Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS209336.roa
File: AS209336.roa (raw, json)
Hash identifier: AsVuxa2T33m92wIm+TcWvjkVsB81+ND6iJlV0crPwJs=
Subject key identifier: F0:FB:E4:6E:81:E7:24:8A:FA:C0:1D:FF:13:9D:F6:E6:F8:9B:E4:D1
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 156AFDDD96AA8A1B1834D6B0089C03E53D57D54C
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS209336.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 209336
IP address blocks: 91.246.26.0/24 maxlen: 24
212.74.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6a:fd:dd:96:aa:8a:1b:18:34:d6:b0:08:9c:03:e5:3d:57:d5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=F0FBE46E81E7248AFAC01DFF139DF6E6F89BE4D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:41:7e:4a:65:b5:c7:11:27:0d:58:e6:82:
e5:64:f1:5c:30:dd:8d:58:c7:8e:ed:19:54:1a:3b:
e5:2a:53:45:b4:8f:01:61:57:66:94:90:03:b2:18:
1f:fa:2d:c0:6c:5b:8a:07:2e:e1:74:9a:81:23:0e:
bb:cc:3c:74:52:57:ea:4c:3f:56:0e:f5:0e:c3:a9:
5c:77:45:62:c7:09:fb:d0:66:32:1b:8d:25:07:1e:
9a:c0:41:2b:52:63:28:45:51:8e:48:37:62:74:bd:
ba:45:4d:7d:81:bc:5f:4a:da:5b:80:e4:f9:86:36:
d5:a5:75:7b:81:3f:f1:11:87:09:cb:fb:23:ab:2c:
eb:c8:86:a4:fb:f7:78:e2:6b:d5:46:ce:7b:60:3c:
56:4f:66:9d:20:f3:d1:89:3e:7b:64:58:e3:54:07:
34:92:6b:2c:66:2c:e7:d1:ee:dc:c2:ad:21:66:04:
00:26:10:64:65:f8:24:14:6c:80:77:3a:b4:95:11:
96:f3:69:60:19:3a:ae:4a:cb:37:16:e3:f4:c4:d5:
2f:dd:53:9a:ea:d8:1e:fb:1c:84:9f:35:e0:9b:05:
4f:2d:61:c3:ee:c9:8b:97:f6:c1:83:34:34:32:36:
ad:41:eb:5e:05:cd:79:12:60:46:87:59:31:2b:93:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FB:E4:6E:81:E7:24:8A:FA:C0:1D:FF:13:9D:F6:E6:F8:9B:E4:D1
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS209336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.26.0/24
212.74.32.0/24
Signature Algorithm: sha256WithRSAEncryption
04:06:ee:4e:10:c1:31:91:2e:d9:14:b0:76:97:3b:06:80:9d:
9f:66:ff:58:de:d5:c2:88:c0:47:2c:52:c8:1e:3d:aa:fa:08:
a4:6c:44:e1:bc:48:89:45:03:da:7d:3d:91:5e:85:53:33:ea:
45:f9:a6:66:84:f5:6c:6a:b8:a2:98:a7:3d:c0:06:d8:f8:c4:
01:44:c2:5c:21:9d:d2:8a:24:8b:41:ba:8b:d8:40:23:6f:9b:
20:8d:94:92:1d:97:a6:57:48:02:c8:26:5f:aa:48:49:24:9d:
f2:36:f9:65:fe:b8:d3:ea:1e:0e:f2:d1:5a:38:9b:ff:63:8d:
e3:dc:41:19:35:fb:7a:ed:04:c5:4d:b3:5a:af:00:2a:45:63:
84:d2:c5:26:66:7f:9f:3c:63:06:80:33:58:d5:18:81:6d:6e:
4a:b9:2e:fc:fb:2d:24:69:b4:54:12:b4:d6:01:19:c4:00:cb:
0a:67:30:dc:31:a6:92:ce:f0:cb:8b:87:be:ab:f4:d8:cc:ad:
f5:77:86:ff:6b:66:9f:0d:86:99:46:34:49:ed:01:53:7d:2e:
39:13:d6:83:44:ec:e9:c6:12:20:08:77:6a:85:d6:2a:5c:2f:
41:0f:63:46:bf:c6:9e:a5:dc:b3:af:61:ef:ac:66:21:a1:a9:
b9:30:e6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:21 2026 by rpki-client