Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209866.roa
File: AS209866.roa (raw, json)
Hash identifier: txo+3KpzxTIT2Z+CEkLwEgbDaDjLzww1gj7nNdnFV+o=
Subject key identifier: 87:FC:BB:EA:D1:EE:58:E9:53:2C:4F:DF:69:49:14:14:15:DF:1A:12
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2FC13F794B2F6EAF1E5BCD927B3C30E27BE64B6C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209866.roa
Signing time: Tue 12 May 2026 23:08:35 +0000
ROA not before: Tue 12 May 2026 23:03:35 +0000
ROA not after: Tue 11 May 2027 23:08:35 +0000
asID: 209866
IP address blocks: 2a0f:85c1:c62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c1:3f:79:4b:2f:6e:af:1e:5b:cd:92:7b:3c:30:e2:7b:e6:4b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 12 23:03:35 2026 GMT
Not After : May 11 23:08:35 2027 GMT
Subject: CN=87FCBBEAD1EE58E9532C4FDF6949141415DF1A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:4e:07:cb:3a:11:25:df:0f:c5:70:76:7f:
91:d1:75:cf:fe:16:c8:20:35:dd:b3:9c:5d:c8:1a:
7d:47:7d:74:c4:84:93:e2:ef:20:bd:57:7b:c8:f8:
10:8b:4d:11:ea:a4:de:93:7d:6b:33:88:4e:49:fe:
14:c4:37:71:12:bd:c4:75:65:7c:27:af:d9:b3:43:
db:bf:b5:ea:3d:95:c9:02:65:73:d7:41:fc:4a:0c:
23:3a:aa:b5:72:46:a7:4c:0b:bd:2a:28:99:1e:22:
be:0e:2c:03:17:f3:33:d7:ee:56:5f:a1:d2:a1:66:
57:f7:f2:b6:df:26:bd:2a:39:19:33:9d:c2:52:ae:
4d:2a:50:9e:3f:70:4d:c3:59:21:ef:3b:72:7e:80:
70:68:d3:e0:c3:6f:79:3f:b9:93:07:0f:4f:1b:7a:
3b:4d:df:1b:eb:8e:29:be:d4:da:53:e1:88:d0:1e:
8e:9b:8a:22:12:0d:25:d4:00:94:e8:28:39:cd:fd:
cf:3c:2c:bf:60:f4:8f:0a:00:4f:38:dd:c9:86:4c:
ba:c8:e7:88:30:68:95:ca:b8:d6:b7:47:6a:56:bb:
35:d9:20:20:33:71:5b:7c:57:d3:8f:82:06:1c:09:
30:61:1a:da:e3:44:ad:8e:cb:4e:a9:42:15:be:f6:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FC:BB:EA:D1:EE:58:E9:53:2C:4F:DF:69:49:14:14:15:DF:1A:12
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c62::/48
Signature Algorithm: sha256WithRSAEncryption
c5:1c:9b:72:78:f2:1d:5c:15:35:2b:9a:8c:fa:94:9f:1f:c9:
ca:2a:25:d2:e5:19:b5:75:e6:b7:cb:5c:9d:58:6f:f6:54:d7:
4a:9b:fe:61:c6:8c:fe:ca:db:69:7b:ec:30:ad:28:e1:68:6c:
27:3a:be:4b:54:4e:d1:ea:e3:b3:24:75:ef:21:18:01:15:e4:
fe:5f:cf:fe:fe:9e:aa:43:5c:0d:52:51:6c:90:3f:34:69:9a:
7f:3f:48:df:5c:ea:2f:89:55:74:6d:e5:1b:07:d0:3f:f3:58:
51:3b:e9:f1:56:d7:9f:81:80:0e:76:84:fb:c5:ff:bd:bd:cd:
cf:3f:2f:06:57:fc:92:ba:11:47:55:b7:5c:34:61:e8:d9:32:
3e:f4:92:6e:c2:b7:6a:4f:16:bd:e7:47:29:79:4c:0e:e6:e8:
28:8b:98:dd:34:0d:f8:98:08:53:c3:70:7b:f3:ef:ef:b9:33:
16:86:fb:1e:e4:57:d5:3a:a1:44:a3:2b:65:3b:a5:be:dc:bd:
b1:a5:63:65:1b:c4:65:95:6c:7e:97:ea:0e:7e:ae:f0:62:8a:
f7:ef:2f:3d:09:40:6b:60:65:76:76:f5:8a:d7:c4:15:36:f3:
6e:5e:b7:1a:fc:91:f4:de:d5:bd:e3:ff:15:be:16:03:53:c5:
72:38:09:16
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUL8E/eUsvbq8eW82Sezww4nvmS2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA1MTIyMzAzMzVaFw0yNzA1MTEyMzA4MzVaMDMxMTAvBgNV
BAMTKDg3RkNCQkVBRDFFRTU4RTk1MzJDNEZERjY5NDkxNDE0MTVERjFBMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Sk4HyzoRJd8PxXB2f5HRdc/+
FsggNd2znF3IGn1HfXTEhJPi7yC9V3vI+BCLTRHqpN6TfWsziE5J/hTEN3ESvcR1
ZXwnr9mzQ9u/teo9lckCZXPXQfxKDCM6qrVyRqdMC70qKJkeIr4OLAMX8zPX7lZf
odKhZlf38rbfJr0qORkzncJSrk0qUJ4/cE3DWSHvO3J+gHBo0+DDb3k/uZMHD08b
ejtN3xvrjim+1NpT4YjQHo6biiISDSXUAJToKDnN/c88LL9g9I8KAE843cmGTLrI
54gwaJXKuNa3R2pWuzXZICAzcVt8V9OPggYcCTBhGtrjRK2Oy06pQhW+9pibAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUh/y76tHuWOlTLE/faUkUFBXfGhIwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA5ODY2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQxiMA0GCSqGSIb3DQEBCwUAA4IBAQDFHJtyePIdXBU1K5qM+pSfH8nKKiXS5Rm1
dea3y1ydWG/2VNdKm/5hxoz+yttpe+wwrSjhaGwnOr5LVE7R6uOzJHXvIRgBFeT+
X8/+/p6qQ1wNUlFskD80aZp/P0jfXOoviVV0beUbB9A/81hRO+nxVtefgYAOdoT7
xf+9vc3PPy8GV/ySuhFHVbdcNGHo2TI+9JJuwrdqTxa950cpeUwO5ugoi5jdNA34
mAhTw3B78+/vuTMWhvse5FfVOqFEoytlO6W+3L2xpWNlG8RllWx+l+oOfq7wYor3
7y89CUBrYGV2dvWK18QVNvNuXrca/JH03tW94/8VvhYDU8VyOAkW
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:04:07 2026 by rpki-client