Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209768.roa
File: AS209768.roa (raw, json)
Hash identifier: QCnrLx3EwKb1xNp7vRcLep7Pgx1p3XWBeqGCbBHtW34=
Subject key identifier: A6:45:DA:3D:81:9A:85:99:20:CB:B6:4F:A9:F8:5D:65:CE:6F:66:87
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 71E5767BC98A6141325AD5EC9B9B822146EEC2FB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209768.roa
Signing time: Tue 04 Aug 2026 15:49:18 +0000
ROA not before: Tue 04 Aug 2026 15:44:18 +0000
ROA not after: Tue 03 Aug 2027 15:49:18 +0000
asID: 209768
IP address blocks: 191.96.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e5:76:7b:c9:8a:61:41:32:5a:d5:ec:9b:9b:82:21:46:ee:c2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 4 15:44:18 2026 GMT
Not After : Aug 3 15:49:18 2027 GMT
Subject: CN=A645DA3D819A859920CBB64FA9F85D65CE6F6687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:98:60:81:6e:dc:f4:81:88:63:de:8a:02:
56:16:7f:9b:e5:be:31:d2:c0:65:0e:24:75:f4:13:
bd:49:b9:b5:75:14:45:a8:f0:89:50:ec:b6:d3:27:
24:02:dc:e3:16:1d:48:5d:02:a9:1c:76:97:ed:cf:
57:ba:9d:88:99:ef:90:f7:4f:8a:ce:08:21:07:5e:
08:b6:ba:c4:b0:3c:43:e7:b3:c0:40:79:8f:59:ac:
21:20:7c:47:52:ba:37:7b:d8:92:29:fa:91:cc:a7:
6c:85:86:f3:79:12:29:c1:26:c4:1f:22:51:3e:b8:
66:12:c1:83:b6:53:a1:89:ea:bc:42:2f:0f:77:ab:
c2:b0:02:98:e7:aa:84:8b:06:6c:b9:33:b7:47:89:
15:e7:11:da:79:c0:79:58:98:ef:4a:a3:91:bb:9f:
63:6f:82:1d:9b:67:d3:81:04:d4:12:8d:30:46:98:
7b:07:1d:78:5e:a9:82:c4:3a:73:a7:09:79:57:c8:
3e:e7:2f:e4:71:18:15:04:b1:50:c3:97:2e:5f:e5:
2a:f9:a3:68:ea:34:0a:64:d6:62:33:e2:5e:d3:34:
93:f7:36:b0:cf:df:30:c6:76:c0:29:9e:75:b3:1b:
48:52:fb:1c:a8:f0:2a:1a:fa:d0:2c:25:1d:f4:14:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:45:DA:3D:81:9A:85:99:20:CB:B6:4F:A9:F8:5D:65:CE:6F:66:87
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.176.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:51:48:76:c3:f4:50:44:f7:b5:ef:81:ce:d1:55:29:d0:f5:
9d:28:5f:c7:3e:ab:97:f1:4d:ce:75:20:8c:c4:02:40:60:9e:
cd:33:90:5c:de:8f:d7:5b:08:6a:27:69:78:d3:0d:a6:15:70:
85:fc:e3:ee:40:58:f0:e7:b7:6a:77:df:5c:06:c6:87:eb:10:
69:9b:57:31:d6:56:27:47:c2:f5:25:b9:cd:02:eb:3b:ad:a7:
92:3e:0e:b0:82:e8:3c:05:1e:18:b0:d9:24:be:20:94:e0:45:
5b:d7:03:fb:71:fa:86:02:d3:67:4d:9d:a1:75:b0:42:54:95:
c6:80:3d:e5:49:07:b7:70:2b:19:1e:c2:4d:ec:4a:ca:e3:88:
83:d4:89:2f:41:37:63:7c:0e:b0:b9:d8:9e:56:bb:c8:2c:6b:
63:22:14:3e:34:51:c4:00:f0:97:39:e5:af:85:99:bd:00:c6:
20:34:fc:c2:4d:dc:66:98:a4:16:cd:b3:86:4c:1d:5e:79:ed:
3d:76:90:0b:df:71:7a:79:b7:d7:97:68:7f:75:fc:9c:94:28:
21:3b:9b:04:bf:ff:e6:3d:c8:79:8d:9a:0f:4f:d3:db:2f:7e:
08:2b:3c:69:72:51:d2:ab:3c:25:78:37:0b:4f:68:e0:13:3b:
28:88:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:59:46 2026 by rpki-client