Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS206477.roa
File: AS206477.roa (raw, json)
Hash identifier: lYwDWAftheI/DMIuCRfEDCepaXRQ4n3FsrgxajX1Uto=
Subject key identifier: 9C:4A:27:77:4B:3D:22:FD:67:2E:98:57:EB:A5:EC:73:1B:3C:E2:1C
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 040EC9F250CEAAD0E6B4F9E6D08F06CE1BE9C94A
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS206477.roa
Signing time: Wed 04 Nov 2026 20:32:48 +0000
ROA not before: Wed 04 Nov 2026 20:27:48 +0000
ROA not after: Wed 03 Nov 2027 20:32:48 +0000
asID: 206477
IP address blocks: 2a0e:8f02:f02b::/48 maxlen: 48
2a0e:8f02:f02c::/48 maxlen: 48
2a0e:8f02:f02d::/48 maxlen: 48
2a0e:8f02:f02e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:0e:c9:f2:50:ce:aa:d0:e6:b4:f9:e6:d0:8f:06:ce:1b:e9:c9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:48 2026 GMT
Not After : Nov 3 20:32:48 2027 GMT
Subject: CN=9C4A27774B3D22FD672E9857EBA5EC731B3CE21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:b3:09:94:58:7a:b4:5a:e8:74:ba:c4:16:
7e:b5:79:a3:26:b7:70:87:7e:37:54:97:2f:5b:1a:
64:eb:7c:27:8a:8b:d5:e3:78:bb:38:95:b6:de:a5:
87:95:86:32:82:ff:fe:04:ad:cb:f8:13:ca:1a:89:
52:f0:fe:0a:b6:ca:5a:f1:3a:3e:e7:47:c3:0e:f7:
7d:0e:16:53:f4:d1:26:8e:ff:88:00:92:70:81:5b:
43:59:d6:3e:8d:0a:2a:55:dd:f3:66:c2:a9:50:80:
99:e8:e8:e6:11:bf:39:8e:91:a0:cc:ef:fc:00:0b:
a5:00:f3:ee:4e:00:4b:ad:3f:60:c0:06:e4:62:db:
a6:d8:74:4e:ce:c3:06:c7:87:b9:0e:e8:31:fa:34:
e4:c4:1e:70:ee:5c:35:86:77:1f:4a:2b:ee:aa:ad:
2a:36:ef:e9:79:b8:b4:ca:39:31:0e:ba:18:00:a9:
07:27:64:e0:b9:e9:e2:11:ff:c8:ba:b3:27:ed:2b:
ff:f7:30:59:ae:0d:d7:95:84:e8:f4:19:03:71:89:
86:da:e1:a4:cf:f8:00:5d:fd:35:b4:72:09:b7:cc:
56:57:91:65:f5:af:78:b3:bb:ea:92:2b:3d:1f:75:
47:2e:0d:b1:10:c3:31:16:01:4b:36:ae:eb:74:aa:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4A:27:77:4B:3D:22:FD:67:2E:98:57:EB:A5:EC:73:1B:3C:E2:1C
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS206477.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f02b::-2a0e:8f02:f02e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
73:32:4b:c5:0c:e3:fd:3b:83:8f:23:0b:0d:2c:46:5d:28:8c:
5f:f1:8e:ef:b7:52:60:c4:e8:34:a9:09:96:58:86:66:ce:d8:
40:f0:91:cd:b1:f4:bb:31:28:60:a8:85:67:a1:7c:63:01:65:
4e:7b:bc:60:a2:a5:c1:a7:bf:0b:14:5a:48:e8:5a:5a:d9:5c:
a8:b9:f8:99:29:c9:77:95:ba:36:63:2c:21:d1:f0:51:c3:5d:
61:35:11:01:e4:4f:fc:8c:12:45:e2:7e:65:73:26:f0:4d:9c:
b8:5f:07:1d:68:ba:09:de:69:2c:cc:9b:b4:0d:32:c4:01:c1:
40:b2:ae:17:37:5a:f0:42:f2:91:48:5f:fc:d5:cd:5d:a0:89:
0e:e6:e0:6c:7b:c3:eb:90:c5:86:fc:ca:e3:3f:b9:e0:85:8f:
8e:15:a9:a3:d7:d7:97:d4:f4:e5:51:7d:b7:8c:fd:f2:65:f1:
5b:37:7c:2f:e9:78:55:61:09:c5:28:1d:35:a7:6d:85:af:f7:
8f:ad:0c:8c:5d:c7:35:b6:75:c9:e7:d9:46:aa:06:a6:50:8d:
d9:6a:fc:86:64:ca:3a:b3:81:b6:d8:00:0f:4f:ed:bc:0f:35:
e1:08:92:68:75:39:b3:fb:ab:e2:66:3e:9b:59:95:53:b0:79:
9a:41:3e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:37:00 2026 by rpki-client