Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS209294.roa
File: AS209294.roa (raw, json)
Hash identifier: ZZ48Vcz7BcEEYozXf7FeOUHKiFQt3v22YI0aIYYnc00=
Subject key identifier: 54:04:00:A6:E0:08:B9:A8:98:24:80:AF:8F:D9:83:28:5A:C4:0C:3E
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 54027B83065BF8108A12D78AC807FEC787768B55
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS209294.roa
Signing time: Thu 12 Nov 2026 08:24:45 +0000
ROA not before: Thu 12 Nov 2026 08:19:45 +0000
ROA not after: Thu 11 Nov 2027 08:24:45 +0000
asID: 209294
IP address blocks: 2a0f:1cc5:2800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 06:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:02:7b:83:06:5b:f8:10:8a:12:d7:8a:c8:07:fe:c7:87:76:8b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 12 08:19:45 2026 GMT
Not After : Nov 11 08:24:45 2027 GMT
Subject: CN=540400A6E008B9A8982480AF8FD983285AC40C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:d7:8d:70:e0:b2:cf:7a:11:df:3a:af:54:
c7:91:09:8f:f1:fc:59:42:ea:8c:d6:c3:54:a4:1c:
c3:61:53:3f:5e:c1:36:0d:c8:0e:53:a9:09:e0:cf:
69:32:98:de:96:f5:46:d4:68:bd:79:da:c1:3b:22:
01:b3:2d:64:1d:62:64:1f:12:25:38:29:93:00:a7:
cf:c8:96:af:48:a2:ba:da:a0:e0:7a:90:69:05:2e:
19:fa:08:9e:a4:7b:45:e5:85:a8:98:26:66:de:3a:
a0:1e:f1:ac:c3:e7:bb:6c:75:bf:e4:1f:a1:9b:ca:
ec:1f:bd:ab:ea:bf:0b:06:c2:d2:e7:7b:86:b5:92:
fb:25:af:e0:a6:17:99:42:52:d7:de:08:ab:85:a7:
a3:9b:91:77:ca:2b:0b:ae:34:5a:6f:20:cb:df:97:
23:59:49:8c:0e:42:05:fc:dc:d7:e7:0f:87:a9:7e:
68:bb:0f:32:ec:40:8f:62:d3:01:7c:13:17:2d:37:
e8:11:bb:4d:7a:22:6e:63:f2:84:4f:5f:2f:e6:ca:
88:11:39:cb:9f:67:16:ee:1e:58:37:e9:c7:93:50:
51:4e:c2:ad:62:fb:3f:35:ff:c1:ea:c2:1f:ff:2e:
f3:c0:cf:2e:05:77:b7:91:6c:15:b0:c9:c4:1e:6d:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:04:00:A6:E0:08:B9:A8:98:24:80:AF:8F:D9:83:28:5A:C4:0C:3E
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS209294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2800::/40
Signature Algorithm: sha256WithRSAEncryption
24:90:62:f6:15:43:6d:c2:7b:77:41:4d:2c:c5:bb:36:2a:e3:
11:c7:3e:4a:40:a0:dd:2d:2b:45:c9:cb:75:3a:f8:87:a3:34:
ac:e8:c4:a3:4b:9c:e1:81:01:72:7e:d6:9c:e8:6f:be:94:94:
f7:ae:7d:95:19:c2:c7:ad:ec:5a:ef:99:c7:9b:49:46:6f:91:
46:1e:c3:cc:87:43:3f:9e:5d:bc:f3:a0:7a:79:b1:69:be:27:
e8:dc:12:f0:66:ba:6b:44:f3:e6:58:ef:08:c7:08:31:c5:b9:
9d:2c:79:d7:b9:0b:a5:e7:6c:05:a5:c1:6b:fb:88:2c:fd:db:
4f:10:69:0c:ed:04:c2:71:01:41:3c:d7:ce:67:18:76:47:ab:
3f:cb:a5:3b:23:8a:3e:fa:81:46:5a:1a:5a:ff:c6:3b:74:0d:
8e:f9:3e:5b:3a:7e:cc:f4:03:b7:01:64:d6:02:e7:d1:07:d2:
9e:de:c5:c7:64:74:e0:76:8c:58:fc:ab:26:28:25:bb:f3:a1:
64:31:a1:b1:db:91:a4:15:76:cf:03:fa:49:9e:86:79:21:cc:
77:20:f3:09:76:0c:75:28:4c:d7:a6:d6:ad:8b:a1:70:bf:24:
65:08:0d:46:43:63:42:1a:ba:b1:f3:5e:48:a2:b0:b1:40:64:
ac:8f:a4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:01:02 2026 by rpki-client