Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209556.roa
File: AS209556.roa (raw, json)
Hash identifier: QopSGo7pE13kTPbjrI7eTCt6mqmzLAwxU20EZH2F2Wg=
Subject key identifier: DF:02:B0:FA:9C:26:08:6B:C0:0C:4C:CF:74:E2:FA:D0:69:CE:1B:68
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2EA30EF403DF442B2387847EE74EF7685133FA8F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209556.roa
Signing time: Mon 28 Sep 2026 06:33:20 +0000
ROA not before: Mon 28 Sep 2026 06:28:20 +0000
ROA not after: Mon 27 Sep 2027 06:33:20 +0000
asID: 209556
IP address blocks: 2a14:7580:e070::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 00:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a3:0e:f4:03:df:44:2b:23:87:84:7e:e7:4e:f7:68:51:33:fa:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 28 06:28:20 2026 GMT
Not After : Sep 27 06:33:20 2027 GMT
Subject: CN=DF02B0FA9C26086BC00C4CCF74E2FAD069CE1B68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:f9:e8:3d:e7:9f:6a:77:a9:14:7b:b0:e4:
1a:a2:21:e6:fd:74:c8:07:9c:19:62:26:4e:ac:d2:
c6:33:3c:db:ab:5d:8d:d6:1b:e0:3f:03:3c:c6:7b:
1a:6d:10:3a:51:35:13:53:c4:da:aa:df:40:18:8c:
22:4d:04:0a:49:2d:2d:fa:42:7d:85:ee:33:ff:f0:
cd:81:c7:1a:b2:fb:88:d5:97:e9:9f:61:ab:96:e3:
d5:11:da:e4:11:ce:e1:02:bf:ec:1c:44:56:ae:77:
cf:9d:73:97:75:4b:b0:c5:71:0e:ec:0c:d1:94:bc:
8c:72:2c:5d:18:7a:0a:52:85:e3:63:de:f1:a8:a5:
7a:aa:54:d1:c3:80:fd:f9:29:06:5a:30:d4:bd:fd:
86:f1:49:49:d4:a7:e7:5c:e7:3f:c4:26:f8:63:86:
09:8e:c8:02:e5:c6:82:0f:73:34:ba:1b:78:d2:67:
2d:e1:55:80:96:5f:57:74:56:65:db:a0:6f:0c:cf:
aa:33:b1:99:fc:7d:f6:01:60:18:70:73:58:0b:52:
25:fb:b7:2f:85:e7:27:ac:b5:70:2b:e8:9f:3b:3d:
74:ee:3a:9d:79:be:22:48:05:0d:0c:1f:90:e7:7b:
e2:c6:96:c7:2d:c2:da:58:68:6a:1e:1c:30:b0:1d:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:02:B0:FA:9C:26:08:6B:C0:0C:4C:CF:74:E2:FA:D0:69:CE:1B:68
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209556.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:e070::/44
Signature Algorithm: sha256WithRSAEncryption
8d:ff:a8:a6:90:de:ea:94:65:69:30:6f:ee:b2:14:4d:54:3d:
3e:84:77:7d:ba:f5:ed:24:d6:88:eb:31:8b:3a:d8:fa:e7:c9:
d1:3d:a6:c4:48:a4:0f:17:5e:ec:2f:28:26:cb:42:11:e2:4a:
d9:74:e1:80:72:97:7b:7e:86:e8:03:89:9b:bf:70:5e:71:52:
d9:80:0e:18:45:68:7e:22:6e:2e:83:6c:4c:7d:ee:e8:bb:bb:
55:9d:b8:bf:81:a2:c2:3f:c5:b0:4e:c7:f7:e0:ad:17:1c:05:
29:0f:c0:c4:af:ec:a8:8f:74:34:c1:7d:f8:a5:38:7a:ce:a0:
d6:90:2d:dc:16:a1:38:a5:5c:6d:b3:35:56:ab:ac:72:70:c4:
4c:d0:1f:7a:3c:2d:95:5c:33:65:80:a9:8b:da:eb:7b:a6:00:
c6:ac:36:fe:e4:23:7a:6f:2c:5e:3b:6e:4e:e0:a8:f2:ab:1b:
35:1f:38:59:6c:c1:83:9b:0e:53:83:35:9e:dd:25:3f:7c:36:
48:98:d3:e3:12:38:06:82:44:d6:14:b0:4f:64:4e:3e:c1:00:
82:c6:a8:49:74:0e:fd:3e:f3:da:57:f6:17:cf:11:69:98:df:
2a:2c:58:46:aa:aa:a1:4b:34:e8:66:93:52:2d:a6:76:17:aa:
ec:48:22:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIULqMO9APfRCsjh4R+5073aFEz+o8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA5MjgwNjI4MjBaFw0yNzA5MjcwNjMzMjBaMDMxMTAvBgNV
BAMTKERGMDJCMEZBOUMyNjA4NkJDMDBDNENDRjc0RTJGQUQwNjlDRTFCNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OPnoPeefanepFHuw5BqiIeb9
dMgHnBliJk6s0sYzPNurXY3WG+A/AzzGexptEDpRNRNTxNqq30AYjCJNBApJLS36
Qn2F7jP/8M2Bxxqy+4jVl+mfYauW49UR2uQRzuECv+wcRFaud8+dc5d1S7DFcQ7s
DNGUvIxyLF0YegpSheNj3vGopXqqVNHDgP35KQZaMNS9/YbxSUnUp+dc5z/EJvhj
hgmOyALlxoIPczS6G3jSZy3hVYCWX1d0VmXboG8Mz6ozsZn8ffYBYBhwc1gLUiX7
ty+F5yestXAr6J87PXTuOp15viJIBQ0MH5Dne+LGlsctwtpYaGoeHDCwHX7tAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU3wKw+pwmCGvADEzPdOL60GnOG2gwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA5NTU2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1
gOBwMA0GCSqGSIb3DQEBCwUAA4IBAQCN/6imkN7qlGVpMG/ushRNVD0+hHd9uvXt
JNaI6zGLOtj658nRPabESKQPF17sLygmy0IR4krZdOGAcpd7foboA4mbv3BecVLZ
gA4YRWh+Im4ug2xMfe7ou7tVnbi/gaLCP8WwTsf34K0XHAUpD8DEr+yoj3Q0wX34
pTh6zqDWkC3cFqE4pVxtszVWq6xycMRM0B96PC2VXDNlgKmL2ut7pgDGrDb+5CN6
byxeO25O4Kjyqxs1HzhZbMGDmw5TgzWe3SU/fDZImNPjEjgGgkTWFLBPZE4+wQCC
xqhJdA79PvPaV/YXzxFpmN8qLFhGqqqhSzToZpNSLaZ2F6rsSCIx
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:58:16 2026 by rpki-client