Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS208510.roa
File: AS208510.roa (raw, json)
Hash identifier: jR3wFeZswE9TAOwpzzIYASc9HMadvh50uSYnLIuTwZk=
Subject key identifier: DF:4B:84:A9:12:ED:85:D3:B1:B2:2C:45:97:8A:BE:6B:CD:0D:4B:75
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 2F3AEE79872049F8BC0F0691D8492E2C41129C46
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS208510.roa
Signing time: Wed 04 Nov 2026 20:32:52 +0000
ROA not before: Wed 04 Nov 2026 20:27:52 +0000
ROA not after: Wed 03 Nov 2027 20:32:52 +0000
asID: 208510
IP address blocks: 185.86.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3a:ee:79:87:20:49:f8:bc:0f:06:91:d8:49:2e:2c:41:12:9c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:52 2026 GMT
Not After : Nov 3 20:32:52 2027 GMT
Subject: CN=DF4B84A912ED85D3B1B22C45978ABE6BCD0D4B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:dd:50:c4:17:58:e0:6c:c4:5f:5b:dc:20:
38:1e:d2:3d:dd:b4:70:69:a0:cd:05:f6:82:15:03:
22:d4:b9:35:6c:86:74:ca:2d:60:c3:9d:2e:5e:f3:
96:2a:70:df:26:41:c6:c2:e4:80:ca:10:18:0c:b2:
c0:6b:ea:98:64:37:18:14:11:d2:58:84:32:fa:b6:
a7:1f:77:ff:a3:8f:e6:50:95:01:ff:49:10:4e:40:
18:ce:e7:13:f1:2b:0c:97:eb:a5:08:2c:81:65:7d:
f7:82:16:1b:68:f1:d1:45:4b:01:af:2c:a4:c4:04:
d1:4f:5a:a1:ec:cd:fd:c1:d8:57:ec:4c:28:c2:f1:
06:33:a2:09:23:ce:87:fd:59:2f:8f:2e:63:a2:0a:
3f:b4:a2:bd:5c:f5:d3:e0:69:c5:2e:bf:db:a3:60:
e1:03:ce:d8:2c:90:04:fa:f8:ba:33:08:46:8b:35:
fe:c3:fe:e1:ab:24:d0:13:88:4e:b4:b1:5a:f3:06:
22:4e:bf:b4:42:f9:74:2b:40:7e:37:ca:12:49:45:
57:24:68:24:be:ba:32:41:03:f1:09:ad:3e:18:d1:
5e:da:a4:14:e7:8b:1e:b8:09:34:fe:96:e1:b9:2c:
4f:f3:6b:0e:5e:c8:d8:98:e2:c7:4b:4c:b3:e9:3b:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:84:A9:12:ED:85:D3:B1:B2:2C:45:97:8A:BE:6B:CD:0D:4B:75
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS208510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:1e:81:79:4a:ee:06:9b:85:90:52:d9:93:7f:15:83:0e:4a:
3f:2e:aa:7c:70:ca:bb:cf:4e:f8:8e:94:bf:7c:cb:22:8a:cd:
e5:cd:1d:c5:16:92:66:bc:4c:b7:9c:d3:ac:50:0b:08:3f:19:
42:ef:bb:b3:c9:6b:81:f5:96:67:6b:f1:3b:c7:2f:9f:03:f0:
84:ae:c4:b8:57:db:c9:53:43:b3:38:5b:2d:61:46:68:d0:e9:
84:e5:c3:5d:e1:e7:c5:ac:fa:55:79:c8:fa:7a:ae:b5:2a:95:
d3:65:7c:5c:5a:7a:16:66:75:67:eb:51:9a:a6:7a:98:b7:8a:
dc:30:19:d1:50:ae:45:3e:b2:b9:a6:8e:23:a2:13:d3:c2:c5:
c2:c8:36:7f:c6:4b:b6:90:59:eb:4f:65:78:e0:2a:6c:d5:d6:
a2:26:ec:86:90:6d:dd:ef:40:f4:1a:92:d9:fb:b4:b4:8c:68:
7a:7c:29:cf:d0:e3:82:2c:34:56:7d:55:88:c2:45:83:65:e6:
80:5c:35:26:73:cb:c9:24:28:1c:ec:6e:9d:36:e8:fa:61:fd:
c3:18:e2:40:86:d7:fe:7c:4a:08:c8:b0:94:90:ae:86:76:bb:
71:d1:d1:39:9c:c2:64:f4:f4:08:68:81:aa:2c:0c:dd:71:a0:
01:f3:e6:fc
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIULzrueYcgSfi8DwaR2EkuLEESnEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NTJaFw0yNzExMDMyMDMyNTJaMDMxMTAvBgNV
BAMTKERGNEI4NEE5MTJFRDg1RDNCMUIyMkM0NTk3OEFCRTZCQ0QwRDRCNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnG91QxBdY4GzEX1vcIDge0j3d
tHBpoM0F9oIVAyLUuTVshnTKLWDDnS5e85YqcN8mQcbC5IDKEBgMssBr6phkNxgU
EdJYhDL6tqcfd/+jj+ZQlQH/SRBOQBjO5xPxKwyX66UILIFlffeCFhto8dFFSwGv
LKTEBNFPWqHszf3B2FfsTCjC8QYzogkjzof9WS+PLmOiCj+0or1c9dPgacUuv9uj
YOEDztgskAT6+LozCEaLNf7D/uGrJNATiE60sVrzBiJOv7RC+XQrQH43yhJJRVck
aCS+ujJBA/EJrT4Y0V7apBTnix64CTT+luG5LE/zaw5eyNiY4sdLTLPpO+RzAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU30uEqRLthdOxsixFl4q+a80NS3UwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIwODUxMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlW
4TANBgkqhkiG9w0BAQsFAAOCAQEAbx6BeUruBpuFkFLZk38Vgw5KPy6qfHDKu89O
+I6Uv3zLIorN5c0dxRaSZrxMt5zTrFALCD8ZQu+7s8lrgfWWZ2vxO8cvnwPwhK7E
uFfbyVNDszhbLWFGaNDphOXDXeHnxaz6VXnI+nqutSqV02V8XFp6FmZ1Z+tRmqZ6
mLeK3DAZ0VCuRT6yuaaOI6IT08LFwsg2f8ZLtpBZ609leOAqbNXWoibshpBt3e9A
9BqS2fu0tIxoenwpz9Djgiw0Vn1ViMJFg2XmgFw1JnPLySQoHOxunTbo+mH9wxji
QIbX/nxKCMiwlJCuhna7cdHROZzCZPT0CGiBqiwM3XGgAfPm/A==
-----END CERTIFICATE-----
Generated at Sun Nov 8 06:11:23 2026 by rpki-client