Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209554.roa
File: AS209554.roa (raw, json)
Hash identifier: nPacaYSg56VR2CLLjTnxlyYHFLWTBqxMe1NvjltnF/c=
Subject key identifier: 8F:E0:7D:D3:3F:98:DE:F5:AD:F1:3D:06:41:46:2E:8D:3A:EF:1A:6F
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 70D5CFBFAB52C18481EE1BE8F0E0027279BF4515
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209554.roa
Signing time: Fri 29 Aug 2025 07:51:42 +0000
ROA not before: Fri 29 Aug 2025 07:46:42 +0000
ROA not after: Fri 28 Aug 2026 07:51:42 +0000
asID: 209554
IP address blocks: 2a14:7581:a000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 13:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d5:cf:bf:ab:52:c1:84:81:ee:1b:e8:f0:e0:02:72:79:bf:45:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 29 07:46:42 2025 GMT
Not After : Aug 28 07:51:42 2026 GMT
Subject: CN=8FE07DD33F98DEF5ADF13D0641462E8D3AEF1A6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:da:63:d6:1b:05:6f:36:77:48:b3:d6:36:
cb:67:d7:b6:45:64:ae:6c:8d:c8:14:63:03:b2:cd:
c3:4a:96:c7:39:fa:d9:e6:7f:3a:ba:f7:a4:6b:77:
61:51:f7:5b:a3:05:f6:74:fa:d1:25:62:04:f9:6b:
cf:e2:2f:9b:c0:e7:4e:61:d2:a1:af:5f:8c:87:b5:
3e:7e:0a:a6:4b:b4:5c:bd:59:e6:59:45:41:8a:b4:
bd:26:fd:16:5e:b2:04:3d:2a:7c:a8:92:e3:02:01:
e3:da:6d:5f:29:12:05:6f:0e:83:8b:8d:68:0d:f3:
31:22:c2:88:64:26:43:8a:ea:3e:99:d5:4c:72:c8:
a8:6c:8c:1c:81:b4:86:63:23:03:fd:92:c9:b2:f2:
87:68:5f:52:95:fd:73:e6:24:17:e9:1d:31:4b:d0:
e3:6c:9e:c0:ca:86:d9:b9:f6:bc:7c:e7:d5:29:ad:
f1:36:05:e1:a1:3c:0f:a6:c0:69:37:40:b2:9c:77:
b2:1e:a0:67:39:80:9c:91:ad:6c:09:5a:71:64:73:
9f:62:c0:ad:2c:af:eb:9d:70:b1:65:f6:98:6e:a7:
29:75:4d:60:dd:3d:91:97:50:43:28:a8:86:5e:74:
45:ef:30:8d:89:90:e9:09:16:12:ac:b6:04:a8:66:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E0:7D:D3:3F:98:DE:F5:AD:F1:3D:06:41:46:2E:8D:3A:EF:1A:6F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209554.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:a000::/36
Signature Algorithm: sha256WithRSAEncryption
58:cf:0c:f7:34:49:71:a7:8b:f2:80:80:61:6a:d4:cc:83:02:
b5:84:6d:d4:01:b3:4d:8c:4e:a2:a7:ad:71:04:ed:72:1b:3f:
45:e0:06:c1:d6:3e:9b:e6:f6:91:7a:b4:cb:ae:67:20:3e:2e:
6e:36:f8:5e:1e:5c:8f:ec:e0:9c:41:27:68:f9:1b:21:6b:a9:
ca:e8:78:eb:59:2d:2f:77:5a:33:25:89:dd:e1:f2:10:ff:b8:
a6:13:f3:b8:b6:fb:a4:86:f9:59:d0:f3:2d:2b:00:47:83:ae:
5b:c7:5c:88:55:dc:75:36:21:a2:dc:df:e1:a2:2a:86:e9:37:
8b:2b:f9:1d:14:a0:c6:94:47:ee:d4:43:f9:32:6f:2b:00:87:
e0:1d:66:f5:f5:74:e9:b1:c4:7f:ba:45:ec:d8:e4:5e:45:6d:
ee:4e:74:bd:48:6e:69:c4:72:8d:73:bc:0c:87:29:77:d7:fc:
c4:29:eb:c0:ac:ff:d6:a4:34:89:ef:d1:e4:2d:49:05:0d:8c:
a8:55:e6:50:5c:ac:e6:6a:02:6f:87:e0:31:a9:8e:d3:2f:8b:
88:c1:88:13:7f:41:31:3f:f2:ed:23:ee:f3:ef:d6:93:ea:a8:
8a:eb:8b:66:8d:fb:35:f5:c3:03:2b:9c:79:8c:d5:c2:e1:7d:
91:46:2e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:21:06 2025 by rpki-client