Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209829.roa
File: AS209829.roa (raw, json)
Hash identifier: 9fdvQxTUnwJxNSEjpVrnfYkeKU2Rpq0OUTGJ+CfrA4Y=
Subject key identifier: 3F:79:24:3C:FD:6D:D7:A2:6A:57:BF:88:2D:FB:0F:F4:D6:AF:15:DC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 56A4E762B33D48EAF20F66C61B5725B70AF1386D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209829.roa
Signing time: Fri 25 Sep 2026 10:04:28 +0000
ROA not before: Fri 25 Sep 2026 09:59:28 +0000
ROA not after: Fri 24 Sep 2027 10:04:28 +0000
asID: 209829
IP address blocks: 140.233.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 10:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a4:e7:62:b3:3d:48:ea:f2:0f:66:c6:1b:57:25:b7:0a:f1:38:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 25 09:59:28 2026 GMT
Not After : Sep 24 10:04:28 2027 GMT
Subject: CN=3F79243CFD6DD7A26A57BF882DFB0FF4D6AF15DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:f6:ec:dd:90:da:53:10:15:dd:fa:fd:23:
39:03:88:7e:d6:1e:c4:16:14:b3:46:aa:eb:b4:fc:
87:a9:70:55:78:a3:4c:57:8a:6e:61:49:14:b8:29:
80:97:fc:80:c3:9c:be:eb:24:d7:01:a2:e1:cd:68:
32:72:aa:e9:2c:9f:65:b7:a7:8c:ef:12:8d:18:0e:
7f:1c:68:fe:ea:2a:30:82:46:57:ac:08:56:06:c1:
81:78:b6:58:c7:88:6e:42:91:11:72:c8:4e:32:80:
fa:2e:c2:2b:3f:ec:21:21:ee:7c:00:a8:c3:9f:90:
1f:98:74:20:b9:1a:7b:2f:48:fa:4e:a4:80:18:ca:
f3:1b:c0:95:c9:b6:f8:65:3e:6e:b6:6e:a2:70:18:
71:ef:b5:e3:fd:07:1b:e1:0f:4a:51:24:80:0f:f1:
a8:a8:72:05:6c:11:71:23:60:80:9b:9e:de:7f:cf:
71:08:c7:d5:ee:09:37:34:80:98:6d:c0:d2:64:1d:
54:38:7f:1f:ed:69:c1:56:82:c4:69:6a:23:19:02:
9a:2b:f2:13:20:01:6c:92:91:46:d3:34:e2:8b:25:
af:64:d4:dd:5b:1d:43:cb:6e:63:f0:19:7b:42:0f:
9b:da:3c:ea:19:4c:14:88:3c:92:0b:40:02:b4:f7:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:79:24:3C:FD:6D:D7:A2:6A:57:BF:88:2D:FB:0F:F4:D6:AF:15:DC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:d7:61:66:3d:e0:2b:3b:ac:74:c1:bf:08:bf:12:9f:05:23:
0e:10:0a:7b:d0:05:6a:e6:ae:c5:fb:91:0d:d9:f9:ee:c2:2f:
70:1c:37:5e:c3:20:03:fa:e0:f3:54:a8:83:87:a3:92:c5:d9:
b5:8e:7e:98:9c:70:7f:23:a9:9e:3c:34:f6:51:2c:74:13:e8:
ad:fb:77:bf:38:d5:31:f8:f1:45:7c:e3:83:7f:ef:fa:2e:6d:
41:4c:6d:ba:30:7e:70:62:42:2a:a8:77:52:24:a3:e9:87:06:
a7:6d:0c:f4:0c:0f:da:68:77:f3:3d:6b:3f:b3:99:4b:01:9a:
7f:41:2b:f5:b1:08:53:d6:97:f6:0e:89:4d:de:48:22:97:25:
0c:a7:34:c7:54:bc:60:6e:6a:53:8e:fc:30:ca:ef:f4:89:1e:
0e:74:25:92:7a:c9:cb:11:da:dd:71:68:e6:2a:d2:f2:3e:2c:
03:c6:a4:a0:f1:b0:f0:b4:30:7b:83:5e:db:3c:b6:f3:d9:47:
c5:38:b3:70:0a:99:de:c0:fc:bb:33:8c:d9:ae:74:1c:7b:81:
46:3f:91:26:6e:74:f9:5e:a4:9d:7d:82:f2:4b:ea:9f:48:95:
09:c5:be:90:7b:72:2d:05:6a:28:97:7c:3a:4b:9a:5a:72:64:
c6:17:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:05:07 2026 by rpki-client