Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207590.roa
File: AS207590.roa (raw, json)
Hash identifier: qnjle2GxhHOZbnq3DKuQw1RZfY+LQ9kXV8ssBjAkxn8=
Subject key identifier: 9B:4A:AD:D4:43:FE:52:F3:8E:39:5D:48:3E:1E:EF:DC:71:90:E1:46
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 04878A819848DE6B6A99923FD29467B1F897A493
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207590.roa
Signing time: Fri 05 Jun 2026 10:37:59 +0000
ROA not before: Fri 05 Jun 2026 10:32:59 +0000
ROA not after: Fri 04 Jun 2027 10:37:59 +0000
asID: 207590
IP address blocks: 96.62.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:87:8a:81:98:48:de:6b:6a:99:92:3f:d2:94:67:b1:f8:97:a4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 5 10:32:59 2026 GMT
Not After : Jun 4 10:37:59 2027 GMT
Subject: CN=9B4AADD443FE52F38E395D483E1EEFDC7190E146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:53:62:e5:ac:d2:6c:01:2f:96:a0:df:60:
e7:e3:ba:85:82:4e:c4:88:dc:7b:9f:96:3f:51:8e:
67:cf:4a:b1:3c:1a:9b:fb:c7:e6:70:b2:95:cb:87:
ae:58:2c:77:7e:3f:46:cd:f9:94:3a:43:96:85:9d:
a1:c6:15:d3:da:df:5d:19:c3:9c:17:bf:d3:c2:df:
b3:2a:0a:57:b4:c6:04:19:69:67:6a:01:80:3f:84:
90:d1:c5:c9:a3:63:15:73:8f:a4:7c:30:1a:18:6f:
77:e5:41:2d:76:63:4c:2b:57:84:af:85:a0:61:5c:
92:0a:7c:31:67:00:9a:05:11:96:7f:54:8d:f0:fb:
f2:34:bf:59:4b:38:f1:a8:66:0b:8b:f5:e2:1e:0f:
ba:7e:f8:63:36:0c:b8:dc:6e:b9:7e:0a:69:21:61:
7d:62:45:39:0e:3f:bd:0d:57:25:4e:8b:1d:df:c2:
18:ce:75:32:32:d4:bc:1e:e6:a2:95:f5:e8:42:b9:
2b:3e:b8:c2:f2:32:14:56:d5:83:42:7a:eb:68:38:
f5:17:ea:22:39:6b:48:1e:56:a5:94:50:de:47:18:
f1:51:1c:2c:e0:4d:1d:3f:ff:fe:cb:55:37:10:c0:
2f:0a:2b:0a:2c:cf:21:4b:65:3c:5b:15:dc:a7:ed:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:AD:D4:43:FE:52:F3:8E:39:5D:48:3E:1E:EF:DC:71:90:E1:46
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207590.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.101.0/24
Signature Algorithm: sha256WithRSAEncryption
91:35:fc:06:18:8d:b1:3b:db:f7:9f:13:4e:ae:eb:85:b1:84:
18:2e:7d:e4:8b:d4:80:f9:ab:ba:a9:d0:04:d2:64:6e:71:e3:
f6:cc:c8:3a:5f:dd:ed:61:1f:5c:90:4d:18:ac:77:79:42:63:
7e:96:82:a7:5f:39:ce:5b:13:d1:b9:68:0a:64:8a:e9:7a:1b:
7e:df:8c:9e:9a:e5:ef:e8:e0:39:8c:9b:d0:28:48:31:64:74:
24:f3:7b:06:1d:7b:b1:8e:b4:f3:9e:3f:df:73:27:7f:d0:0f:
13:f8:d1:a1:47:ea:a9:0e:ae:b3:82:fc:05:6a:94:18:eb:c6:
93:af:d3:2a:54:04:0c:8d:98:a7:85:9f:f8:4e:b5:0f:77:3a:
e1:bf:ac:df:7a:7d:2e:94:fa:de:a4:74:1e:14:fe:15:81:b1:
14:77:bd:e8:5c:5b:fa:7d:47:f4:ec:ef:1b:db:d3:f8:7a:1f:
82:5c:7f:46:7d:50:f9:f0:37:f9:5a:64:4c:78:81:70:09:51:
97:79:ae:d3:7a:a5:35:f1:6b:d8:49:ab:1e:2b:d0:82:bc:f9:
d5:7d:86:d8:3e:46:1f:c7:b3:39:81:a5:41:1b:5c:b7:aa:50:
85:f2:d3:c8:3c:48:d7:4c:fe:b4:9c:e1:0a:75:95:c8:96:e6:
67:db:c8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:37:55 2026 by rpki-client