Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa
File: AS209526.roa (raw, json)
Hash identifier: 21yaMM1/Aic6MIsmPJQMsiyNuth9XtZNhPBNwTAhDqo=
Subject key identifier: D1:AA:E7:D3:80:7F:F1:70:0D:86:BD:45:AD:94:38:D6:4C:1A:B0:A6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 39F4F71B55DC8797B51BE556A1DC58FC6A37FFC4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa
Signing time: Mon 14 Sep 2026 09:38:41 +0000
ROA not before: Mon 14 Sep 2026 09:33:41 +0000
ROA not after: Mon 13 Sep 2027 09:38:41 +0000
asID: 209526
IP address blocks: 82.23.151.0/24 maxlen: 24
82.24.48.0/24 maxlen: 24
82.25.4.0/24 maxlen: 24
82.25.6.0/24 maxlen: 24
82.25.7.0/24 maxlen: 24
82.25.16.0/24 maxlen: 24
82.25.138.0/24 maxlen: 24
82.25.199.0/24 maxlen: 24
82.27.8.0/24 maxlen: 24
82.29.103.0/24 maxlen: 24
82.39.138.0/24 maxlen: 24
82.40.36.0/24 maxlen: 24
82.40.39.0/24 maxlen: 24
82.41.21.0/24 maxlen: 24
82.41.72.0/24 maxlen: 24
82.41.170.0/24 maxlen: 24
82.41.171.0/24 maxlen: 24
84.75.159.0/24 maxlen: 24
178.83.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f4:f7:1b:55:dc:87:97:b5:1b:e5:56:a1:dc:58:fc:6a:37:ff:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 14 09:33:41 2026 GMT
Not After : Sep 13 09:38:41 2027 GMT
Subject: CN=D1AAE7D3807FF1700D86BD45AD9438D64C1AB0A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:20:99:ba:c6:d1:32:c8:4f:8e:6a:17:4b:26:
44:b2:f5:55:79:f2:89:74:8a:f1:84:3f:a2:50:6e:
24:2b:ba:57:76:b1:0a:ce:c1:5a:25:a2:1a:8b:24:
07:d8:63:e0:93:d3:36:82:bc:ab:82:5c:00:47:2c:
c5:a3:86:90:31:42:bf:86:97:ef:c4:16:79:b1:86:
f8:9e:e7:5e:ff:8c:43:4c:6f:ca:6e:87:5c:ea:f1:
48:c5:7c:38:c9:a8:07:5c:79:a2:96:ec:b2:47:ab:
13:82:5b:83:53:b1:c3:c2:04:1f:0f:e1:d4:e3:36:
d1:a1:e1:78:cc:6e:4a:56:f7:d0:bb:41:12:a4:0b:
d7:5c:2f:bf:44:e0:82:d1:ba:18:f8:09:6d:6a:17:
4c:dc:dc:38:6c:02:3b:b0:c4:be:95:ef:8e:fb:36:
2e:e2:4b:2d:0f:12:8c:b4:4c:e6:ec:92:46:d8:24:
db:59:8d:40:ad:42:12:fd:7f:02:43:f7:8e:93:43:
55:c2:30:ca:9a:77:7a:10:38:84:fd:32:89:e8:96:
d5:cd:7b:0c:85:bc:6d:f9:eb:e3:ba:7d:b3:8c:ab:
62:75:80:7c:a1:d6:30:34:9b:2d:76:39:df:30:0f:
d1:27:8c:57:65:a8:86:76:a9:bd:db:3f:8c:f8:88:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:E7:D3:80:7F:F1:70:0D:86:BD:45:AD:94:38:D6:4C:1A:B0:A6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.151.0/24
82.24.48.0/24
82.25.4.0/24
82.25.6.0/23
82.25.16.0/24
82.25.138.0/24
82.25.199.0/24
82.27.8.0/24
82.29.103.0/24
82.39.138.0/24
82.40.36.0/24
82.40.39.0/24
82.41.21.0/24
82.41.72.0/24
82.41.170.0/23
84.75.159.0/24
178.83.70.0/24
Signature Algorithm: sha256WithRSAEncryption
24:21:49:0e:ca:b3:bb:f7:e1:fd:63:52:b9:ce:ca:9e:2a:76:
e7:b0:70:73:1b:f4:6b:b0:15:42:67:08:5c:99:83:ea:05:99:
72:4a:b6:ad:4c:c1:82:25:ed:90:8e:4f:b5:f3:bf:d8:bf:cc:
19:48:76:e0:47:c8:21:12:a8:c4:93:e1:3e:a5:05:e9:0c:55:
6d:06:ae:a8:82:7b:1e:f4:4f:6e:9c:df:da:de:01:1b:00:74:
17:75:e6:fc:26:be:ad:cb:bd:9a:e3:e8:3d:0f:f5:1a:0d:14:
e5:17:ec:f9:e5:6a:e6:8b:7e:23:38:1f:54:85:b2:42:a0:c1:
b7:42:16:7b:06:10:32:b8:b2:c3:09:42:9c:4c:b3:2c:cd:84:
b1:e0:93:29:f9:36:9b:cf:8a:0b:32:8f:eb:ed:50:39:0f:20:
4d:1d:58:93:13:dc:d2:1c:cb:20:f3:5b:15:21:37:59:14:ae:
7b:00:b2:85:29:cd:39:7a:2e:fc:5d:0c:c3:f3:25:04:b3:2b:
4d:cc:04:e2:0b:ce:e5:5c:0d:8b:20:c3:3b:90:2a:fb:de:59:
54:b5:17:51:3f:43:06:8f:d3:1e:55:9b:2e:d9:31:71:00:b8:
66:d2:48:14:3f:8c:e2:84:54:d9:e8:8e:29:62:97:e6:26:37:
f8:9b:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:48:55 2026 by rpki-client