Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209854.roa
File: AS209854.roa (raw, json)
Hash identifier: yJb3L2x8OJhpacPKQCTICIXeoqbSVJSCVYIiPCIuVys=
Subject key identifier: 27:C7:B8:A4:30:72:0A:BA:30:CD:8C:CD:CB:22:CC:44:6B:CF:2C:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1CC15B86FF40490E95A04B6E0D48521EBB3F207B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209854.roa
Signing time: Thu 02 Jul 2026 08:09:48 +0000
ROA not before: Thu 02 Jul 2026 08:04:48 +0000
ROA not after: Thu 01 Jul 2027 08:09:48 +0000
asID: 209854
IP address blocks: 145.223.1.0/24 maxlen: 24
145.223.2.0/24 maxlen: 24
145.223.7.0/24 maxlen: 24
145.223.8.0/24 maxlen: 24
145.223.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c1:5b:86:ff:40:49:0e:95:a0:4b:6e:0d:48:52:1e:bb:3f:20:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 2 08:04:48 2026 GMT
Not After : Jul 1 08:09:48 2027 GMT
Subject: CN=27C7B8A430720ABA30CD8CCDCB22CC446BCF2C80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:08:a2:f8:8b:41:cc:af:01:92:39:db:94:
25:eb:74:fb:fd:ac:88:f9:a2:ea:30:27:ae:06:78:
53:be:b4:94:3c:3c:59:9b:b5:94:3a:a8:f9:1a:03:
76:35:17:a6:c9:aa:75:d5:fb:80:54:44:78:44:b2:
7e:63:ce:b5:9c:f3:9d:9b:41:df:cd:47:b9:d8:c2:
ce:8a:1e:b6:cd:7c:c5:5a:e8:7a:df:7e:44:28:bd:
1a:77:83:4b:2d:b1:40:50:0b:c0:ea:9a:cf:04:c5:
47:98:44:b0:73:94:2c:ae:2d:b9:f1:c5:20:cb:aa:
be:e7:89:92:5e:b4:86:74:99:6d:c6:63:cf:a3:75:
15:4c:44:1e:99:5a:3d:2c:a8:d7:e7:b0:b9:43:6d:
ef:45:3e:3c:44:1f:d4:22:09:f1:34:4a:9b:e2:d3:
32:7c:05:f1:dd:15:fc:ee:f1:ea:b2:87:99:1a:4f:
2e:f8:83:f2:7d:a4:a2:93:f3:91:04:1d:aa:aa:50:
e1:b7:99:f6:3b:63:e8:78:5d:d8:10:fe:04:54:54:
00:c9:a6:b7:da:27:4a:02:0b:11:29:aa:6b:71:13:
19:17:34:5f:ca:00:af:49:4d:57:db:1f:b3:84:9a:
9b:f5:bd:62:09:dd:6d:9c:a7:d6:3a:22:84:2e:82:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C7:B8:A4:30:72:0A:BA:30:CD:8C:CD:CB:22:CC:44:6B:CF:2C:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209854.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.1.0-145.223.2.255
145.223.7.0-145.223.9.255
Signature Algorithm: sha256WithRSAEncryption
9d:18:4e:68:0b:37:6c:8d:18:a2:cb:31:f5:f7:81:b7:62:12:
45:39:c5:46:ca:35:47:93:72:b5:f9:e8:f2:79:fd:b3:75:a1:
a7:a9:f4:17:63:a9:03:18:ca:4e:86:89:e1:e9:9f:f2:9f:62:
9e:e4:7c:bd:17:75:75:20:25:62:49:9f:4c:93:e8:ed:7f:b4:
6d:70:9b:f7:35:fc:4b:b0:5e:1a:73:87:63:74:c2:20:fe:e8:
da:fc:c3:0f:b7:26:1f:f1:fb:c1:31:69:94:e5:7b:ba:14:b5:
85:50:b2:24:f7:9b:26:10:e7:ea:8b:cc:72:3d:26:f5:4b:cb:
c1:67:ed:be:b0:0d:2e:1d:fb:dc:f9:11:57:76:29:73:ab:0a:
c9:99:fd:d8:ec:74:0c:5f:70:fa:92:eb:73:d0:db:43:82:33:
a5:13:b5:98:0a:55:cc:18:d0:cb:4d:b5:e1:2c:65:e2:56:10:
0d:85:8d:78:c3:76:45:0f:b5:f6:56:96:1c:52:7a:7c:f0:72:
29:29:55:56:76:0b:47:15:ec:b0:88:e6:62:21:f9:bc:50:c7:
5c:df:ae:be:4e:7c:ef:f7:17:29:76:71:d2:76:2d:2f:91:d2:
40:c0:61:04:73:e6:0f:ea:0c:d6:31:32:34:d2:4b:8d:67:99:
00:77:70:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUHMFbhv9ASQ6VoEtuDUhSHrs/IHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MDIwODA0NDhaFw0yNzA3MDEwODA5NDhaMDMxMTAvBgNV
BAMTKDI3QzdCOEE0MzA3MjBBQkEzMENEOENDRENCMjJDQzQ0NkJDRjJDODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjlAii+ItBzK8BkjnblCXrdPv9
rIj5ouowJ64GeFO+tJQ8PFmbtZQ6qPkaA3Y1F6bJqnXV+4BURHhEsn5jzrWc852b
Qd/NR7nYws6KHrbNfMVa6HrffkQovRp3g0stsUBQC8Dqms8ExUeYRLBzlCyuLbnx
xSDLqr7niZJetIZ0mW3GY8+jdRVMRB6ZWj0sqNfnsLlDbe9FPjxEH9QiCfE0Spvi
0zJ8BfHdFfzu8eqyh5kaTy74g/J9pKKT85EEHaqqUOG3mfY7Y+h4XdgQ/gRUVADJ
prfaJ0oCCxEpqmtxExkXNF/KAK9JTVfbH7OEmpv1vWIJ3W2cp9Y6IoQugh/DAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUJ8e4pDByCrowzYzNyyLMRGvPLIAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA5ODU0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACR
3wEDBACR3wIwDAMEAJHfBwMEAZHfCDANBgkqhkiG9w0BAQsFAAOCAQEAnRhOaAs3
bI0Yossx9feBt2ISRTnFRso1R5Nytfno8nn9s3Whp6n0F2OpAxjKToaJ4emf8p9i
nuR8vRd1dSAlYkmfTJPo7X+0bXCb9zX8S7BeGnOHY3TCIP7o2vzDD7cmH/H7wTFp
lOV7uhS1hVCyJPebJhDn6ovMcj0m9UvLwWftvrANLh373PkRV3Ypc6sKyZn92Ox0
DF9w+pLrc9DbQ4IzpRO1mApVzBjQy0214Sxl4lYQDYWNeMN2RQ+19laWHFJ6fPBy
KSlVVnYLRxXssIjmYiH5vFDHXN+uvk587/cXKXZx0nYtL5HSQMBhBHPmD+oM1jEy
NNJLjWeZAHdw3A==
-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:13 2026 by rpki-client