Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207884.roa
File: AS207884.roa (raw, json)
Hash identifier: DN8qgekQO0oTrR+Vmt3ayPebUUYYeyb9KF601e40Uv8=
Subject key identifier: 52:B3:35:17:66:78:0D:8E:05:02:21:0A:C1:2F:06:44:D6:56:5A:D5
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 442DA4E05E40FC8B6B86653A43353444C9A04917
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207884.roa
Signing time: Wed 04 Nov 2026 20:32:55 +0000
ROA not before: Wed 04 Nov 2026 20:27:55 +0000
ROA not after: Wed 03 Nov 2027 20:32:55 +0000
asID: 207884
IP address blocks: 2a0e:8f02:f004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2d:a4:e0:5e:40:fc:8b:6b:86:65:3a:43:35:34:44:c9:a0:49:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:55 2026 GMT
Not After : Nov 3 20:32:55 2027 GMT
Subject: CN=52B3351766780D8E0502210AC12F0644D6565AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:ef:f2:d7:a4:98:03:69:7d:ad:e4:ed:74:
d2:ef:ec:eb:2f:b0:13:4c:61:eb:d1:1d:aa:42:42:
6a:51:38:7c:79:00:a8:f5:0f:60:dc:8a:2d:ff:42:
73:40:dc:ce:e2:70:29:64:05:77:45:4b:6e:2e:e4:
fb:e5:9c:b5:f6:40:00:37:95:b0:05:4e:c7:d4:12:
0f:37:77:e3:48:28:61:e0:78:02:2d:48:f9:9a:09:
51:65:6d:8a:c8:14:8a:4a:5a:76:c1:3a:b8:2e:85:
99:68:2c:45:9a:26:50:be:cf:2b:f9:20:14:1d:13:
74:ee:5f:ba:be:ae:6e:13:ac:74:17:a1:39:be:44:
04:42:da:fc:93:23:60:6a:48:e7:17:94:d0:2b:6d:
c3:7c:a8:b2:2a:aa:b3:2f:50:0b:6b:20:c1:04:7f:
22:92:d5:f3:b1:a0:e2:20:26:17:a3:72:9f:09:20:
52:91:33:6b:8c:a3:ae:5b:de:6f:e7:17:5a:b0:fd:
6b:63:c4:c0:43:bf:d8:24:f7:75:cb:85:7e:bb:9e:
8b:5c:35:57:f4:6c:ca:bc:44:60:b2:f8:3e:52:82:
b9:5f:e6:8d:5a:6e:53:80:5a:a4:f6:a6:d9:5d:14:
e8:d3:7d:c1:0a:7c:29:fe:6a:e4:22:4e:6d:13:33:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:35:17:66:78:0D:8E:05:02:21:0A:C1:2F:06:44:D6:56:5A:D5
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207884.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f004::/48
Signature Algorithm: sha256WithRSAEncryption
73:91:46:08:da:53:af:f9:34:dd:ea:52:63:ae:e0:42:ad:13:
ed:92:52:e3:29:47:57:8e:6a:ae:e5:18:fc:64:ba:82:1c:93:
54:90:58:39:5d:4c:51:7f:c3:9a:8c:ef:37:90:c4:91:3f:79:
fa:99:2a:dd:7c:30:f5:20:bc:4c:c5:e8:13:a0:a3:62:b8:5a:
50:29:e6:ff:56:6c:79:90:78:97:70:fe:7e:c9:51:da:d8:44:
c6:4a:ca:7d:c4:a3:61:92:62:15:f6:17:1f:53:2c:78:53:61:
37:17:1d:a9:33:a4:76:e0:e9:82:5e:56:75:59:1f:93:d1:ca:
5c:e1:26:fe:96:0e:b5:35:67:10:ab:2c:45:f1:a9:b9:38:83:
9f:0e:93:fb:3e:d1:59:09:c4:83:07:c0:0a:a6:a5:bf:2a:06:
81:b7:19:93:6c:a5:57:3f:cd:d2:73:53:93:80:0c:a1:b3:4e:
08:ba:c1:20:49:95:d2:e2:62:43:92:c7:77:c4:84:28:99:17:
23:29:b5:73:74:b8:71:42:29:8d:01:12:8b:35:61:2c:e7:9c:
87:be:99:07:65:04:69:ba:36:67:4d:39:ab:5c:94:ea:aa:e1:
2b:ee:fb:5e:ef:9e:6f:14:5f:f0:46:09:48:94:81:17:ee:57:
49:2d:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:55:31 2026 by rpki-client