Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209771.roa
File: AS209771.roa (raw, json)
Hash identifier: 030bBfTlKrSz4vCcmcb92KWhPyFuSjhkKJ+pMNtDNcM=
Subject key identifier: 83:4B:8B:A8:E0:BB:7C:1B:7A:06:76:62:BC:A5:B0:42:98:81:03:BF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 07DEAC366B5F8CC83F33C4AB1066F3261221F71A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209771.roa
Signing time: Thu 16 Apr 2026 19:47:05 +0000
ROA not before: Thu 16 Apr 2026 19:42:05 +0000
ROA not after: Thu 15 Apr 2027 19:47:05 +0000
asID: 209771
IP address blocks: 2a13:9500:44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:de:ac:36:6b:5f:8c:c8:3f:33:c4:ab:10:66:f3:26:12:21:f7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 16 19:42:05 2026 GMT
Not After : Apr 15 19:47:05 2027 GMT
Subject: CN=834B8BA8E0BB7C1B7A067662BCA5B042988103BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:4b:2f:50:32:c9:db:6d:f2:3c:61:22:da:
8f:ac:4c:7c:0e:51:50:c9:e7:bf:a8:ba:d8:a7:e1:
c2:06:ba:b7:6f:2b:d9:69:46:3b:52:73:d8:90:ec:
f4:f8:fd:69:c8:5a:61:e8:29:02:a6:db:b8:cc:a5:
b6:22:06:bf:56:8e:f2:1b:9c:a6:33:90:b1:b0:fb:
f4:d8:50:b3:52:f2:5c:7d:cd:ba:d6:56:64:cd:de:
16:5f:6b:0c:25:0d:d0:f2:41:26:50:23:2a:10:a9:
43:6a:05:89:bc:7c:99:97:46:ad:f5:07:9e:4e:25:
00:c2:08:dc:25:80:f6:13:c2:4c:7c:e8:de:2f:da:
64:a2:2e:31:87:68:fe:91:e8:51:b7:58:cf:01:50:
8a:dd:d4:e6:18:20:61:b7:f9:bc:1a:3f:98:57:eb:
4b:42:50:0f:bf:d7:a7:81:0e:86:c0:45:51:9d:f3:
4b:ef:8a:85:ee:f4:25:c8:d8:1b:db:24:01:7b:b0:
25:23:49:ba:ca:4f:30:05:cd:4a:cd:0a:89:42:87:
86:4e:8d:e0:3e:17:d9:6d:e0:b1:48:b1:12:2b:f9:
87:5d:78:30:ad:7a:5a:eb:61:00:ab:af:28:a0:b2:
89:04:6a:8b:e5:fa:19:da:ac:d9:db:6f:da:82:77:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4B:8B:A8:E0:BB:7C:1B:7A:06:76:62:BC:A5:B0:42:98:81:03:BF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:44::/48
Signature Algorithm: sha256WithRSAEncryption
82:43:0d:b9:83:9f:e5:05:62:8c:df:6f:e6:c3:71:ac:6a:31:
89:d0:30:4c:f0:46:24:f9:a7:0d:46:2f:52:40:c7:20:d5:b0:
d3:f3:39:91:f3:df:57:75:31:56:f7:d5:17:b4:f4:93:62:27:
23:37:cc:fc:f7:05:34:63:c1:e5:28:db:af:af:cd:bf:d6:5a:
cd:b2:1d:5a:ae:f6:80:9f:87:80:88:4b:be:6b:1e:fb:c5:e9:
8f:f8:16:06:45:af:6a:b5:74:36:bc:69:31:b5:10:1c:f4:40:
c2:ff:f9:62:93:41:cf:be:a0:bb:e4:ea:38:ac:b7:b1:6c:6d:
78:17:5d:8b:01:8d:06:2c:36:d6:47:bc:52:5e:e7:cb:9f:a7:
69:be:d4:44:2f:ef:e4:03:fb:c2:eb:c4:6d:0d:a7:f8:0f:a8:
5b:a8:b3:ea:1f:b2:29:31:77:2c:11:ef:32:d7:a1:70:28:57:
e7:6a:a4:1a:1e:c5:5c:08:df:af:fb:e8:7a:7b:85:62:db:bd:
cb:34:93:aa:21:13:0b:e8:e3:68:9f:96:a6:b9:84:60:76:99:
38:54:99:f6:7c:fb:9c:98:1d:43:81:08:ea:2f:a0:46:28:6d:
de:55:9b:74:f1:18:7c:75:be:f4:62:3b:93:30:8b:65:3b:3c:
df:0f:55:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:47:11 2026 by rpki-client