Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: B2KoeEdIkMw75tJAX2idFY6Y+a+liKYcsh60FOMKu+w=
Subject key identifier: CF:63:1B:CC:74:9C:A9:0B:B0:A0:FC:BC:AA:75:2B:9E:C7:A6:FA:DB
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3359D3EE7BBF4473D9C371A38C64E3D556AC27AD
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207941.roa
Signing time: Wed 04 Nov 2026 20:32:54 +0000
ROA not before: Wed 04 Nov 2026 20:27:54 +0000
ROA not after: Wed 03 Nov 2027 20:32:54 +0000
asID: 207941
IP address blocks: 2a0e:8f02:f048::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:59:d3:ee:7b:bf:44:73:d9:c3:71:a3:8c:64:e3:d5:56:ac:27:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:54 2026 GMT
Not After : Nov 3 20:32:54 2027 GMT
Subject: CN=CF631BCC749CA90BB0A0FCBCAA752B9EC7A6FADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:29:bb:08:5c:6b:9c:d1:26:5e:cc:3b:5e:e8:
3a:47:42:d5:0c:cc:20:86:0c:69:d5:33:87:1f:51:
4b:cf:44:9f:69:f9:56:d9:62:d7:2c:2b:9b:e5:02:
7f:6a:75:a0:6c:be:ee:4c:a0:4c:fe:f3:3d:d9:2f:
5d:4a:d1:49:4c:ac:9c:14:6d:24:96:78:d2:d4:cd:
e3:01:89:7f:dc:09:60:db:39:fc:0f:d2:0b:b1:ba:
34:22:b8:83:10:18:ff:ab:39:8d:f9:3e:26:36:a6:
17:44:b2:5f:39:2b:f8:0a:b7:54:8a:90:ae:a5:a4:
46:4f:47:41:d9:fa:75:ce:f6:75:5c:2a:71:7d:50:
aa:5a:61:69:42:b9:5c:10:7f:ad:40:0b:bf:db:7b:
be:dc:cb:56:7c:67:c7:48:19:16:96:bc:b9:d0:a7:
af:18:a6:9e:c1:2b:6b:df:6c:18:5f:7d:fd:20:5f:
4b:a9:dc:6e:9b:0d:6c:cb:ac:02:8d:ce:46:09:c7:
b6:bc:21:af:2b:45:b7:e6:d6:6b:96:d6:b1:a7:de:
78:6c:5f:13:6e:b7:9b:12:b9:42:a5:a8:d9:51:f4:
cc:e7:d5:05:68:eb:2e:a5:44:c7:0d:59:d1:84:87:
c5:c9:dd:65:4b:7d:9d:88:82:b2:24:52:51:91:a0:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:63:1B:CC:74:9C:A9:0B:B0:A0:FC:BC:AA:75:2B:9E:C7:A6:FA:DB
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f048::/48
Signature Algorithm: sha256WithRSAEncryption
8a:37:4b:16:49:e5:23:ee:06:1a:55:7a:2f:a0:99:bd:a1:25:
18:56:bc:dc:64:4e:4c:db:09:cf:cd:d7:d0:ed:27:27:76:23:
ff:43:bd:7e:e9:71:e9:04:67:68:ba:d5:64:63:96:3c:21:8b:
25:47:a9:ad:27:a5:45:82:99:d5:f4:02:01:ed:6f:f1:9a:70:
2e:c7:0a:3a:eb:51:55:47:96:4d:37:1f:03:ce:40:ee:7d:50:
a5:d6:7a:42:78:aa:07:8d:9d:95:27:bc:cb:a9:b8:00:4d:18:
de:6e:b6:d5:a0:ef:81:2d:e7:0a:22:9c:87:ff:0d:63:e9:92:
5e:02:9e:77:52:7c:d2:d2:df:8b:53:ec:a1:b2:43:b3:6d:2f:
72:97:cc:7c:93:f3:e2:4d:2c:72:b3:0a:79:5f:51:6b:e2:85:
b4:00:1b:d0:15:09:7a:dc:16:f1:e7:3d:2f:a0:f3:1e:5a:f7:
f8:cf:3a:b6:27:69:83:c2:97:17:0a:01:73:5a:61:3b:fd:f3:
c2:b7:df:d8:10:eb:66:e6:98:b7:9e:ac:26:9a:88:a8:5a:de:
11:37:a9:9e:44:22:88:76:fd:cc:26:de:df:a1:85:a6:0a:6b:
a9:08:90:8b:2d:09:f1:05:e9:01:77:4c:46:50:d0:84:b7:df:
8d:4b:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:50:14 2026 by rpki-client