Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209357.roa
File: AS209357.roa (raw, json)
Hash identifier: ITxLzuJz5ijJLbtLik0UFDNMEJFSQqMRlkHFR5kX3Wk=
Subject key identifier: 8F:A4:7E:77:51:BB:D5:10:06:D4:9F:6E:E9:9C:C7:19:7E:E5:64:F1
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2744FD22A6D7333EF89B825421886DCF75D1C617
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209357.roa
Signing time: Fri 10 Apr 2026 17:08:30 +0000
ROA not before: Fri 10 Apr 2026 17:03:30 +0000
ROA not after: Fri 09 Apr 2027 17:08:30 +0000
asID: 209357
IP address blocks: 2a0f:85c1:c1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:44:fd:22:a6:d7:33:3e:f8:9b:82:54:21:88:6d:cf:75:d1:c6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 10 17:03:30 2026 GMT
Not After : Apr 9 17:08:30 2027 GMT
Subject: CN=8FA47E7751BBD51006D49F6EE99CC7197EE564F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:03:f1:63:e2:9e:3a:ee:a9:09:26:14:fd:
f8:df:c5:39:2a:51:36:8a:3e:ac:9a:13:31:3d:4f:
68:96:d3:a4:d2:58:97:c5:9d:d5:14:6c:d7:af:59:
4b:55:ab:90:ef:ef:4b:2f:ee:fd:2d:af:24:26:17:
3d:5c:56:aa:fe:a6:09:9d:75:cf:71:e4:88:33:4b:
48:dd:9c:5d:5b:62:79:11:83:2a:5b:1c:a4:60:2f:
64:bd:3e:23:ca:d0:cd:72:60:37:6a:82:cb:5f:38:
27:05:e4:e8:48:b2:12:44:49:ab:97:21:4c:08:7c:
06:8b:74:2f:0d:64:7b:0f:96:85:92:70:b5:fa:48:
97:1b:23:38:68:c0:c9:d0:63:1b:a9:48:c2:60:5d:
16:2e:d0:b6:9c:39:7c:89:54:38:4a:32:d5:d0:89:
2b:82:d7:f4:6e:8d:c3:45:89:f3:2f:e7:f2:07:12:
79:84:1d:01:e4:f8:48:5a:3b:ae:93:36:c0:3b:c3:
e1:03:ea:ab:b6:09:6c:71:7d:3c:a2:0c:c9:a0:da:
3d:5a:4f:e4:d6:a3:a1:70:e0:a0:6a:fc:09:f5:39:
5e:39:0c:03:b2:dc:00:97:00:80:d5:ef:91:dc:71:
8c:70:1e:94:f0:2f:3e:4f:03:44:4b:98:d3:ad:7f:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A4:7E:77:51:BB:D5:10:06:D4:9F:6E:E9:9C:C7:19:7E:E5:64:F1
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209357.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c1f::/48
Signature Algorithm: sha256WithRSAEncryption
27:d4:d0:14:b1:9a:4b:74:43:49:a8:e9:14:df:a2:6e:93:5a:
3e:21:a2:fa:4d:e3:2b:1d:25:3e:23:46:d1:b1:6f:22:95:2b:
68:a9:9f:82:32:2a:30:fa:29:0e:4f:0c:8d:a2:3b:b7:7b:90:
1c:77:4e:94:4a:4d:27:f9:64:95:b2:de:2c:2f:d6:7d:75:9e:
af:54:69:16:f5:e2:d3:13:6c:5d:2b:bd:ee:0d:78:86:93:59:
51:8e:bb:db:64:0c:1d:b6:92:83:06:5f:0d:4d:d2:d9:18:d0:
53:4e:77:ff:5e:46:43:a0:78:3e:b1:4f:48:23:10:cb:6d:83:
d4:70:10:9a:15:6a:5c:a8:e4:a4:4b:4d:26:b7:f2:76:ce:d0:
2e:bd:63:70:ad:18:3d:d0:7b:bd:c0:83:77:84:9b:a6:79:50:
96:ea:a4:ea:20:82:5c:a5:d7:ca:2e:bd:76:be:23:69:c8:37:
f1:e0:43:03:8b:35:b8:01:79:c8:5a:ed:fc:c7:9f:04:b3:0f:
9d:7d:ec:3e:ec:8a:9f:4b:09:9a:01:6c:54:93:c0:31:9c:51:
87:e6:2f:7a:36:14:9b:a5:e8:bd:34:f4:2b:42:2f:d5:c8:ee:
06:e1:ea:53:0f:53:f2:6e:4e:4f:82:bd:08:d4:86:9c:25:13:
fb:47:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:54:00 2026 by rpki-client