Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS201979.roa
File: AS201979.roa (raw, json)
Hash identifier: 6qupbbv4dwHpyvSVS7RA0lHFsqB+AKb4HGUCoBFm7sA=
Subject key identifier: 6E:E2:CC:59:0D:20:D3:75:95:BF:BB:AD:B1:6F:1B:F4:32:BD:B9:BA
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3F4A0A461FD8C19B1B67CC83E7658CE224886D9E
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS201979.roa
Signing time: Wed 04 Nov 2026 20:32:49 +0000
ROA not before: Wed 04 Nov 2026 20:27:49 +0000
ROA not after: Wed 03 Nov 2027 20:32:49 +0000
asID: 201979
IP address blocks: 2a0e:8f02:f04c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 11:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:4a:0a:46:1f:d8:c1:9b:1b:67:cc:83:e7:65:8c:e2:24:88:6d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:49 2026 GMT
Not After : Nov 3 20:32:49 2027 GMT
Subject: CN=6EE2CC590D20D37595BFBBADB16F1BF432BDB9BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:15:74:e9:a0:5b:e7:02:31:48:97:b1:ae:91:
2c:52:2d:52:8a:22:fc:ad:5e:55:84:28:81:55:dd:
c1:92:26:cd:fd:5a:33:21:34:90:33:98:07:48:1c:
15:a8:dd:9f:e1:03:98:5f:d7:26:4e:43:1d:ad:14:
e3:1c:96:6c:97:b7:24:da:09:11:8c:62:ce:8d:6f:
33:cb:87:3e:54:82:e9:6c:ac:ae:f2:22:2f:f4:99:
93:24:d7:2f:21:80:2a:9f:70:a6:0a:bf:52:3c:d6:
e4:d8:76:55:5e:bf:35:48:f6:b0:8d:4b:a2:18:3c:
22:6d:f3:40:ce:2a:bc:59:93:a7:ea:e9:ea:67:98:
9b:e0:5f:8c:9f:20:24:ba:75:d9:06:5d:d2:7f:1e:
48:02:72:65:6a:9d:c6:b4:c6:4d:e6:cc:df:b2:f8:
3e:56:f6:5b:c2:a6:a2:54:18:41:5d:7b:0b:eb:ff:
13:32:35:30:e7:52:b2:44:08:40:a0:b6:b8:03:af:
9b:2a:d6:53:b3:82:e2:05:dd:bc:5c:10:a7:82:88:
cf:b7:4b:d7:e3:19:fa:ca:0c:9b:e7:7a:17:e8:19:
ce:ac:30:4c:c1:86:09:3e:52:96:f0:b8:86:3a:58:
af:5c:b3:97:c8:6a:d9:fc:78:18:6f:1e:d1:21:d7:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:CC:59:0D:20:D3:75:95:BF:BB:AD:B1:6F:1B:F4:32:BD:B9:BA
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS201979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f04c::/48
Signature Algorithm: sha256WithRSAEncryption
29:8a:0f:5b:65:e2:1a:cb:c7:6f:09:ad:61:2c:25:5a:d9:9b:
94:91:c5:7e:5f:92:b1:18:ec:e5:35:0e:99:be:72:a9:44:c3:
e9:3b:02:a8:f2:76:c6:17:ce:05:02:e7:00:8e:12:7c:9e:6f:
cd:e5:1c:bb:28:e8:18:47:a6:40:37:11:c4:cd:6a:a3:0f:cb:
c4:51:51:08:62:65:79:28:e4:01:3d:de:bf:cd:9e:74:e9:8b:
8b:3b:4b:ba:bd:20:ba:cf:bd:7e:2e:ab:c3:df:84:61:13:63:
27:a6:eb:fc:fa:02:a2:29:93:2b:9b:b7:6a:4d:49:94:f4:97:
57:25:52:0b:1a:e7:44:67:c0:51:75:ab:2d:8a:27:90:3f:f1:
cc:3e:f8:2b:34:e1:a1:6a:d5:c9:2b:e9:bc:41:1e:2a:5f:37:
2d:36:70:73:68:2e:c2:55:50:a4:8a:83:34:7a:aa:a1:76:ed:
e6:81:a6:0e:c6:fe:81:28:14:62:6d:93:8d:33:f4:02:e4:66:
bb:fc:09:96:9f:d3:c0:f8:c7:ff:7c:dd:da:9a:1b:95:35:29:
8b:14:b8:4c:d6:75:5d:b6:22:b3:66:22:2a:b4:9e:f7:6a:84:
04:fb:f0:ce:e9:0c:4f:f7:e1:93:3d:81:fe:c7:25:fa:d2:5b:
f8:58:f0:80
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUP0oKRh/YwZsbZ8yD52WM4iSIbZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NDlaFw0yNzExMDMyMDMyNDlaMDMxMTAvBgNV
BAMTKDZFRTJDQzU5MEQyMEQzNzU5NUJGQkJBREIxNkYxQkY0MzJCREI5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwFXTpoFvnAjFIl7GukSxSLVKK
IvytXlWEKIFV3cGSJs39WjMhNJAzmAdIHBWo3Z/hA5hf1yZOQx2tFOMclmyXtyTa
CRGMYs6NbzPLhz5UgulsrK7yIi/0mZMk1y8hgCqfcKYKv1I81uTYdlVevzVI9rCN
S6IYPCJt80DOKrxZk6fq6epnmJvgX4yfICS6ddkGXdJ/HkgCcmVqnca0xk3mzN+y
+D5W9lvCpqJUGEFdewvr/xMyNTDnUrJECECgtrgDr5sq1lOzguIF3bxcEKeCiM+3
S9fjGfrKDJvnehfoGc6sMEzBhgk+UpbwuIY6WK9cs5fIatn8eBhvHtEh1+EHAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUbuLMWQ0g03WVv7utsW8b9DK9ubowHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIwMTk3OS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoO
jwLwTDANBgkqhkiG9w0BAQsFAAOCAQEAKYoPW2XiGsvHbwmtYSwlWtmblJHFfl+S
sRjs5TUOmb5yqUTD6TsCqPJ2xhfOBQLnAI4SfJ5vzeUcuyjoGEemQDcRxM1qow/L
xFFRCGJleSjkAT3ev82edOmLiztLur0gus+9fi6rw9+EYRNjJ6br/PoCoimTK5u3
ak1JlPSXVyVSCxrnRGfAUXWrLYonkD/xzD74KzThoWrVySvpvEEeKl83LTZwc2gu
wlVQpIqDNHqqoXbt5oGmDsb+gSgUYm2TjTP0AuRmu/wJlp/TwPjH/3zd2poblTUp
ixS4TNZ1XbYis2YiKrSe92qEBPvwzukMT/fhkz2B/scl+tJb+FjwgA==
-----END CERTIFICATE-----
Generated at Tue Nov 10 18:54:27 2026 by rpki-client