Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209338.roa
File: AS209338.roa (raw, json)
Hash identifier: 2h8vJS7VaoVcTYBbt8bf9ylMj6+QTVcUXfzE67C+Ouc=
Subject key identifier: 48:0A:8D:13:42:73:70:58:6C:78:7C:94:93:12:A8:49:EC:09:B0:AF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4E08F196B37C1297DBB03CFB245BEDDC1D47FEF5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209338.roa
Signing time: Thu 06 Aug 2026 10:27:03 +0000
ROA not before: Thu 06 Aug 2026 10:22:03 +0000
ROA not after: Thu 05 Aug 2027 10:27:03 +0000
asID: 209338
IP address blocks: 2a0f:85c1:c30::/48 maxlen: 48
2a0f:85c1:c48::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:08:f1:96:b3:7c:12:97:db:b0:3c:fb:24:5b:ed:dc:1d:47:fe:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 6 10:22:03 2026 GMT
Not After : Aug 5 10:27:03 2027 GMT
Subject: CN=480A8D13427370586C787C949312A849EC09B0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:46:7b:67:8d:92:bd:dd:ce:59:9c:f2:c6:cf:
31:f8:f4:b9:2a:7b:49:66:0a:40:48:21:9e:56:c7:
bc:b4:27:2c:19:ff:9d:8b:0d:aa:80:b7:0f:6c:c7:
c0:1f:da:e2:4a:ce:41:c5:fb:ff:27:0c:5b:50:21:
12:8f:33:da:d6:d7:3a:85:61:ce:ae:f9:a8:3c:14:
77:4b:b3:dd:53:23:8e:11:9f:f7:9b:0a:ff:fa:e2:
19:6a:97:ae:af:f5:95:d1:54:e5:91:9a:a8:03:c6:
0d:a6:01:d9:52:07:be:8e:b9:7d:aa:1a:20:6a:56:
76:05:85:9f:d7:05:06:ba:e4:81:94:f8:53:78:9f:
53:80:8a:f8:eb:3f:05:c5:b9:ed:4f:d2:09:4a:56:
86:ab:f5:42:f7:d3:bc:87:47:eb:b3:c6:40:5b:3a:
8d:da:fb:70:61:ae:7a:fe:b8:34:99:1d:da:26:0c:
1f:c7:4d:2e:12:12:77:c1:bc:e7:e4:0f:b3:41:1b:
f6:84:46:88:23:47:5d:17:24:46:f1:b2:35:b6:76:
1b:55:bf:96:62:a7:6c:7d:55:49:01:09:57:4d:0a:
54:ea:18:ba:ff:8f:dc:99:80:61:e3:75:45:4e:e2:
eb:02:97:30:03:a3:a8:89:e4:24:07:ae:da:38:34:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0A:8D:13:42:73:70:58:6C:78:7C:94:93:12:A8:49:EC:09:B0:AF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c30::/48
2a0f:85c1:c48::/48
Signature Algorithm: sha256WithRSAEncryption
ed:a1:f0:13:37:35:e8:7b:9c:26:4d:c3:ad:0d:5e:e9:67:00:
b5:43:6b:c1:4e:b4:35:02:05:35:3b:3c:b6:f8:d7:c0:c9:a4:
cb:cf:0c:6c:1a:6f:09:04:d1:f6:13:36:da:83:bf:7c:22:be:
5d:0b:96:3a:d7:ce:aa:a2:85:93:69:b9:33:95:37:c1:f5:d6:
2d:f7:cf:55:64:f2:97:cc:2b:bf:66:70:75:de:f0:2b:34:d8:
12:d3:67:7c:f0:b4:bf:b3:5a:d3:6b:9c:dd:d0:52:39:38:d3:
a8:61:4b:19:e0:b0:d7:6b:ba:c7:54:38:13:5d:14:e9:d3:78:
17:ec:c7:c5:40:9b:c7:8c:9c:bb:38:5d:f5:ff:ca:b3:3d:ee:
93:99:11:52:4f:f6:89:d2:fa:02:c0:38:cc:9a:a0:3e:a3:5a:
1e:6d:37:01:5a:8e:26:ec:14:4a:d8:ee:a5:55:d2:43:24:a9:
7b:80:3c:ee:bc:d2:59:c0:ba:53:4b:6e:b3:ba:47:1b:ad:d0:
d1:e0:db:df:61:f7:2e:b8:fb:5b:18:f3:54:25:98:46:e1:7b:
5c:8f:4d:88:bc:7e:4f:a4:7e:33:c7:1f:a9:cc:94:3a:58:67:
b1:20:29:82:cb:91:a5:ea:47:ca:78:5d:cc:f2:f3:cc:c7:ef:
6c:58:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:55 2026 by rpki-client