Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209553.roa
File: AS209553.roa (raw, json)
Hash identifier: 2SymQLAXej2DYqLMKBABdwcOu5k5+0iLPwuN9nKLvj4=
Subject key identifier: 61:51:CE:A1:42:AD:63:DB:AE:4C:36:93:E5:DA:43:E0:DB:F8:AB:D9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 29790BF8C5148E7CFD32FB62FC52E3C3F7BBFAED
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209553.roa
Signing time: Mon 10 Aug 2026 22:23:12 +0000
ROA not before: Mon 10 Aug 2026 22:18:12 +0000
ROA not after: Mon 09 Aug 2027 22:23:12 +0000
asID: 209553
IP address blocks: 168.222.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 13:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:79:0b:f8:c5:14:8e:7c:fd:32:fb:62:fc:52:e3:c3:f7:bb:fa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 10 22:18:12 2026 GMT
Not After : Aug 9 22:23:12 2027 GMT
Subject: CN=6151CEA142AD63DBAE4C3693E5DA43E0DBF8ABD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:7e:cc:1f:d4:0a:2b:54:b2:92:b3:26:18:
a2:f5:cf:f5:45:2c:e1:d7:f1:21:fe:65:f3:a7:38:
23:a7:52:04:07:9a:01:d9:ff:59:a6:7e:25:bf:9e:
ae:ce:f3:84:15:80:b8:d1:b0:78:b9:f9:87:0d:2e:
75:6b:6c:75:da:4a:f7:ff:43:de:c8:c0:4d:32:64:
4c:90:e8:96:6e:52:21:14:99:2e:d2:39:f4:e3:e1:
d8:88:4d:61:1e:86:fc:07:5a:44:6f:02:18:9c:33:
5b:c4:59:25:90:9c:00:39:0f:e5:f6:11:2e:9e:78:
cb:c0:92:bf:8b:7b:69:6a:83:29:98:62:f7:23:d9:
32:37:57:5f:db:51:f2:a2:2d:d0:b7:8d:95:23:37:
43:38:19:e9:19:00:fe:75:4d:ed:d5:b9:16:fb:0f:
a7:20:f7:70:db:45:2a:ca:4e:d7:d3:ac:d4:f3:db:
b6:a4:2e:52:bf:c8:66:6e:ee:10:4c:66:79:07:da:
b5:b3:39:01:0f:9c:00:64:04:d8:55:19:92:93:76:
70:76:7d:4a:46:8a:02:1a:cd:15:4b:85:ce:fa:86:
90:80:88:62:a5:56:34:eb:42:69:84:2b:45:f9:8e:
98:2c:01:f1:66:30:7e:46:19:41:81:a3:9a:b3:1f:
7e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:51:CE:A1:42:AD:63:DB:AE:4C:36:93:E5:DA:43:E0:DB:F8:AB:D9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209553.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.94.0/24
Signature Algorithm: sha256WithRSAEncryption
57:60:05:82:d1:f1:8a:df:4b:fb:1c:f9:bc:a4:91:fd:79:ef:
87:91:f8:9f:45:64:f8:88:5b:50:5c:43:e3:44:92:72:ad:8b:
a0:45:06:9c:94:31:bb:b5:32:d2:b5:96:f9:7c:bc:21:e3:9c:
5e:e7:a1:42:1d:9e:09:b6:7c:8d:a7:43:1c:91:25:38:a1:6b:
a4:af:d4:6f:d3:9d:36:e5:e6:38:9e:45:e7:6a:ee:3a:ed:ca:
91:9d:e2:95:96:14:64:82:b9:20:f3:6c:cd:9a:82:45:f4:17:
13:ab:ec:2a:b0:dc:37:19:ba:03:b2:16:b4:1e:9b:1f:9a:a1:
f8:8a:80:81:17:d9:8d:32:ed:9c:af:79:23:6d:a7:f1:3a:0e:
0f:c4:00:cb:23:c4:14:99:11:10:a5:05:0e:52:e1:b4:6f:45:
31:51:19:2e:ca:85:88:5e:0c:9e:ec:85:33:15:f3:ab:52:a2:
96:57:b2:b8:7f:26:c5:b6:21:79:d3:07:dc:db:04:d0:00:a5:
d3:f4:64:c2:fe:f3:08:f6:27:7c:f2:ce:b0:6a:9a:b9:89:68:
be:a5:94:09:1e:4e:78:02:f3:cb:32:d5:5a:f8:b7:3b:fd:f6:
9d:45:98:fa:76:02:4a:c3:bf:ac:2f:a8:70:83:37:5e:47:d5:
86:d8:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:39:34 2026 by rpki-client