Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa
File: AS209526.roa (raw, json)
Hash identifier: W1Qby+smZtN7vddF27sDimTQR4g8sh86JczDKj3V3Eg=
Subject key identifier: D1:57:8C:1B:6C:7A:5C:75:66:FE:DC:4B:D0:75:D6:B7:96:AE:09:6A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 27385CE00D5F88F7581E76DBD9468F873B0CEBE1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa
Signing time: Mon 07 Sep 2026 11:05:51 +0000
ROA not before: Mon 07 Sep 2026 11:00:51 +0000
ROA not after: Mon 06 Sep 2027 11:05:51 +0000
asID: 209526
IP address blocks: 82.27.8.0/24 maxlen: 24
82.29.103.0/24 maxlen: 24
82.39.138.0/24 maxlen: 24
82.40.36.0/24 maxlen: 24
82.40.39.0/24 maxlen: 24
82.41.21.0/24 maxlen: 24
82.41.72.0/24 maxlen: 24
82.41.170.0/24 maxlen: 24
82.41.171.0/24 maxlen: 24
84.75.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:38:5c:e0:0d:5f:88:f7:58:1e:76:db:d9:46:8f:87:3b:0c:eb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 7 11:00:51 2026 GMT
Not After : Sep 6 11:05:51 2027 GMT
Subject: CN=D1578C1B6C7A5C7566FEDC4BD075D6B796AE096A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:1c:97:e9:89:4c:9b:62:7e:51:17:80:e0:
c4:b0:c5:eb:08:2c:1a:83:b2:89:16:ff:e0:df:03:
b8:fe:9c:04:67:9f:89:78:dc:2a:22:eb:17:73:d0:
6e:51:28:31:25:dc:4b:e2:85:72:5b:e2:05:07:73:
ac:55:fb:3f:77:20:ea:1a:b0:9d:32:99:ea:67:ca:
48:e1:5c:b7:61:51:a5:9a:4c:40:eb:cd:f3:3e:db:
05:b6:fd:04:46:2f:da:c4:f4:97:b6:08:e9:11:a6:
ef:63:f3:e5:e8:de:80:2f:33:79:05:63:7b:41:24:
23:3a:86:39:65:e0:7f:c3:99:2d:74:ed:70:d5:a4:
03:b5:0e:d0:69:83:9a:76:a2:f5:3f:0d:a8:c1:4c:
25:c5:90:1f:53:45:4b:55:3f:08:b1:d4:77:d7:2f:
b7:2a:26:89:36:c5:58:a8:de:39:19:1e:73:0f:3e:
f9:55:be:7d:bd:9f:2d:ff:1f:f0:82:c9:0c:23:84:
6e:5d:1a:e8:5c:30:6e:cf:7c:ae:b8:35:b9:45:44:
6c:2d:18:73:06:35:b4:ae:1a:af:41:e6:e4:62:1b:
06:20:95:cb:77:ce:af:94:ab:9e:0d:63:ff:0b:52:
71:ee:98:43:bf:7a:71:c8:61:41:19:92:d8:2c:88:
7a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:57:8C:1B:6C:7A:5C:75:66:FE:DC:4B:D0:75:D6:B7:96:AE:09:6A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.8.0/24
82.29.103.0/24
82.39.138.0/24
82.40.36.0/24
82.40.39.0/24
82.41.21.0/24
82.41.72.0/24
82.41.170.0/23
84.75.159.0/24
Signature Algorithm: sha256WithRSAEncryption
13:95:52:f7:d6:34:bc:9a:c4:7a:2a:ca:b3:6c:29:a2:1c:b9:
be:4c:c3:f1:98:22:26:c0:f0:57:ee:45:02:2f:7a:07:4f:c5:
6d:5f:fb:09:3c:f1:e7:2a:29:9a:02:83:b4:57:11:ef:4a:01:
58:52:d1:ad:e3:e0:f2:b9:5c:02:c4:45:98:1c:9b:63:6e:4c:
89:1f:2d:91:0e:89:7c:11:09:cc:ca:7d:d0:3a:6c:b1:86:db:
0a:46:d1:f3:05:2a:a6:09:45:a1:d7:e4:51:a7:e8:d3:ef:59:
dd:3e:76:c7:8b:59:97:2b:c2:34:23:8b:b4:88:42:ac:b2:0e:
1f:54:31:63:24:58:3a:44:71:c5:ee:bc:60:5e:8e:8e:50:75:
1e:15:96:8d:87:9c:28:03:e6:a3:d3:12:09:af:98:1a:6b:81:
6e:7a:ad:c2:62:ad:8f:8a:04:e2:00:68:48:b7:76:0a:1f:ba:
0b:6b:2e:25:95:13:cd:ac:51:d6:89:f0:35:a7:0a:16:2b:ca:
0f:f3:e9:08:a8:a6:6e:77:73:3a:f3:47:e8:f2:38:4a:6e:41:
83:c1:81:d6:82:a0:a5:13:b4:cd:99:0c:53:71:68:57:d3:1b:
ab:ff:6c:a5:d0:be:cc:dd:32:ab:86:ae:02:ed:0f:4a:93:7c:
ae:a3:b6:b8
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUJzhc4A1fiPdYHnbb2UaPhzsM6+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MDcxMTAwNTFaFw0yNzA5MDYxMTA1NTFaMDMxMTAvBgNV
BAMTKEQxNTc4QzFCNkM3QTVDNzU2NkZFREM0QkQwNzVENkI3OTZBRTA5NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xRyX6YlMm2J+UReA4MSwxesI
LBqDsokW/+DfA7j+nARnn4l43Coi6xdz0G5RKDEl3EvihXJb4gUHc6xV+z93IOoa
sJ0ymepnykjhXLdhUaWaTEDrzfM+2wW2/QRGL9rE9Je2COkRpu9j8+Xo3oAvM3kF
Y3tBJCM6hjll4H/DmS107XDVpAO1DtBpg5p2ovU/DajBTCXFkB9TRUtVPwix1HfX
L7cqJok2xVio3jkZHnMPPvlVvn29ny3/H/CCyQwjhG5dGuhcMG7PfK64NblFRGwt
GHMGNbSuGq9B5uRiGwYglct3zq+Uq54NY/8LUnHumEO/enHIYUEZktgsiHovAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQU0VeMG2x6XHVm/txL0HXWt5auCWowHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA5NTI2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAUhsI
AwQAUh1nAwQAUieKAwQAUigkAwQAUignAwQAUikVAwQAUilIAwQBUimqAwQAVEuf
MA0GCSqGSIb3DQEBCwUAA4IBAQATlVL31jS8msR6KsqzbCmiHLm+TMPxmCImwPBX
7kUCL3oHT8VtX/sJPPHnKimaAoO0VxHvSgFYUtGt4+DyuVwCxEWYHJtjbkyJHy2R
Dol8EQnMyn3QOmyxhtsKRtHzBSqmCUWh1+RRp+jT71ndPnbHi1mXK8I0I4u0iEKs
sg4fVDFjJFg6RHHF7rxgXo6OUHUeFZaNh5woA+aj0xIJr5gaa4Fueq3CYq2PigTi
AGhIt3YKH7oLay4llRPNrFHWifA1pwoWK8oP8+kIqKZud3M680fo8jhKbkGDwYHW
gqClE7TNmQxTcWhX0xur/2yl0L7M3TKrhq4C7Q9Kk3yuo7a4
-----END CERTIFICATE-----
Generated at Sat Sep 12 02:40:44 2026 by rpki-client