Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209854.roa
File: AS209854.roa (raw, json)
Hash identifier: y3yswozcNvtuWP5LItp7w5KCvZb7oz+2eZCV7h5fzUk=
Subject key identifier: 75:21:FB:45:66:87:76:7B:BD:5C:38:BF:B2:22:F5:4D:BF:8F:2F:32
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 21644C55C387FD710AC012CC72CDD31F5F3ED368
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209854.roa
Signing time: Wed 14 Oct 2026 11:51:50 +0000
ROA not before: Wed 14 Oct 2026 11:46:50 +0000
ROA not after: Wed 13 Oct 2027 11:51:50 +0000
asID: 209854
IP address blocks: 145.223.7.0/24 maxlen: 24
145.223.8.0/24 maxlen: 24
145.223.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:64:4c:55:c3:87:fd:71:0a:c0:12:cc:72:cd:d3:1f:5f:3e:d3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 14 11:46:50 2026 GMT
Not After : Oct 13 11:51:50 2027 GMT
Subject: CN=7521FB456687767BBD5C38BFB222F54DBF8F2F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:82:43:16:d8:92:ef:ac:e4:49:9b:67:5f:c3:
52:c4:87:84:8b:cf:1b:96:22:fc:ad:94:94:9a:79:
95:b3:86:ac:dc:b2:78:70:59:4f:0f:90:dc:6e:bc:
1e:70:56:d9:33:3e:b6:22:3f:6c:49:aa:25:2e:1d:
5a:2f:34:a2:6c:1f:00:38:13:2e:a6:4d:1f:84:86:
ad:a2:7f:3f:01:9b:f3:f9:01:3b:91:f6:2b:a4:8f:
65:68:82:aa:0c:58:f0:fe:53:24:dd:f5:9b:7e:41:
9f:99:e3:ed:b6:16:97:55:56:0e:93:9c:99:37:e4:
2a:7a:d0:be:81:e9:da:88:7c:82:9c:e1:ec:81:26:
b2:46:35:93:7c:db:83:ff:60:a0:d2:07:37:f4:ce:
81:cf:58:40:d7:9f:3a:26:34:44:4c:b1:75:24:c9:
aa:36:c2:25:df:f1:e8:25:df:51:0f:8a:0b:7a:e5:
37:7d:98:a7:74:a9:2d:bb:79:47:aa:4f:46:b8:7d:
6b:68:7a:44:ff:6c:ff:39:fd:95:91:d8:0c:d6:fc:
a3:e5:50:e9:55:cd:00:91:d2:37:27:84:02:0b:2b:
5a:3d:22:83:42:94:14:58:7e:5a:64:bb:96:5e:ed:
50:f6:dc:a8:29:7d:63:d2:e5:d9:a1:a1:46:c8:c1:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:21:FB:45:66:87:76:7B:BD:5C:38:BF:B2:22:F5:4D:BF:8F:2F:32
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209854.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.7.0-145.223.9.255
Signature Algorithm: sha256WithRSAEncryption
28:9a:dc:6e:89:2c:6c:a5:db:06:45:da:a1:49:98:8a:d5:96:
b0:f5:28:28:8f:44:82:e7:cd:94:d0:34:42:34:af:eb:81:44:
a7:ac:81:ee:f4:4a:c4:82:0b:78:53:75:94:78:80:ea:e4:8c:
57:9f:cf:19:87:d3:4e:4d:f8:68:38:05:bd:b3:ab:4e:5d:64:
11:03:81:3b:cb:9b:b1:1c:52:51:16:25:8f:4a:a0:87:14:85:
94:32:3c:ca:8d:1e:c1:46:71:58:54:d9:e2:ed:3b:0c:1b:31:
d9:61:c2:ed:07:54:18:80:55:09:2c:2a:7c:f5:25:15:84:df:
11:56:79:bb:2d:2f:d9:59:c5:e7:37:23:1c:47:5f:6f:e4:f8:
10:96:1d:6d:37:d7:8d:a8:1c:f8:b9:ff:61:bb:b1:57:fc:a8:
1d:85:e9:3e:f7:df:9e:13:bc:b8:77:b4:7c:20:3d:0b:78:04:
7c:58:8b:c2:22:78:b8:64:bf:6f:16:99:b3:b4:85:a3:73:16:
77:00:b4:3f:85:a3:91:18:d2:e2:02:33:1d:90:21:4b:18:d0:
74:69:bc:b4:6d:82:b8:73:15:8e:72:a6:0b:9f:cc:9b:73:41:
f2:4f:cb:e0:55:dc:16:c0:0b:01:49:57:67:75:ba:ab:62:91:
1c:30:1c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:26:58 2026 by rpki-client