Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209829.roa
File: AS209829.roa (raw, json)
Hash identifier: ylECD8Ut+pPS/vGW0RQJBA1sRIjYSiPtsxjGdsdXH2w=
Subject key identifier: 32:43:C3:D0:5F:72:C4:88:34:10:74:5F:33:23:84:43:53:4D:DE:48
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 135FC84875600DE154D38D7CCC79F8F61740A975
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209829.roa
Signing time: Wed 04 Feb 2026 08:49:03 +0000
ROA not before: Wed 04 Feb 2026 08:44:03 +0000
ROA not after: Wed 03 Feb 2027 08:49:03 +0000
asID: 209829
IP address blocks: 178.83.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 19:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5f:c8:48:75:60:0d:e1:54:d3:8d:7c:cc:79:f8:f6:17:40:a9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 4 08:44:03 2026 GMT
Not After : Feb 3 08:49:03 2027 GMT
Subject: CN=3243C3D05F72C4883410745F33238443534DDE48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:83:c0:c6:2a:53:48:7f:5f:90:0d:0e:85:
a1:b5:92:ef:b3:5c:95:5f:f4:4b:47:c8:c2:a6:5d:
69:22:c7:c6:a1:1a:f8:ab:f6:83:4b:be:10:71:0b:
56:52:ed:b2:7a:c7:bf:9f:94:90:36:66:b5:17:2b:
33:13:71:78:54:a4:1b:cc:d0:ee:01:7e:ea:39:8a:
50:fc:2d:a0:a4:4e:2b:d6:b8:dd:71:18:78:22:ee:
f0:13:4b:3d:cd:b6:a4:2e:94:85:f3:9c:1b:bf:b0:
b5:f3:04:bd:72:ba:0a:60:22:2e:8b:b5:65:89:ee:
64:a7:ad:a8:f9:49:80:e7:b8:84:84:5d:58:41:fe:
d0:63:41:94:f1:53:f0:5a:e6:74:83:c1:6a:11:0f:
4c:44:48:2e:bf:ea:8d:93:fa:04:c1:12:19:7c:07:
71:58:c1:7f:4e:3c:b9:91:a5:41:49:c1:a2:54:54:
ef:8a:50:8a:09:20:18:6c:f0:d4:70:c6:c2:9e:10:
6c:9e:28:8a:56:57:07:c1:c3:51:52:8b:9d:62:fe:
40:d8:db:4d:c2:6f:6e:45:1f:3d:17:7b:21:35:8f:
71:d3:b2:31:bc:b4:2f:2d:9d:87:72:dc:ed:5b:d0:
06:12:4c:af:02:29:d4:77:31:e0:02:fd:45:3f:a2:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:43:C3:D0:5F:72:C4:88:34:10:74:5F:33:23:84:43:53:4D:DE:48
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.185.0/24
Signature Algorithm: sha256WithRSAEncryption
15:39:e7:d4:69:fd:5a:52:9d:1e:03:d2:3d:16:2f:9c:cb:b6:
c6:45:77:a6:00:56:cd:3a:ba:2d:cc:7b:f8:da:60:bd:e5:6d:
a0:8c:ea:de:c6:49:81:7d:13:9c:40:b6:95:2b:6b:f8:2f:be:
de:5e:a4:b4:97:6a:07:f3:ff:31:98:ab:dc:81:c9:f5:7e:ef:
50:65:b0:c7:99:f4:13:fa:2a:37:f8:c1:02:ca:41:a1:cf:bb:
2c:e2:f5:45:d8:5d:65:7f:86:64:2e:02:84:d0:f2:8f:a8:b3:
6a:9e:f9:0d:d1:e5:cc:4f:87:f2:2f:91:bb:4e:ba:0e:bb:90:
b5:4e:8a:e9:82:bd:93:1d:42:c3:93:f4:53:56:6b:aa:30:01:
60:72:a6:ed:7e:17:1d:27:2d:28:ca:b8:76:f2:00:3e:62:b1:
2a:41:94:3a:9e:df:56:82:3f:de:10:b4:0f:50:62:2d:03:98:
4b:85:26:95:29:54:a0:ac:a6:4a:6b:11:62:33:f8:7b:a9:ac:
d6:3a:c6:3b:1a:94:5f:af:b0:94:46:ea:73:f4:69:96:b9:16:
52:27:d5:c1:ad:8d:c4:5a:ce:74:89:78:ea:d9:93:de:51:a0:
7f:8c:c1:10:70:10:ab:8e:a4:cf:bd:7d:18:d4:c9:0a:ac:da:
87:61:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:41:30 2026 by rpki-client