Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209866.roa
File: AS209866.roa (raw, json)
Hash identifier: GDQO4let7zW+fnaZW3zk7ChCe287hErdgVC8nErO5E0=
Subject key identifier: AC:DB:54:69:7C:54:23:53:7C:CA:CB:D8:C2:85:ED:85:AF:61:B6:35
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 619B0E7C5DD7AC908E390CE93B2538365CD75DBB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209866.roa
Signing time: Tue 10 Jun 2025 23:02:26 +0000
ROA not before: Tue 10 Jun 2025 22:57:26 +0000
ROA not after: Tue 09 Jun 2026 23:02:26 +0000
asID: 209866
IP address blocks: 2a0f:85c1:c62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:9b:0e:7c:5d:d7:ac:90:8e:39:0c:e9:3b:25:38:36:5c:d7:5d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 10 22:57:26 2025 GMT
Not After : Jun 9 23:02:26 2026 GMT
Subject: CN=ACDB54697C5423537CCACBD8C285ED85AF61B635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:bb:ca:25:d7:22:b6:16:be:a2:d2:49:48:
e2:87:f4:d5:74:32:95:58:81:17:1e:5d:3f:5c:43:
62:04:73:08:78:27:17:3a:86:63:9d:8f:cb:8a:76:
8d:fa:65:9a:bb:38:e8:02:32:a7:9d:d8:73:80:9b:
14:64:53:ec:28:22:14:d0:72:07:36:0c:5d:2e:9f:
45:9c:22:16:4f:cc:56:ea:63:ee:e8:86:49:9f:42:
80:a8:3d:01:07:cc:36:c7:03:7a:80:d9:87:6e:dc:
7f:3d:d0:17:10:cd:94:0e:d5:38:df:c0:43:3d:18:
66:69:fd:4c:df:01:6a:1a:03:fe:7b:92:f9:9e:ac:
63:f0:a6:67:73:40:60:6a:17:56:0d:60:d1:05:35:
f5:17:28:69:47:c3:d6:04:00:14:58:e9:dd:2e:c2:
42:a5:1c:dd:57:dd:ab:f3:d9:5e:28:5c:af:ae:ae:
c6:62:6a:79:e7:8e:7c:9c:da:41:82:5e:d0:dc:80:
52:14:61:cb:63:36:24:cf:82:13:fc:df:6c:86:a0:
6b:8d:d6:97:b5:2b:cc:84:90:a1:3c:d8:19:90:63:
7d:d9:2d:58:bd:a3:39:60:d4:cf:d8:40:2b:e7:bf:
f8:9c:ed:ef:2c:33:3c:f5:7f:ea:8a:cf:c4:e5:81:
70:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DB:54:69:7C:54:23:53:7C:CA:CB:D8:C2:85:ED:85:AF:61:B6:35
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c62::/48
Signature Algorithm: sha256WithRSAEncryption
66:03:31:a4:93:73:35:78:0f:7e:15:59:f9:85:19:39:bb:a9:
68:05:40:e9:6c:fa:cf:cc:dc:57:a6:65:7a:38:77:64:92:05:
9e:f1:2e:8e:ac:cc:28:05:a9:63:cc:36:7e:fe:4e:8e:01:4d:
68:2e:9a:07:23:3a:a9:c9:2b:0c:69:5b:97:6d:08:94:54:09:
a0:18:dc:78:f5:48:b8:8f:74:13:d5:0f:be:7c:78:8d:4b:48:
3e:19:53:a4:98:7c:0d:70:ce:26:78:27:4d:78:a1:01:e2:19:
ed:bf:94:fa:ed:4f:0c:f4:6d:53:6f:b9:e2:17:4f:8b:d9:38:
7d:39:3a:72:bd:10:e2:9e:9d:a1:b4:72:d1:ce:23:24:77:f2:
17:ae:c7:c2:91:9b:63:48:92:1f:23:5b:5a:32:c9:71:ed:a1:
2b:54:f5:23:85:19:5c:b4:b0:6e:a4:6a:c2:89:22:33:74:01:
1a:65:85:24:5a:67:fa:df:19:2a:ae:5f:84:48:ce:a7:99:0b:
d9:18:bd:fe:6c:77:75:4c:43:12:91:9f:a7:4f:17:0d:75:8b:
f8:38:26:e4:74:e6:73:99:21:40:26:4c:39:94:a5:03:28:5f:
fa:b6:79:1d:85:ea:21:81:cf:6c:13:da:60:6d:bb:80:3a:e8:
5b:5e:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:22 2025 by rpki-client