Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS209807.roa
File: AS209807.roa (raw, json)
Hash identifier: 9UpilQUQB6KOaczud+pLOJBkD52CUjadSfG3zEZ2XK8=
Subject key identifier: C9:9D:9E:5A:8C:A9:FB:3F:11:A7:E6:87:03:02:E6:39:05:CC:62:F3
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 1695053DA10CAD5928F5EBC95712B4E9A8674C6A
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS209807.roa
Signing time: Wed 04 Nov 2026 20:32:46 +0000
ROA not before: Wed 04 Nov 2026 20:27:46 +0000
ROA not after: Wed 03 Nov 2027 20:32:46 +0000
asID: 209807
IP address blocks: 185.86.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:95:05:3d:a1:0c:ad:59:28:f5:eb:c9:57:12:b4:e9:a8:67:4c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:46 2026 GMT
Not After : Nov 3 20:32:46 2027 GMT
Subject: CN=C99D9E5A8CA9FB3F11A7E6870302E63905CC62F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:9c:b1:9c:56:ae:1d:63:73:17:d7:2e:17:
74:53:19:6a:0a:8d:2b:f1:de:61:ea:03:6e:9d:dd:
b3:d2:a0:34:37:cd:a4:45:b9:f4:a3:30:7d:50:67:
c9:52:a9:42:d7:d6:ac:dc:ba:3b:cc:c5:5c:8e:85:
b7:d2:81:25:44:d0:c5:a2:54:75:8f:85:27:24:52:
2f:2a:06:b4:8e:d9:ef:dc:6d:0f:f6:4e:53:4f:93:
eb:59:2e:13:b3:7f:01:6f:f7:fe:71:3b:0b:97:de:
54:8c:75:37:1e:58:89:f1:d6:9c:d9:d4:65:34:c4:
c7:4e:89:6f:e4:86:77:fa:5a:6f:d7:a6:ae:16:92:
9c:4b:23:d1:a9:bd:de:4b:a3:6c:12:e8:c6:c0:f4:
40:8f:29:8b:0b:38:7b:85:51:1f:c5:be:55:48:fa:
bb:86:51:c7:ba:7c:b3:81:ef:a2:06:ba:6a:92:17:
06:2c:11:10:82:40:73:d1:55:c8:d5:d7:7c:f0:9f:
09:49:12:68:0f:a1:7e:09:71:34:ac:ab:bc:7d:fb:
62:3f:89:65:6c:d5:d7:e0:77:e0:79:ba:d4:fe:aa:
89:a5:b1:12:7e:df:80:5b:4b:94:2e:b7:48:a4:a0:
d0:af:35:ee:65:1a:90:4f:c2:70:af:7a:e8:26:81:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9D:9E:5A:8C:A9:FB:3F:11:A7:E6:87:03:02:E6:39:05:CC:62:F3
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS209807.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.227.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d6:72:88:91:0b:99:c1:c9:93:89:d6:bc:ee:7d:b9:76:a5:
8b:dd:2a:e4:0f:4d:bf:c0:f8:0a:58:05:2d:87:ed:9e:45:73:
c6:ae:7f:ba:be:eb:e2:c7:c1:5e:1f:f8:2d:c9:40:27:99:4a:
e9:7e:8c:dd:dc:a1:21:47:fc:a0:38:78:2b:ee:c6:ff:e9:78:
a3:a7:7d:e9:01:27:91:42:65:63:9f:bd:a6:c6:a2:1c:7e:2c:
97:d8:5f:22:bb:6d:f5:0d:1c:ab:a3:43:4b:e1:d2:26:e4:ae:
0e:fc:ec:cc:3a:e4:a2:46:5d:f5:27:98:a0:6f:e7:1f:ff:d5:
52:20:d2:34:61:ef:77:9a:65:0e:b7:68:10:ad:d3:48:27:0f:
b6:bb:fb:47:4d:a7:23:f8:94:44:17:2d:88:72:05:23:07:6a:
9e:31:24:43:64:9e:10:0c:e8:57:c2:2b:51:99:ef:b5:97:d2:
e9:70:69:f4:4c:ff:fe:3a:c1:c4:ad:7a:a4:cb:dd:02:c1:21:
6e:08:04:3e:a6:1c:57:19:49:d9:ba:bb:34:9f:7a:6f:4c:bf:
7f:a6:e1:7d:b7:54:b3:0e:26:8a:b4:50:e3:90:47:ea:1d:2a:
c7:60:d7:bb:d4:e6:ce:39:ec:f9:15:d7:58:bc:1d:97:7c:6f:
4e:d2:17:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:45:32 2026 by rpki-client