Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209990.roa
File: AS209990.roa (raw, json)
Hash identifier: 1Tz7m8YFmUgY0mfO6k6l8DUrNPUDorwneHjpMkeCW9c=
Subject key identifier: 5D:26:29:63:8E:A9:5D:A2:1F:D6:B0:8F:D7:DF:9E:3E:F4:32:0A:63
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 51383CF4A29E8AE2DB1A0F1E5191A35461C102C8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209990.roa
Signing time: Mon 02 Feb 2026 21:50:37 +0000
ROA not before: Mon 02 Feb 2026 21:45:37 +0000
ROA not after: Mon 01 Feb 2027 21:50:37 +0000
asID: 209990
IP address blocks: 2a14:7580:f500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:38:3c:f4:a2:9e:8a:e2:db:1a:0f:1e:51:91:a3:54:61:c1:02:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 2 21:45:37 2026 GMT
Not After : Feb 1 21:50:37 2027 GMT
Subject: CN=5D2629638EA95DA21FD6B08FD7DF9E3EF4320A63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d1:12:ec:1a:be:04:2a:32:e0:e3:f6:82:71:
7f:bf:78:38:f6:ec:13:f1:16:40:7e:f0:2b:f4:29:
73:cf:6e:52:33:d8:d8:71:70:c3:bf:e4:16:de:b2:
90:09:85:bc:8f:0f:54:07:01:0e:59:89:1f:3f:1a:
80:33:5f:36:b6:66:1b:31:11:5a:bd:49:c6:35:e0:
67:31:d1:32:72:a8:03:3b:94:88:9a:70:6b:51:6a:
1f:93:d1:7a:36:a6:82:96:0f:3f:eb:d0:3b:58:ec:
ae:ed:18:30:d2:d7:9b:5c:b8:7a:38:65:40:e6:3b:
ae:af:88:23:ef:3d:9d:27:2b:6b:8a:d3:2c:08:a3:
33:d3:99:01:9a:f9:6f:b6:6b:15:cb:9d:d4:d7:cb:
67:46:14:b3:34:42:45:72:dd:cc:e5:b5:7c:95:70:
a3:01:96:60:f8:3f:66:d6:c1:fd:bd:87:66:47:aa:
9c:63:77:35:b8:f2:8c:3d:60:67:63:e4:87:c4:f0:
ab:6d:57:1e:f3:e6:22:87:9e:a2:cc:3f:86:44:d5:
91:47:92:aa:35:bb:d2:57:f1:13:c3:67:49:38:b2:
21:1a:d1:b3:03:e8:08:8e:ee:a0:eb:a6:77:ff:1a:
2e:8c:9d:bb:ac:23:85:0a:29:95:fc:06:63:fb:b9:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:26:29:63:8E:A9:5D:A2:1F:D6:B0:8F:D7:DF:9E:3E:F4:32:0A:63
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209990.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f500::/40
Signature Algorithm: sha256WithRSAEncryption
6e:08:16:1c:88:c2:06:c9:c2:8d:76:59:4a:1e:7f:d3:ba:08:
6d:af:b3:26:91:64:d8:f7:49:5a:f8:6f:a6:df:9d:73:d0:9a:
8e:c6:71:45:42:05:7e:52:d0:65:15:e5:df:78:e1:28:2a:1d:
80:49:ef:69:f7:37:20:8c:d2:dd:37:34:ec:a0:a5:0d:48:65:
cc:f1:de:d2:9f:eb:99:30:aa:ab:b3:27:a7:d1:1f:75:7f:03:
75:57:3a:94:8b:0d:23:93:cc:47:2b:9f:fa:3f:0b:a9:d1:75:
53:8f:e5:10:af:7c:17:be:e9:a8:fc:d7:a3:76:34:f1:8a:19:
8d:be:84:e0:0f:a3:08:63:20:64:0f:54:4f:45:37:77:83:94:
cc:0c:90:33:53:3f:b6:33:33:6d:fa:52:f4:4d:31:3c:64:d7:
45:62:d6:ef:fa:43:f2:c6:2b:b6:07:46:a3:a6:b9:78:68:c7:
10:3d:4e:5f:fc:e9:6b:07:48:73:9e:59:13:18:e9:cf:a1:28:
b4:c1:77:c5:0f:94:18:8e:07:d5:25:ed:20:35:fc:a2:aa:61:
f9:03:55:02:a5:ea:66:e8:0a:bc:e9:f2:6c:fe:8c:50:f7:05:
15:a6:40:57:68:9e:2e:19:69:62:95:0f:65:3e:21:c8:98:9a:
54:29:df:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:36 2026 by rpki-client