Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209711.roa
File: AS209711.roa (raw, json)
Hash identifier: BtqieGvUOfAL2pff8oijgVA175OSUBzXSLamOvFsUBo=
Subject key identifier: 89:B9:DF:8C:17:9C:B8:EB:5C:3B:55:DC:33:27:4F:94:21:FE:B4:48
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7F16F2FE9E67A45228B17EF8E9941FFF68A27244
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209711.roa
Signing time: Sat 05 Sep 2026 15:42:04 +0000
ROA not before: Sat 05 Sep 2026 15:37:04 +0000
ROA not after: Sat 04 Sep 2027 15:42:04 +0000
asID: 209711
IP address blocks: 168.222.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:16:f2:fe:9e:67:a4:52:28:b1:7e:f8:e9:94:1f:ff:68:a2:72:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 5 15:37:04 2026 GMT
Not After : Sep 4 15:42:04 2027 GMT
Subject: CN=89B9DF8C179CB8EB5C3B55DC33274F9421FEB448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:f0:53:15:ba:6a:7f:00:e6:5b:35:85:0b:
eb:30:4c:6f:d1:ce:4f:e2:8a:31:04:e4:02:b6:31:
31:ce:17:de:0b:e1:e4:2d:2e:7e:5c:26:b9:aa:5e:
a9:d7:c0:d0:b7:03:75:d7:a0:88:37:ca:d4:ac:48:
8c:2b:14:5d:b3:46:92:c6:78:63:a9:f2:71:b7:ef:
26:1b:cc:39:be:67:db:36:c3:ed:39:9b:1b:f8:c8:
c6:3e:6d:a8:e3:f2:b7:d6:05:77:db:a4:df:a0:0c:
1b:d9:b4:a1:ea:b8:99:67:71:05:92:0e:af:fe:3b:
97:1a:a2:a5:0e:37:0d:8f:c4:8f:cb:d2:f9:f0:cb:
b1:e0:e2:3f:a6:28:e2:66:89:2d:a6:f8:82:d7:be:
f9:81:56:3b:05:52:3d:1c:42:b6:86:4b:da:a4:02:
4d:cb:0e:24:3d:ed:4b:ad:88:62:b4:13:3e:fa:15:
b7:6b:57:9d:fd:02:d2:82:16:12:69:f1:3f:74:b4:
45:f9:bf:b7:e0:32:98:69:49:14:19:9d:f2:59:78:
71:e1:6a:d7:a2:88:9b:ef:a1:b5:62:20:5d:a3:88:
27:80:81:78:39:bb:e2:16:d1:a7:ed:f8:6c:d2:9f:
18:be:bc:ef:48:c6:54:dd:6f:d1:24:d4:e8:be:c8:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B9:DF:8C:17:9C:B8:EB:5C:3B:55:DC:33:27:4F:94:21:FE:B4:48
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:79:a6:b1:53:43:d5:04:9c:aa:c9:c7:71:b6:cb:e3:34:09:
9c:8a:e8:cf:06:24:62:35:9d:93:ed:5f:c8:7f:5a:7f:d5:ea:
0d:6d:de:10:5e:7f:51:de:8a:52:76:b8:bf:3d:a8:f2:76:a6:
50:bf:4b:9f:ec:03:7b:96:be:3d:dc:c2:cb:7c:40:9b:5a:09:
b1:d2:32:95:1f:24:b8:a5:0d:29:97:29:6d:35:01:2d:11:cf:
32:cc:33:d4:24:ff:db:90:ca:c8:1b:50:1e:d6:29:9e:c6:75:
e3:c0:27:69:9f:ee:a5:07:5a:e7:63:eb:cb:c3:d1:eb:0c:a3:
8c:98:dc:4e:ab:a5:1e:1a:38:10:e7:26:90:9b:1d:32:2d:48:
a4:11:4d:e8:d4:e9:d2:69:b4:d1:94:84:7d:49:d5:ec:ed:8b:
02:5c:07:63:71:4a:12:17:32:ce:73:30:63:b5:c1:57:4f:45:
5b:37:99:12:3a:c7:34:5a:e2:b4:41:cb:00:ba:5c:37:85:77:
72:39:a2:2f:11:d6:78:39:ba:1c:ae:1b:ce:6e:87:b5:78:8a:
c3:46:ea:c7:81:08:ed:9f:ad:30:23:78:3b:25:b9:7e:27:b5:
03:89:74:fc:7d:59:1f:86:ae:fc:32:28:3c:cc:4d:4f:23:b6:
df:f2:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:22:00 2026 by rpki-client