Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209612.roa
File: AS209612.roa (raw, json)
Hash identifier: 5V5/ODhl53npsiv5zi1s/r5M9YnXbaJeoW3kyNBu0G0=
Subject key identifier: 4C:0B:0D:3D:B1:7A:21:9D:9E:22:81:48:8F:CC:F2:8C:1E:F9:6E:66
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5B92384B84F4D484AE66AFD1CE55BE8D42E32300
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209612.roa
Signing time: Thu 09 Jul 2026 01:56:16 +0000
ROA not before: Thu 09 Jul 2026 01:51:16 +0000
ROA not after: Thu 08 Jul 2027 01:56:16 +0000
asID: 209612
IP address blocks: 143.14.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:92:38:4b:84:f4:d4:84:ae:66:af:d1:ce:55:be:8d:42:e3:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 9 01:51:16 2026 GMT
Not After : Jul 8 01:56:16 2027 GMT
Subject: CN=4C0B0D3DB17A219D9E2281488FCCF28C1EF96E66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e4:f1:84:3a:4d:5e:2f:8d:84:a0:a9:6a:12:
0b:01:26:bc:7f:4d:37:35:d7:da:a3:cb:e4:55:7a:
e8:3d:40:e8:5b:a7:8d:b4:d1:24:10:53:f6:a2:b3:
4f:57:12:1c:7b:34:4f:62:44:11:5b:8e:d5:c8:28:
05:d3:59:28:0e:9b:e6:29:f7:1f:7f:76:15:31:ca:
54:d7:4e:19:48:22:45:1a:25:5d:33:31:fa:62:00:
1b:58:23:4d:38:1c:31:3a:6d:cc:45:82:2e:6c:ad:
3d:6e:bf:3b:66:7a:23:ce:33:30:ac:74:5b:86:d0:
66:f7:ab:52:7b:89:77:07:31:77:6e:8c:3a:32:f1:
d3:74:7b:79:6a:1c:5f:af:37:fa:2b:7c:be:f0:57:
fd:85:5c:cc:c2:98:93:5c:55:e6:f4:5a:38:1a:6d:
5c:93:b4:34:3f:8c:0b:27:7c:61:5e:ec:1a:ad:0e:
99:7f:2f:c0:7b:dc:99:90:ec:29:84:80:92:42:16:
e6:23:45:63:84:21:db:1b:56:c3:19:d0:f7:13:f8:
d4:50:53:16:a4:1b:a2:23:27:d7:48:ff:82:dd:fa:
bf:7b:af:f3:f4:92:5b:66:84:05:37:c3:04:6b:44:
81:81:87:1b:6b:aa:e0:1c:df:27:f2:37:50:4e:1c:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0B:0D:3D:B1:7A:21:9D:9E:22:81:48:8F:CC:F2:8C:1E:F9:6E:66
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209612.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.88.0/24
Signature Algorithm: sha256WithRSAEncryption
81:17:62:0b:9b:67:5d:bb:56:7d:43:48:26:65:3e:7f:2f:ff:
d5:23:6a:50:ab:b5:35:ee:69:b6:3e:39:e1:2c:71:70:92:f0:
e8:2f:1e:b5:ce:4c:cd:65:fa:76:9b:25:a8:96:5e:b9:52:34:
8c:d0:56:f8:69:08:c0:2f:89:ac:a2:48:fb:9e:83:38:7e:a0:
83:48:9b:b8:95:1d:08:c9:d7:b3:e4:00:41:5e:42:07:f2:da:
d5:3b:ee:7d:9b:2f:72:7f:23:d1:60:a3:5b:91:52:fd:eb:00:
c4:bb:6b:80:12:0b:ce:aa:d9:a8:92:06:46:8f:f1:28:d4:11:
de:90:30:53:fa:29:0e:dd:f6:60:6a:5c:5e:d7:e8:f4:51:72:
a1:e3:82:d4:f5:22:af:3e:01:66:bd:ad:48:a6:be:a0:1d:db:
53:7b:aa:f8:ba:2e:ca:f0:01:30:c9:00:0c:4a:42:6e:28:89:
58:f6:07:9d:7d:11:bb:5c:33:58:5d:d2:f9:be:a8:57:20:2a:
61:6d:97:23:6b:0c:ec:ba:0f:26:b0:ad:05:cb:9b:40:cb:90:
af:37:4c:d2:46:c1:7a:7d:d8:11:7a:f9:56:f6:75:0d:73:15:
46:59:cf:8d:7b:2d:4c:85:58:99:7e:aa:a5:d8:3a:dc:19:2a:
81:69:f8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:35:32 2026 by rpki-client