Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209861.roa
File: AS209861.roa (raw, json)
Hash identifier: CpL1x3x5EbVrCavzX1J8MzZwH4WqDs4kf1aEfw5CoyQ=
Subject key identifier: 53:ED:30:65:B2:91:68:8D:D0:D6:48:2C:51:97:F5:59:12:59:33:BB
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0F15128A04AECDD98934EC2590C3EF4210CA764D
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209861.roa
Signing time: Fri 28 Aug 2026 07:49:30 +0000
ROA not before: Fri 28 Aug 2026 07:44:30 +0000
ROA not after: Fri 27 Aug 2027 07:49:30 +0000
asID: 209861
IP address blocks: 143.20.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 20:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:15:12:8a:04:ae:cd:d9:89:34:ec:25:90:c3:ef:42:10:ca:76:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 28 07:44:30 2026 GMT
Not After : Aug 27 07:49:30 2027 GMT
Subject: CN=53ED3065B291688DD0D6482C5197F559125933BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:4f:53:1d:39:61:60:7d:e1:7b:20:06:da:
2b:90:6d:64:16:54:a7:55:fa:9b:32:a8:64:d6:74:
7c:27:2a:ed:8a:1d:2f:5f:3c:f7:1f:1a:8f:fa:6e:
2e:0f:fd:50:1d:9c:86:3c:2f:5d:47:13:6f:bc:b3:
46:e6:9e:85:a8:a3:74:aa:8f:6d:8f:b8:e2:3d:55:
81:56:27:99:06:b9:c2:84:c9:18:48:8a:e2:6a:5f:
c9:6b:7e:a3:30:23:0a:42:2c:7d:4b:d3:dc:20:89:
a5:f3:c2:a7:8b:cd:b1:4a:0d:05:67:38:70:fe:40:
db:ff:f1:32:87:f5:d2:5d:09:88:04:52:3c:34:1d:
e4:06:ce:90:4c:5a:0b:1a:1e:93:ce:1b:60:4b:4d:
91:c7:14:00:9b:c8:65:09:bb:54:a5:5d:25:bc:d1:
21:c2:e5:ce:4a:32:0e:65:9e:d0:13:61:e3:1a:a4:
96:c4:ac:47:2e:9e:b5:34:df:6e:2a:99:f8:8c:6d:
e4:f8:80:69:e6:30:70:12:49:6e:b5:c4:60:2b:b2:
af:bd:76:80:11:41:07:3b:13:81:90:f6:69:4b:39:
10:f4:fd:76:95:ba:5c:8d:7b:5c:21:83:96:98:4b:
00:27:85:29:40:e4:c5:91:8d:12:d9:9d:63:40:67:
20:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:30:65:B2:91:68:8D:D0:D6:48:2C:51:97:F5:59:12:59:33:BB
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209861.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.75.0/24
Signature Algorithm: sha256WithRSAEncryption
be:2c:3e:c8:b5:a8:1f:39:1e:69:44:6f:a0:19:9a:89:de:77:
c7:49:b1:e9:d6:37:f7:a9:80:f6:39:8a:e8:69:88:47:a8:22:
45:7c:db:13:40:bf:1f:30:b4:5c:31:78:9e:45:35:73:78:02:
f4:df:5c:aa:02:1e:4d:ac:71:cd:ad:cc:8e:6b:21:2e:a5:dc:
88:ae:c6:d5:11:65:91:6c:a8:2e:2e:f4:33:eb:fb:68:91:d5:
4c:ee:3f:b1:04:ab:7d:87:85:45:8a:a2:f8:f5:3f:8a:7e:55:
6a:3f:6f:fe:d0:93:85:25:d3:b4:9a:e9:5b:7b:f1:d3:6c:3d:
bf:06:97:e4:40:2e:82:da:47:08:7f:f0:5c:1b:a1:12:c7:be:
ca:e7:01:35:26:0d:d2:41:c1:19:e9:a2:5e:df:f6:1c:e6:65:
35:e3:a6:2a:25:08:a6:3b:1b:79:63:41:9b:70:c3:0a:c8:e1:
e1:8d:e1:e2:b6:5f:e3:16:48:b0:9f:a9:35:14:68:9c:ae:90:
a8:e8:a0:b9:ab:d0:dd:c3:6d:e6:f4:b3:06:1e:92:7a:4e:af:
5a:ff:bb:d4:3a:15:3c:15:e7:49:c5:77:48:7d:1d:da:45:1a:
ef:25:b3:23:18:21:d6:22:11:ad:aa:e8:46:37:a0:5b:5a:bb:
ec:bc:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:10:22 2026 by rpki-client