Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS209737.roa
File: AS209737.roa (raw, json)
Hash identifier: XwivNcSTXcd3VQJSW1t0lbS3ISHJs++SDxUtXXZFiR0=
Subject key identifier: EB:8D:BB:CA:FD:86:6C:5E:89:43:CF:4B:66:E0:6C:D0:04:6B:86:F8
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 7BA4A45AAAEE4242A82F54FE80BC560598FE8E73
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS209737.roa
Signing time: Tue 11 Aug 2026 12:28:08 +0000
ROA not before: Tue 11 Aug 2026 12:23:08 +0000
ROA not after: Tue 10 Aug 2027 12:28:08 +0000
asID: 209737
IP address blocks: 31.40.205.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
185.231.226.0/24 maxlen: 24
193.32.184.0/24 maxlen: 24
193.32.185.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a4:a4:5a:aa:ee:42:42:a8:2f:54:fe:80:bc:56:05:98:fe:8e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Aug 11 12:23:08 2026 GMT
Not After : Aug 10 12:28:08 2027 GMT
Subject: CN=EB8DBBCAFD866C5E8943CF4B66E06CD0046B86F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:2c:52:8f:cc:54:01:de:e1:65:42:0b:be:
e5:ea:44:52:5b:9f:b8:44:84:9f:69:cb:cb:19:70:
c0:d0:05:b0:b8:16:a0:72:fb:86:aa:a3:bd:af:f6:
f1:02:04:1b:f9:1b:51:90:c7:f2:e1:c6:50:82:7f:
2f:da:e7:2f:be:62:ac:b4:8f:dc:11:90:ba:8a:6e:
04:90:f0:b9:15:6e:e1:17:07:2d:b3:9f:03:75:f0:
c7:2c:65:9d:97:f5:be:79:d4:f2:73:98:2c:b5:63:
4b:d1:92:b8:ff:62:4c:78:35:d3:74:23:6c:b7:f0:
2e:67:48:44:1b:0c:71:92:87:32:e3:05:08:77:e2:
37:fa:19:be:41:f9:f2:a3:47:3f:98:b9:60:a6:36:
03:6a:ca:8e:36:4f:8f:30:51:d5:fd:ad:02:19:7d:
38:6b:77:c5:33:c3:e7:41:4f:92:55:d4:67:26:f0:
0c:30:1d:53:7f:10:55:1c:b6:a3:b1:07:5f:df:4b:
54:0b:ab:80:28:9c:4d:0a:60:30:53:9d:7e:c0:d2:
7a:3b:68:77:22:9c:f9:c8:c6:b8:05:ac:a9:c5:6c:
37:2f:9f:42:c3:38:ba:14:58:03:fb:e1:be:d3:45:
40:d9:9b:e4:85:c1:2c:28:18:1f:81:d5:89:31:96:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8D:BB:CA:FD:86:6C:5E:89:43:CF:4B:66:E0:6C:D0:04:6B:86:F8
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS209737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.205.0/24
85.235.73.0-85.235.74.255
176.96.128.0/24
185.231.226.0/24
193.32.184.0/23
193.111.79.0/24
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:60:26:71:f2:56:92:ea:6d:5a:ca:ec:af:6c:47:61:de:d1:
a5:8a:52:b3:14:0d:16:65:d9:f5:4b:e1:b0:ea:cd:09:c8:90:
64:26:7c:56:a6:8b:86:31:3d:8d:aa:97:ab:d3:e8:88:b6:9b:
20:e0:1d:eb:2d:7f:fb:1c:b2:3d:1b:ea:42:00:f7:fa:8f:00:
dd:ea:d9:39:64:5a:5b:26:c6:46:8a:58:d7:a3:15:a6:0c:df:
25:38:62:39:5b:2e:3a:39:ee:c2:94:35:90:e9:20:31:c6:8b:
c7:d3:08:6f:69:67:5f:a5:15:4d:cd:f3:e0:99:5a:dc:f6:d6:
1d:2c:60:8b:99:9d:f2:6e:45:49:cc:d3:89:fc:c4:b9:08:26:
40:20:25:24:3c:f0:e1:f8:31:8b:9e:51:f8:5a:ad:be:9a:fa:
bd:be:58:76:40:3d:de:a5:6c:12:c8:4b:fc:d2:cd:93:1e:e2:
f9:51:4c:f3:91:0a:8f:4e:fc:c0:98:0f:f2:3b:97:d4:72:50:
00:a0:77:ee:60:af:65:67:5c:f0:21:03:61:ed:a6:b9:d3:14:
20:bd:55:57:86:92:d6:17:af:a6:e7:9c:c8:43:e1:b7:e4:a6:
ac:22:6e:2c:76:ee:19:bf:b3:5f:e2:8c:dc:62:e1:90:ca:6b:
d9:ef:fe:a5
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUe6SkWqruQkKoL1T+gLxWBZj+jnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjA4MTExMjIzMDhaFw0yNzA4MTAxMjI4MDhaMDMxMTAvBgNV
BAMTKEVCOERCQkNBRkQ4NjZDNUU4OTQzQ0Y0QjY2RTA2Q0QwMDQ2Qjg2RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UCxSj8xUAd7hZUILvuXqRFJb
n7hEhJ9py8sZcMDQBbC4FqBy+4aqo72v9vECBBv5G1GQx/LhxlCCfy/a5y++Yqy0
j9wRkLqKbgSQ8LkVbuEXBy2znwN18McsZZ2X9b551PJzmCy1Y0vRkrj/Ykx4NdN0
I2y38C5nSEQbDHGShzLjBQh34jf6Gb5B+fKjRz+YuWCmNgNqyo42T48wUdX9rQIZ
fThrd8Uzw+dBT5JV1Gcm8AwwHVN/EFUctqOxB1/fS1QLq4AonE0KYDBTnX7A0no7
aHcinPnIxrgFrKnFbDcvn0LDOLoUWAP74b7TRUDZm+SFwSwoGB+B1YkxlvrnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU6427yv2GbF6JQ89LZuBs0ARrhvgwHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjA5NzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAHyjN
MAwDBABV60kDBABV60oDBACwYIADBAC55+IDBAHBILgDBADBb08DBADZEtAwDQYJ
KoZIhvcNAQELBQADggEBAG5gJnHyVpLqbVrK7K9sR2He0aWKUrMUDRZl2fVL4bDq
zQnIkGQmfFami4YxPY2ql6vT6Ii2myDgHestf/scsj0b6kIA9/qPAN3q2TlkWlsm
xkaKWNejFaYM3yU4YjlbLjo57sKUNZDpIDHGi8fTCG9pZ1+lFU3N8+CZWtz21h0s
YIuZnfJuRUnM04n8xLkIJkAgJSQ88OH4MYueUfharb6a+r2+WHZAPd6lbBLIS/zS
zZMe4vlRTPORCo9O/MCYD/I7l9RyUACgd+5gr2VnXPAhA2HtprnTFCC9VVeGktYX
r6bnnMhD4bfkpqwibix27hm/s1/ijNxi4ZDKa9nv/qU=
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:27:10 2026 by rpki-client