Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209735.roa
File: AS209735.roa (raw, json)
Hash identifier: NWrBtlX0OR4v0EF5cG0YimuGaQozzrgWVsf9832SR0o=
Subject key identifier: 03:6E:18:9A:81:9D:A5:16:9C:A5:2F:32:AC:2C:B7:B7:E5:4D:55:D0
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 363AFE3E4621648E12B1F1FCD82D30CA0C6FD0D0
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209735.roa
Signing time: Fri 26 Jun 2026 08:08:43 +0000
ROA not before: Fri 26 Jun 2026 08:03:43 +0000
ROA not after: Fri 25 Jun 2027 08:08:43 +0000
asID: 209735
IP address blocks: 2a0f:85c1:80::/44 maxlen: 44
2a0f:85c1:80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:3a:fe:3e:46:21:64:8e:12:b1:f1:fc:d8:2d:30:ca:0c:6f:d0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:43 2026 GMT
Not After : Jun 25 08:08:43 2027 GMT
Subject: CN=036E189A819DA5169CA52F32AC2CB7B7E54D55D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:6b:a3:57:8f:ac:27:cb:08:28:28:12:2e:
11:1b:bd:da:ff:b8:70:71:bb:02:02:b8:ba:92:90:
ff:67:e5:c7:0c:63:94:ab:cd:82:5d:e3:c9:0e:32:
48:28:80:9e:bf:28:fe:6d:0a:87:2e:85:c2:2f:2e:
a7:a9:33:81:e0:f1:1d:40:a6:50:e3:98:0d:9f:5d:
2e:3a:e4:67:41:9a:a7:66:fa:a5:02:9c:69:34:ed:
83:db:95:8a:06:4d:ef:2c:32:8f:b4:c2:c0:27:7b:
22:25:0f:67:7a:48:73:87:2a:66:5d:09:c7:c1:0c:
5c:8e:b5:96:16:a1:2f:de:5d:ca:dc:b4:82:46:cf:
d7:cb:bf:c4:f3:43:c9:35:d7:f2:25:25:e0:a4:e7:
94:65:b9:35:1f:1d:4c:5a:43:ba:17:7c:bd:b3:50:
3a:2f:e9:36:51:7f:73:70:43:93:63:7a:19:be:e5:
84:90:9a:5b:70:10:ec:ae:05:31:c0:a4:29:e1:5a:
8c:7b:0e:ca:dd:63:67:7b:13:20:c7:5c:3d:6f:82:
33:b8:7d:0d:24:de:74:7b:7a:ef:6a:c0:d9:ab:b0:
34:fe:30:c2:15:c3:80:a4:83:08:3c:55:f1:b5:29:
c3:b4:5a:b0:bc:4d:fa:8a:43:b6:ad:fd:07:5d:8f:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6E:18:9A:81:9D:A5:16:9C:A5:2F:32:AC:2C:B7:B7:E5:4D:55:D0
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:80::/44
Signature Algorithm: sha256WithRSAEncryption
5c:b2:08:5e:20:e5:cb:89:b1:d2:e8:9c:8a:49:4a:7b:d6:32:
95:e0:d4:00:69:5d:01:84:23:3a:68:0c:33:36:54:45:72:0f:
be:14:33:27:d5:8f:34:0f:65:bd:37:5a:db:3c:6c:35:3c:e0:
61:01:98:ff:21:3a:a1:97:ed:57:de:85:2c:fa:0e:ef:25:78:
42:bb:e9:aa:5b:0b:6a:b7:62:65:dc:fe:c8:75:2d:20:bc:db:
0a:ce:22:d9:4a:3a:75:bb:77:a9:4f:96:01:33:dd:28:d3:e9:
af:8e:96:b4:f7:47:ab:6e:b5:bc:0e:1f:30:41:8c:10:4c:45:
04:23:a4:a6:b0:ea:61:f9:9a:83:e3:00:d5:8e:2b:b7:e5:4b:
51:cf:a9:2b:94:20:00:92:7f:bf:22:23:f3:ec:d4:af:cb:fc:
99:36:8f:95:46:84:45:22:34:bf:c9:d9:a8:07:00:c6:8a:be:
d8:27:48:ea:77:ca:22:36:d6:c3:aa:47:4c:cb:7b:cf:ae:40:
b8:cc:fe:ec:96:f2:cc:39:cc:65:96:24:70:f3:07:11:2d:2d:
56:2c:9d:b6:9b:f8:4d:aa:90:85:d9:aa:3a:ee:b2:54:52:5f:
64:de:1f:f4:33:4a:be:d3:40:68:79:e7:78:ca:f9:6c:56:4a:
44:8b:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:59 2026 by rpki-client