Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209829.roa
File: AS209829.roa (raw, json)
Hash identifier: 8yRuJojvIwrZh06NKguP0qzx8GOOaAf7MWF9QkvuI0o=
Subject key identifier: 7C:D1:3F:40:43:95:91:C2:D3:0C:6E:65:06:EC:9D:5E:75:75:9A:31
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3981D1D58DAD13CE8E89693746E371D4D0C29821
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209829.roa
Signing time: Wed 04 Feb 2026 08:49:02 +0000
ROA not before: Wed 04 Feb 2026 08:44:02 +0000
ROA not after: Wed 03 Feb 2027 08:49:02 +0000
asID: 209829
IP address blocks: 162.141.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 19:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:81:d1:d5:8d:ad:13:ce:8e:89:69:37:46:e3:71:d4:d0:c2:98:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 4 08:44:02 2026 GMT
Not After : Feb 3 08:49:02 2027 GMT
Subject: CN=7CD13F40439591C2D30C6E6506EC9D5E75759A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:30:56:45:fe:c5:e9:7d:3b:12:7d:32:09:
6f:01:e6:85:a0:3a:3e:2d:17:50:b3:c9:42:05:68:
1a:31:d3:2a:25:eb:7e:ce:43:ec:5d:77:88:d5:9b:
86:31:05:24:4c:d7:51:b7:54:16:47:8d:2c:e5:92:
57:28:94:e9:46:19:2a:56:0c:3e:44:4d:04:39:37:
a3:a5:14:fb:e8:e5:17:32:1d:8a:fc:25:16:9b:05:
63:61:1e:cd:23:f8:22:73:a2:52:e2:b7:74:86:32:
27:68:f0:6b:bc:10:81:4e:25:5c:88:a1:2c:99:ef:
44:49:03:e0:c7:ff:91:64:eb:fb:d2:aa:f8:5c:45:
84:02:26:2c:4c:bd:4f:fa:60:9d:de:97:65:36:70:
d9:37:91:a3:08:ed:18:96:00:f6:fc:a9:d0:67:a4:
06:e4:ab:2f:d9:09:1f:5e:19:9d:9c:4e:e1:e1:7e:
04:b8:56:8c:e0:4c:21:73:1f:dc:0f:49:61:44:66:
9e:66:3d:d4:db:6b:7a:52:ff:cc:8c:f1:bc:87:8f:
91:08:86:0b:e7:23:30:91:fc:23:78:14:ec:fc:e1:
9b:44:ce:5b:55:27:17:b4:4c:5a:89:e9:ad:59:96:
15:f7:de:73:94:6d:4f:bb:65:98:3b:c2:62:95:eb:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D1:3F:40:43:95:91:C2:D3:0C:6E:65:06:EC:9D:5E:75:75:9A:31
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.70.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2d:7e:36:aa:bb:8b:17:49:c5:4b:84:e1:5d:d0:ab:f6:bd:
25:06:fc:0d:ec:a6:8a:e1:b9:6d:a2:3c:60:ea:57:7d:98:f5:
54:aa:2f:01:c1:85:68:52:5f:52:4d:61:17:0e:22:af:cb:ea:
e7:ac:d1:e5:f0:1a:93:59:81:13:f2:6d:ac:a8:65:0a:aa:b1:
88:60:1f:9b:43:5b:6f:30:b8:cd:ec:d6:b5:9b:4c:d2:6d:7b:
aa:22:33:3e:89:08:13:d8:fb:dc:a7:4c:f3:61:da:13:d9:c2:
c1:3d:c7:dc:cf:22:52:bd:3b:a8:93:1b:bc:ee:6b:e6:51:3f:
e1:d6:13:51:47:b7:24:a4:1b:5c:5b:66:b8:5c:d0:f2:ec:03:
6f:dc:0d:24:05:74:5c:ac:cb:51:d5:97:54:08:a2:ff:6d:3b:
e4:42:ea:19:4d:ac:8a:57:01:32:a9:49:5b:af:93:65:58:62:
4c:15:f6:c7:df:0a:a1:80:7e:f8:4a:f1:e4:6a:5b:a7:f9:6b:
1a:1e:3d:58:a1:ce:09:1e:9e:dd:a2:54:25:5f:cf:1b:2a:27:
87:7d:a5:ef:3c:b7:99:a1:15:fe:14:21:47:8d:ad:fa:b4:cd:
53:dc:69:d3:d7:79:fe:f9:44:6e:91:cc:c6:05:42:03:76:fa:
d6:43:44:fc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUOYHR1Y2tE86OiWk3RuNx1NDCmCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAyMDQwODQ0MDJaFw0yNzAyMDMwODQ5MDJaMDMxMTAvBgNV
BAMTKDdDRDEzRjQwNDM5NTkxQzJEMzBDNkU2NTA2RUM5RDVFNzU3NTlBMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tDBWRf7F6X07En0yCW8B5oWg
Oj4tF1CzyUIFaBox0yol637OQ+xdd4jVm4YxBSRM11G3VBZHjSzlklcolOlGGSpW
DD5ETQQ5N6OlFPvo5RcyHYr8JRabBWNhHs0j+CJzolLit3SGMido8Gu8EIFOJVyI
oSyZ70RJA+DH/5Fk6/vSqvhcRYQCJixMvU/6YJ3el2U2cNk3kaMI7RiWAPb8qdBn
pAbkqy/ZCR9eGZ2cTuHhfgS4VozgTCFzH9wPSWFEZp5mPdTba3pS/8yM8byHj5EI
hgvnIzCR/CN4FOz84ZtEzltVJxe0TFqJ6a1ZlhX33nOUbU+7ZZg7wmKV68OPAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUfNE/QEOVkcLTDG5lBuydXnV1mjEwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA5ODI5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoo1G
MA0GCSqGSIb3DQEBCwUAA4IBAQCHLX42qruLF0nFS4ThXdCr9r0lBvwN7KaK4blt
ojxg6ld9mPVUqi8BwYVoUl9STWEXDiKvy+rnrNHl8BqTWYET8m2sqGUKqrGIYB+b
Q1tvMLjN7Na1m0zSbXuqIjM+iQgT2Pvcp0zzYdoT2cLBPcfczyJSvTuokxu87mvm
UT/h1hNRR7ckpBtcW2a4XNDy7ANv3A0kBXRcrMtR1ZdUCKL/bTvkQuoZTayKVwEy
qUlbr5NlWGJMFfbH3wqhgH74SvHkalun+WsaHj1Yoc4JHp7dolQlX88bKieHfaXv
PLeZoRX+FCFHja36tM1T3GnT13n++URukczGBUIDdvrWQ0T8
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:41:31 2026 by rpki-client