8f:bb:91:99:
27:b6:9e:03:4d:82:e5:dd:14:3b:02:63:96:0d:78:
a5:05:a1:be:b4:4f:82:9a:00:dc:1e:f4:fa:5c:7e:
f9:ce:d3:18:10:3e:63:33:bc:db:1f:8a:ba:77:93:
5e:bd:82:ad:fe:a8:c8:aa:50:14:ba:b5:89:09:a5:
6f:da:d7:18:f2:8b:ab:04:2e:3a:a7:0d:57:4f:79:
13:e5:5b:32:f6:a5:95:31:2b:37:70:85:65:57:b5:
72:f0:82:c5:14:82:3e:af:b4:61:67:19:ab:67:35:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9E:58:85:C8:42:CE:B3:19:C2:3B:5B:64:6E:37:13:CC:14:3C:44
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1a6::/48
2a13:9500:1e0::/48
Signature Algorithm: sha256WithRSAEncryption
97:10:ab:11:c5:8f:ad:f9:2e:ef:6d:a3:ce:ee:47:f0:3a:91:
6f:de:c6:e3:71:f2:ba:e2:c3:81:31:d9:7f:23:0c:04:1c:a8:
e1:ac:f5:ef:03:b3:fb:34:4a:6a:c5:b1:78:dd:db:1a:77:17:
9f:25:b5:15:77:da:43:3c:91:5f:88:c9:22:99:b7:9f:0e:8c:
69:74:bc:97:ac:ec:56:91:a8:29:36:97:fd:85:31:a1:44:fe:
bc:b2:54:f3:4a:b3:ae:a5:57:f9:dc:da:2f:c2:db:2d:bc:ec:
c1:0e:83:16:15:5e:30:3e:7f:d7:e2:17:4a:b2:ff:1b:10:5e:
ca:f2:4e:88:4a:c7:0f:35:28:ac:bd:91:d5:2e:f5:d2:aa:dd:
1b:44:7c:be:d4:92:b0:4a:bb:e6:0c:b3:50:67:06:bb:ba:f6:
e1:23:82:6d:4e:a6:5c:52:de:93:a5:98:78:f4:ae:e1:f8:59:
68:bf:b2:eb:d7:78:f5:64:2f:75:3f:94:79:f4:f1:39:f6:44:
e0:c2:55:a5:0b:ac:20:37:30:af:b5:96:74:60:ba:c3:93:c7:
a3:88:41:fb:65:aa:82:fb:1c:5d:eb:94:e8:c0:0b:b2:66:1a:
3b:62:4f:4c:10:46:da:f8:a4:9a:b7:df:b9:7c:85:63:41:15:
fe:d8:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:11:25 2026 by rpki-client