Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209104.roa
File: AS209104.roa (raw, json)
Hash identifier: a+UrvZC6EaranSUxWPhMEd0Emuz6ELPK5XG/r/qsVHM=
Subject key identifier: 14:FF:49:9B:90:3D:37:7D:BB:24:75:29:0A:E6:88:53:89:73:EF:4B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7F7AABAE83D3F65BCB53A7F680C4007D11DE1124
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209104.roa
Signing time: Tue 14 Apr 2026 14:22:46 +0000
ROA not before: Tue 14 Apr 2026 14:17:46 +0000
ROA not after: Tue 13 Apr 2027 14:22:46 +0000
asID: 209104
IP address blocks: 82.25.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7a:ab:ae:83:d3:f6:5b:cb:53:a7:f6:80:c4:00:7d:11:de:11:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 14 14:17:46 2026 GMT
Not After : Apr 13 14:22:46 2027 GMT
Subject: CN=14FF499B903D377DBB2475290AE688538973EF4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:ae:ed:5e:e8:29:f3:bc:db:c4:f1:a5:bc:
39:b3:b6:e8:b9:f1:4d:b2:9f:20:50:5e:77:0b:7a:
d9:ba:a8:46:fa:0d:c2:e0:1a:76:ac:6e:bb:0e:88:
ba:97:eb:cf:ac:43:de:57:42:2b:cf:93:a9:94:ad:
78:30:06:29:a4:72:5b:62:81:b2:1c:4d:df:ef:0f:
29:aa:3d:48:d9:02:c2:e6:22:79:c5:83:ee:da:5d:
f0:98:05:26:e8:cd:2e:d7:89:49:8f:0d:63:61:bc:
f8:7b:52:79:b0:c3:b4:01:ff:90:99:f5:31:63:c1:
1d:cc:20:a4:2e:a2:95:6e:37:a8:d2:52:1d:8b:49:
82:62:78:63:d6:cf:11:48:9c:d2:23:48:e4:bf:62:
06:cb:50:3c:4a:40:63:b3:7e:2a:b4:8a:f3:72:d2:
f1:90:d6:c9:49:29:9b:fb:3e:37:ca:e0:e8:d7:3e:
e9:c9:20:ab:79:24:a5:f5:53:3b:29:db:b5:16:fa:
08:1d:a8:ef:99:f0:de:b4:43:e9:7c:8e:c8:31:ab:
a2:6d:17:a1:e2:36:a8:2d:ef:6f:ca:37:13:1e:39:
39:89:5c:97:a5:3d:65:81:d4:b7:ac:31:e7:e9:e1:
41:8f:83:c4:b3:49:2f:23:72:70:90:fe:37:81:26:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FF:49:9B:90:3D:37:7D:BB:24:75:29:0A:E6:88:53:89:73:EF:4B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8f:ce:4c:ff:58:03:44:27:ff:4d:bb:53:06:bb:ad:37:e2:
2f:71:56:ad:ad:60:70:d7:ba:0a:63:77:11:3b:42:d8:83:df:
86:20:e5:03:bd:46:d2:96:a3:0a:f3:1b:81:01:f6:4f:a7:87:
81:7d:ab:68:cd:73:f5:42:a5:0c:95:c0:d1:21:b1:ce:b8:58:
fc:28:dc:5f:18:ab:4a:16:d8:7c:1d:03:29:1c:c6:88:90:b8:
c4:49:17:df:4f:75:85:d6:19:1c:b8:ff:30:d9:c6:3f:2c:15:
1e:f4:dc:36:b8:84:fa:b2:92:56:61:36:eb:1c:81:fd:34:5c:
07:59:76:13:c5:28:94:c4:27:26:72:5d:1d:f5:a3:45:dc:19:
11:7f:f0:f4:84:70:a4:a7:30:d7:c6:70:dc:28:a5:e8:d5:85:
ad:a0:82:4f:72:bd:58:98:be:25:a3:08:12:2b:d5:0f:0a:65:
6e:42:0c:c7:11:df:b3:3a:45:71:42:8a:dc:10:5a:67:4a:5e:
1a:24:c3:4e:b4:f0:f4:fd:5d:d7:b5:3a:78:63:c0:cc:aa:3c:
01:b8:f9:59:f0:a3:9c:6d:4f:cd:f0:27:74:4b:68:d2:eb:01:
5d:25:79:18:6b:46:63:6e:a7:13:23:c6:7a:d7:35:b0:ef:fe:
6e:f0:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:12 2026 by rpki-client