Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208690.roa
File: AS208690.roa (raw, json)
Hash identifier: wsLzxr7OF8A0DP52tUHWpBLJxALoiUG03zkzf2/I/Dw=
Subject key identifier: 02:71:C4:29:6B:8D:8C:B7:3F:4F:D2:0A:35:6E:2B:85:6A:6A:46:DF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 65A65BBB9CF49DC4CE213E727DC039FBF9342B14
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208690.roa
Signing time: Mon 14 Sep 2026 20:17:29 +0000
ROA not before: Mon 14 Sep 2026 20:12:29 +0000
ROA not after: Mon 13 Sep 2027 20:17:29 +0000
asID: 208690
IP address blocks: 213.109.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a6:5b:bb:9c:f4:9d:c4:ce:21:3e:72:7d:c0:39:fb:f9:34:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 14 20:12:29 2026 GMT
Not After : Sep 13 20:17:29 2027 GMT
Subject: CN=0271C4296B8D8CB73F4FD20A356E2B856A6A46DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:18:ba:4a:65:96:ce:cd:0e:8e:72:7e:76:
d1:6c:93:4c:fd:79:25:e2:54:7d:57:a7:34:7d:33:
e9:e0:b2:cb:15:e3:de:56:80:4e:ca:b8:88:c4:08:
2d:e6:eb:38:0e:78:e6:98:a7:6d:04:e7:83:64:af:
00:be:69:ed:b7:33:5c:6a:31:65:b1:3a:b6:65:21:
66:45:5e:d4:6f:10:59:ef:d0:50:9e:97:bb:35:33:
66:f1:ff:d0:c7:26:f4:eb:88:a7:4d:95:e5:e8:ae:
76:53:05:5d:db:22:84:8b:3a:dc:cc:88:46:82:12:
f3:19:7a:13:6a:7c:c2:f4:11:f2:1e:35:9f:d7:c9:
15:69:9f:e7:4e:92:bd:7d:91:7f:04:aa:8f:f0:7d:
6d:dd:94:7a:a1:32:b1:c8:a8:81:c0:99:9e:02:16:
60:e5:43:b2:cc:2c:63:6b:53:a8:51:fd:57:8b:22:
5a:9c:bd:c0:72:7c:8a:c2:97:4e:98:e3:bd:14:2a:
41:b9:17:0d:7f:ca:67:2d:ac:4e:d8:46:a8:29:f9:
c3:ff:22:83:8d:ec:59:08:81:27:e1:19:7e:b8:0f:
53:7a:ac:74:46:b2:b4:02:24:a8:8f:60:81:2d:9c:
07:15:ef:cc:af:3f:c6:3d:bb:3d:6f:f0:95:1f:75:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:C4:29:6B:8D:8C:B7:3F:4F:D2:0A:35:6E:2B:85:6A:6A:46:DF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:15:17:19:ab:4e:a7:ae:7a:de:7b:9b:cf:ee:85:8b:50:ec:
1a:38:7a:3b:ae:9b:52:21:18:a6:16:bc:e3:5c:0a:df:69:22:
3b:d4:3c:95:0b:01:a9:4c:59:17:92:95:d2:ee:59:09:41:fe:
da:32:4d:40:ae:5f:8f:bd:3d:0c:68:46:4f:ab:7e:df:b3:39:
ec:da:5e:b2:75:9c:46:c9:3b:4f:22:11:5c:0e:89:79:a2:78:
5c:9c:7f:05:2a:71:ca:12:a5:14:a2:04:80:38:61:6d:b4:e0:
0a:1c:ab:47:d4:3f:6a:47:09:33:36:77:a9:64:b1:f0:a3:e4:
37:c7:10:d7:4c:fd:bf:fd:70:62:82:44:73:79:f0:0f:1d:fb:
e5:2c:b5:0e:26:1c:eb:34:be:31:ba:87:2a:6b:5c:be:d9:0a:
67:b3:83:56:0b:df:45:ed:53:b4:89:3f:0f:2e:20:6e:53:86:
9a:2e:ff:b3:52:11:fc:c8:4a:95:bd:3f:4a:e7:c2:60:18:a7:
fe:a6:bb:2b:e5:be:b5:cf:c2:5c:46:a2:ff:48:ae:f9:24:22:
fb:44:19:2c:b4:27:14:a9:0f:1f:d6:26:d2:4d:01:f6:7a:7a:
cd:e2:a3:86:29:83:13:8f:5e:1b:70:01:f6:37:99:15:ab:38:
49:0f:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:30:43 2026 by rpki-client