Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207314.roa
File: AS207314.roa (raw, json)
Hash identifier: hNnx8JPLa6VTfWyOyZYPYCvg04wfmsSH6VrR/MHSOuM=
Subject key identifier: 39:EF:2C:44:B9:38:3C:1D:32:B5:6B:80:87:EF:FC:5F:0D:7B:33:87
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3B2FE4604AD5103903730020315B79AD9DBA262B
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207314.roa
Signing time: Wed 04 Nov 2026 20:32:52 +0000
ROA not before: Wed 04 Nov 2026 20:27:52 +0000
ROA not after: Wed 03 Nov 2027 20:32:52 +0000
asID: 207314
IP address blocks: 2a0e:8f02:2230::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:2f:e4:60:4a:d5:10:39:03:73:00:20:31:5b:79:ad:9d:ba:26:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:52 2026 GMT
Not After : Nov 3 20:32:52 2027 GMT
Subject: CN=39EF2C44B9383C1D32B56B8087EFFC5F0D7B3387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:25:b9:4a:d5:8f:f0:11:21:92:e7:b1:c6:
0a:6f:e9:f3:6b:19:bb:d6:db:1f:aa:75:63:8f:cc:
80:c0:ad:04:fc:a6:92:74:ec:24:a7:39:87:8f:19:
0c:a2:b7:10:b2:03:00:4f:1c:5d:57:6d:7c:31:7a:
5e:c0:3a:6f:fd:22:1a:e1:5b:1b:d1:92:9a:cf:90:
26:cb:b9:e1:4e:0c:97:84:23:90:f4:93:e0:d0:c3:
76:34:3c:0d:61:3a:7f:eb:a1:0b:09:6e:9e:84:a8:
f6:28:1e:ca:da:13:77:94:28:ac:66:96:b4:4d:8f:
96:24:71:ca:b1:3a:67:22:a7:e2:07:78:c9:1c:17:
fb:6b:2b:a0:a4:7b:f1:4e:c1:07:bf:5e:87:2d:41:
ae:27:ae:15:de:02:44:3d:29:a3:8a:5e:7e:5b:e1:
0a:99:55:fc:d8:af:7e:b4:a3:b5:92:a9:54:20:76:
7f:83:32:a0:b5:14:5b:e1:9b:c5:cd:06:cf:16:8c:
b9:48:43:ee:fb:d3:17:82:72:ab:be:c5:f2:c3:2f:
28:66:fe:af:fe:ec:eb:bd:41:ec:36:66:00:d6:e2:
b1:a5:e1:02:13:04:95:05:52:c0:20:c3:30:9e:06:
2c:a7:79:30:a0:90:f9:58:73:38:a3:34:ad:be:a4:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:2C:44:B9:38:3C:1D:32:B5:6B:80:87:EF:FC:5F:0D:7B:33:87
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2230::/44
Signature Algorithm: sha256WithRSAEncryption
08:21:08:8a:08:30:ae:c5:3b:9c:b3:7b:54:e0:be:5d:fd:b8:
c3:b6:e3:69:45:0f:74:60:42:f7:be:fd:75:62:21:11:36:84:
89:d9:90:d9:0c:e0:cc:2a:f7:7d:4c:8d:a6:c6:9b:06:c6:c1:
a2:55:8a:cb:78:2b:e9:a5:a3:77:f1:82:5e:28:50:44:e3:e5:
49:e5:e9:0b:c7:2b:85:0e:de:5e:39:38:18:b9:41:38:45:ef:
9b:2c:23:5c:73:93:11:6a:64:bc:7d:31:ae:6c:c8:a8:f5:40:
85:ce:33:a2:07:a4:59:b5:d7:ec:8e:1e:e5:f9:79:2d:60:8f:
5e:59:14:af:1d:21:bf:c3:f8:95:a5:a0:4c:1d:7c:1a:93:b9:
4b:da:0d:e7:35:36:1b:36:77:ee:09:c5:de:59:a1:88:02:42:
48:90:60:14:db:d5:bc:2f:3e:e0:9e:14:d4:4c:4f:df:4a:05:
5e:a2:eb:bd:97:25:9c:bc:05:b6:0b:7e:d4:b7:b3:ad:21:cf:
4a:c2:b4:ed:81:ff:cf:0b:83:dc:50:4d:ea:f6:80:f6:37:ef:
97:cf:38:74:c4:10:09:34:e1:c3:84:41:97:09:e7:37:e1:ad:
5d:88:02:48:a7:86:8f:b1:d4:25:c1:94:d3:a5:a9:5f:3d:8b:
e6:31:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:59:39 2026 by rpki-client