Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209854.roa
File: AS209854.roa (raw, json)
Hash identifier: +ZuatMx85nfOOae3UwTIQJMTu+BAijmVCUheGz5HW9c=
Subject key identifier: C7:FD:EC:3A:33:19:D2:B7:1A:D8:F6:24:77:61:AA:13:50:11:87:EE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 60B04CC77200B9EECAD8EB77EC83534C52D4A917
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209854.roa
Signing time: Wed 01 Jul 2026 00:08:38 +0000
ROA not before: Wed 01 Jul 2026 00:03:38 +0000
ROA not after: Wed 30 Jun 2027 00:08:38 +0000
asID: 209854
IP address blocks: 181.214.177.0/24 maxlen: 24
181.214.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b0:4c:c7:72:00:b9:ee:ca:d8:eb:77:ec:83:53:4c:52:d4:a9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 1 00:03:38 2026 GMT
Not After : Jun 30 00:08:38 2027 GMT
Subject: CN=C7FDEC3A3319D2B71AD8F6247761AA13501187EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:39:d9:16:52:e1:f2:0b:5c:9b:6a:d8:5b:
d4:e8:e8:e6:83:02:81:a7:03:da:cf:47:f5:6f:c1:
1b:2c:ab:c4:23:8a:f9:f2:16:77:ef:b0:78:4c:ea:
6b:e0:fe:98:47:a5:d6:4a:61:56:61:e2:77:98:65:
89:f8:68:c3:5c:d8:72:d3:84:ff:6f:fe:18:9a:a2:
91:e3:05:40:b6:67:72:7e:53:f6:ad:8b:5e:fb:54:
ad:9d:18:38:e7:ab:c8:39:4b:1d:d2:46:e0:e1:c1:
b3:98:83:00:8d:a5:49:6b:fb:65:57:9d:93:ff:75:
aa:59:a9:a1:8c:26:3d:41:3f:77:aa:5c:aa:97:89:
30:81:c0:21:61:ff:23:df:4f:93:83:0b:0e:80:d4:
45:f5:87:84:73:de:65:3c:14:c5:58:3d:a3:b4:e5:
e0:7d:e4:c7:56:21:22:7c:88:45:8b:17:5c:17:67:
cc:0d:0d:fd:33:ea:70:2a:00:74:a2:52:f7:cc:ae:
72:b2:b0:ac:a5:cc:47:32:f8:25:0d:9b:f4:53:f4:
fe:b3:a5:13:3a:2c:04:91:69:96:f2:dc:33:5f:cc:
99:11:c4:49:66:bd:00:95:4e:29:9c:12:1b:75:61:
aa:28:3a:aa:a3:3d:a8:72:91:87:d5:bd:21:e5:ff:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FD:EC:3A:33:19:D2:B7:1A:D8:F6:24:77:61:AA:13:50:11:87:EE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209854.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.177.0/24
181.214.246.0/24
Signature Algorithm: sha256WithRSAEncryption
84:0a:38:a2:42:3f:41:d9:61:d0:8e:64:3d:ef:48:cf:2a:fe:
73:29:4a:d1:c3:6b:4d:f6:73:b9:45:47:c1:d6:cd:f7:8b:cb:
d1:58:4e:6d:22:bc:d2:f6:0f:90:8d:f5:fd:bf:7e:f1:77:87:
a8:33:bb:2a:44:fd:73:9d:f7:12:11:94:7b:68:db:76:61:81:
59:24:e8:92:96:92:92:05:ee:b5:ab:79:7e:8f:7b:86:25:54:
e8:95:d0:f4:e5:22:7b:90:64:97:f6:6c:8e:80:d0:15:d9:10:
50:28:4a:4e:55:27:71:6e:c3:a8:89:a8:db:36:68:39:56:45:
52:16:aa:85:99:02:8e:2a:a0:15:62:82:2f:c0:58:9a:97:d7:
b9:95:43:77:a7:2c:ef:33:78:f9:ec:b1:e9:47:10:45:29:e0:
fe:48:15:c9:39:2b:d8:09:b3:2d:7e:32:29:30:ac:b2:d9:fe:
b4:a9:1a:6a:e3:84:7a:f2:5e:ed:41:c2:18:77:9b:ce:19:0f:
81:62:1b:ef:72:a8:40:ca:75:4f:4e:f7:56:76:c7:13:4c:27:
72:df:77:aa:70:ae:93:06:44:c2:13:a8:6b:57:df:db:eb:7b:
86:fe:b7:25:10:a3:f4:03:45:2e:8a:c2:e7:59:85:ad:a9:32:
a8:2d:ef:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:40:09 2026 by rpki-client