Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209267.roa
File: AS209267.roa (raw, json)
Hash identifier: Y3e4Lxj+zoophXWANfWDxoUwCBnQ448+0NdzIlqCdUM=
Subject key identifier: D3:D7:B9:0F:4F:F7:20:2B:C1:05:FB:25:75:9C:6D:43:5C:2C:C1:6D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 49FC5DA15814CD06A024EE03811F9002E9DAF289
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209267.roa
Signing time: Fri 25 Jul 2025 08:07:44 +0000
ROA not before: Fri 25 Jul 2025 08:02:44 +0000
ROA not after: Fri 24 Jul 2026 08:07:44 +0000
asID: 209267
IP address blocks: 2a0f:85c1:70::/44 maxlen: 44
2a0f:85c1:70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:fc:5d:a1:58:14:cd:06:a0:24:ee:03:81:1f:90:02:e9:da:f2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:44 2025 GMT
Not After : Jul 24 08:07:44 2026 GMT
Subject: CN=D3D7B90F4FF7202BC105FB25759C6D435C2CC16D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:3f:7c:75:9a:ab:3a:f8:43:a2:56:e4:c7:
87:bc:c4:d6:00:da:79:6f:e0:0c:01:30:09:83:82:
58:68:b1:1f:bc:f6:b2:9b:1e:8d:8c:79:93:7b:b6:
dd:0d:5e:67:79:ba:b6:c5:57:81:e3:4a:82:8e:60:
70:d4:77:9c:09:a1:80:39:3a:6c:ea:79:ff:55:25:
f3:29:bf:83:f7:ef:f9:e4:0e:43:70:20:fb:c5:e1:
bf:42:1e:29:15:83:b6:1e:4f:6f:b9:3d:e4:9d:63:
bd:d0:b2:dd:e8:71:bf:69:df:62:02:f4:bf:1b:a3:
cb:cc:bd:d5:a4:b8:9f:3a:3c:02:5d:34:31:4c:e5:
c3:32:ec:37:9b:e7:43:20:70:52:75:65:29:f7:30:
17:11:a9:09:89:01:b3:38:fe:30:25:7c:f0:ce:85:
44:d4:12:cb:11:1b:43:eb:7b:da:58:13:ab:27:44:
30:67:ac:28:f3:d1:be:a5:e4:ac:51:55:77:0d:94:
6e:e5:9b:11:47:32:e1:d4:f2:dd:a7:45:e7:dc:b8:
14:b3:20:4f:09:87:39:75:a1:22:26:07:14:1f:9e:
b3:93:dc:23:1b:90:bb:26:c5:00:9e:59:ae:a5:98:
51:dd:0a:af:5a:3b:9e:b4:ed:f5:3a:26:ba:98:c8:
09:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:B9:0F:4F:F7:20:2B:C1:05:FB:25:75:9C:6D:43:5C:2C:C1:6D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:70::/44
Signature Algorithm: sha256WithRSAEncryption
17:d3:cc:e5:2d:31:6f:88:f3:46:f5:ae:e9:6a:97:90:05:30:
94:5d:06:f2:18:81:27:6f:d1:a0:4b:bb:7e:4c:f4:cb:13:5d:
bd:86:08:b3:43:62:c8:ce:2a:9f:f1:94:4f:4f:ca:02:f7:17:
4f:5f:fb:7a:ed:a4:99:84:f6:09:cd:b2:9d:f1:4a:8a:ad:c2:
53:d2:40:eb:c9:72:fd:e0:c8:85:ea:8d:6a:8a:fc:96:51:71:
f2:84:1d:72:53:31:f7:95:32:4b:c6:f2:ec:5e:00:45:26:51:
ad:37:74:ec:56:87:7f:98:35:81:99:8d:a8:36:55:91:0c:36:
bd:11:b9:e6:39:01:61:9f:b8:ee:e7:27:55:ba:88:3a:a8:41:
00:d0:f6:be:4a:db:57:6f:32:79:d7:07:57:55:06:6e:01:be:
3c:1d:f1:07:f7:b1:16:8f:50:c5:53:f0:d0:c0:50:02:7f:37:
95:9f:fa:b8:42:50:0a:27:ba:9b:86:2d:ac:d2:c2:d0:48:6c:
8c:b3:52:42:7c:03:11:3c:1a:e7:08:bd:77:3b:91:37:0d:c3:
ad:38:52:26:0c:bf:22:4f:cc:d8:c1:ba:b9:21:3f:00:b8:a3:
9d:64:8f:e4:00:08:ab:75:f7:f6:ed:52:b1:83:ca:84:82:46:
a9:f8:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:26:07 2025 by rpki-client