Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209401.roa
File: AS209401.roa (raw, json)
Hash identifier: WJUMy6lpw6NsnDFQTJd3lQ5citeLcprO9dDDsRVXG2k=
Subject key identifier: 57:F3:C1:A3:0C:E9:75:0E:7D:09:28:B5:CB:90:DC:F8:FB:75:76:F5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4EFB926919A2809D2117DC5F56D886E53E565EC0
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209401.roa
Signing time: Fri 29 Aug 2025 02:46:40 +0000
ROA not before: Fri 29 Aug 2025 02:41:40 +0000
ROA not after: Fri 28 Aug 2026 02:46:40 +0000
asID: 209401
IP address blocks: 2a0f:85c1:d35::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:fb:92:69:19:a2:80:9d:21:17:dc:5f:56:d8:86:e5:3e:56:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 29 02:41:40 2025 GMT
Not After : Aug 28 02:46:40 2026 GMT
Subject: CN=57F3C1A30CE9750E7D0928B5CB90DCF8FB7576F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:1d:f3:37:8f:a9:a9:4f:6b:b3:87:49:1d:
b4:d5:f8:16:b3:1c:7f:68:42:11:31:dc:a8:53:65:
10:ba:d4:0a:6c:47:e0:43:41:ad:08:a4:6b:c3:50:
74:06:4e:49:d3:76:13:a7:37:01:2b:19:04:04:05:
ea:0e:4a:a7:e1:8a:67:de:68:9f:c7:49:f4:bd:b8:
6b:f6:e2:ac:c7:89:a6:0d:41:d2:da:b8:75:c7:b3:
67:69:54:3c:b7:ed:3d:29:31:f7:69:4e:5d:b7:f4:
3a:20:51:88:94:b6:02:c0:53:0d:45:fc:72:55:0d:
5c:b1:18:95:7c:c8:4b:38:97:43:ce:36:04:54:a0:
6d:ad:ea:99:76:9e:06:0d:b6:8b:e9:d1:bb:66:77:
fc:e2:7a:99:3c:85:cf:89:b2:bd:14:3d:2f:9d:cc:
a0:a1:87:78:19:ae:c6:e6:77:3c:10:ea:10:fb:21:
15:3e:f1:ea:f0:4a:d6:7f:b1:76:81:cf:f8:6a:4c:
59:76:97:cb:7e:8f:64:bb:72:2b:c2:cf:4b:0f:5d:
d2:2c:d2:10:d9:59:c9:1b:47:36:aa:7b:c6:6f:2a:
00:62:f5:7d:5a:56:e1:65:fe:b7:34:69:0a:e4:31:
65:cd:d7:2d:02:3c:cc:2a:06:44:9e:06:03:fb:f0:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F3:C1:A3:0C:E9:75:0E:7D:09:28:B5:CB:90:DC:F8:FB:75:76:F5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209401.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d35::/48
Signature Algorithm: sha256WithRSAEncryption
06:a8:1d:75:c2:79:db:dd:86:97:8e:14:9c:98:73:56:66:c9:
09:1f:31:53:cc:ef:9c:6b:0f:2b:49:12:c3:5c:7a:2a:f1:cb:
84:aa:17:50:a9:ab:86:32:18:f3:94:f4:da:b2:33:54:0d:19:
89:0d:e8:ff:43:7d:43:21:12:a8:b7:ca:57:cc:72:70:64:d3:
b0:a2:40:cb:f4:78:62:0c:21:0a:73:67:10:90:f5:0a:da:00:
f9:ab:66:71:59:d6:e5:b2:15:20:35:43:7b:95:10:25:c8:31:
38:2d:cb:6d:df:4a:48:fd:22:64:a6:59:2a:61:ad:5e:07:d3:
9f:67:b8:9b:75:ac:b7:96:84:1b:90:36:62:d5:84:ce:3d:fa:
0b:3f:fb:40:62:b2:f4:16:b7:c6:f6:6e:00:61:e6:34:88:d9:
46:31:d7:cd:24:12:ef:d8:9e:ba:f7:ff:e9:20:03:91:8a:f5:
d9:44:ea:5a:84:fa:b1:3f:bc:ac:a9:ca:c3:11:7b:45:a5:e4:
66:98:87:99:2d:56:2a:5b:09:1f:f9:14:f6:81:00:cd:2a:5b:
a3:43:6c:66:eb:f1:45:01:19:ed:5b:ad:7a:46:7a:79:9a:ea:
54:9d:16:b2:62:6a:59:20:d5:27:73:cd:1d:88:b4:e9:d3:ab:
20:a5:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:04:55 2025 by rpki-client