Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS208763.roa
File: AS208763.roa (raw, json)
Hash identifier: Oky76y3v7FkC8dMFq4+2eCaueIJQigHoBJNRb42hl6k=
Subject key identifier: 8A:BB:6C:8D:8E:E6:4A:4C:67:B1:87:63:2D:4B:8D:12:A6:1D:3D:E5
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 6BDCCC3748473FF8F0D2CEEFD0438FBC6881051C
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS208763.roa
Signing time: Wed 04 Nov 2026 20:32:46 +0000
ROA not before: Wed 04 Nov 2026 20:27:46 +0000
ROA not after: Wed 03 Nov 2027 20:32:46 +0000
asID: 208763
IP address blocks: 2a0e:8f02:21a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:dc:cc:37:48:47:3f:f8:f0:d2:ce:ef:d0:43:8f:bc:68:81:05:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:46 2026 GMT
Not After : Nov 3 20:32:46 2027 GMT
Subject: CN=8ABB6C8D8EE64A4C67B187632D4B8D12A61D3DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:65:ab:eb:45:87:2c:ef:98:01:25:93:3f:
ca:c5:62:38:d3:60:c0:d1:da:df:0c:d2:37:7d:1c:
10:49:df:3b:38:c1:d2:d4:54:3a:8a:6d:45:7b:7d:
32:7f:ef:93:8f:ea:b3:45:4e:76:71:44:ab:f6:8e:
c8:38:f2:bc:71:04:a7:5c:3c:84:7a:33:7c:3b:43:
83:1b:ef:02:42:0b:f3:3a:48:7a:79:bb:1f:a2:c1:
50:6f:64:11:f1:90:6a:0a:8e:3b:ca:98:bd:5c:b0:
ba:50:c1:0e:b1:da:be:9d:c3:5c:1d:cf:a7:9c:85:
f0:77:f8:31:2c:a2:b8:c7:cb:39:40:6d:31:01:19:
3a:67:59:d6:0c:d4:e7:c2:02:b5:07:bf:96:22:bf:
ff:63:52:c4:eb:7f:82:c5:56:ba:42:2f:00:18:68:
47:da:2e:c6:ce:f0:01:92:af:6c:4f:84:61:ee:b7:
a1:d0:cc:a2:7c:20:50:48:6e:35:be:05:84:3b:84:
0a:91:34:93:c2:05:c5:65:d1:99:07:94:fa:f0:11:
36:e7:07:77:96:53:48:ae:1d:05:61:70:50:41:32:
27:bc:92:00:27:a7:19:cd:07:86:58:8e:e8:31:a1:
00:d7:b5:59:02:12:56:93:7b:f1:9a:0d:28:36:4e:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BB:6C:8D:8E:E6:4A:4C:67:B1:87:63:2D:4B:8D:12:A6:1D:3D:E5
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS208763.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:21a0::/44
Signature Algorithm: sha256WithRSAEncryption
1d:1d:e9:b1:7e:04:19:82:da:31:18:90:c7:24:0f:31:46:45:
54:ec:5c:84:83:c9:f1:c6:2e:a4:dd:a5:84:44:53:ae:6b:9a:
cd:3f:8e:5f:40:c0:6e:c4:d0:7e:bb:6e:49:80:9f:c3:3c:56:
06:6e:1f:83:01:ab:f7:0b:f4:e4:28:71:7b:52:15:5b:0f:98:
39:16:ee:89:97:10:d0:d3:e4:c0:7b:9a:de:0d:e8:d7:31:36:
bd:18:c7:27:28:06:3f:5a:99:61:f5:d0:0b:cd:49:e4:48:0b:
7d:e6:c4:87:16:a9:43:0b:c7:37:e2:14:b4:d1:7f:20:e4:82:
f4:24:a0:5a:14:d0:73:e1:fe:9d:68:e3:09:48:b1:77:d4:ee:
ab:9f:73:b1:18:f5:f0:2f:4a:a0:62:3c:5a:c8:b2:ae:80:b8:
dd:10:cc:c5:ad:82:3f:b6:d1:c8:26:84:e1:5b:c2:22:95:0d:
ed:d1:1a:96:4c:a5:98:43:3c:90:0a:8b:19:54:0f:23:d1:ed:
a7:1a:e7:27:50:22:1e:75:94:22:06:2c:4f:d0:7a:11:b9:f1:
65:63:7a:66:9d:56:92:58:0b:82:fe:67:d9:28:06:38:21:61:
88:e7:15:80:78:c3:71:c7:f6:cb:97:5c:8a:6c:ce:f1:54:08:
37:cf:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:15 2026 by rpki-client