Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209507.roa
File: AS209507.roa (raw, json)
Hash identifier: cvzLibdbacKhE7kgrvOabajqxbIojTq7/GaLdjh/izw=
Subject key identifier: 9D:AC:31:71:D0:EF:DD:DF:B1:7C:9D:CB:CE:1D:F5:C0:8D:E1:A1:8C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4009E824E791CDF4957DF9D346D39ABBC9CB90AD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209507.roa
Signing time: Sat 19 Sep 2026 00:09:13 +0000
ROA not before: Sat 19 Sep 2026 00:04:13 +0000
ROA not after: Sat 18 Sep 2027 00:09:13 +0000
asID: 209507
IP address blocks: 2a0f:85c1:25::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:09:e8:24:e7:91:cd:f4:95:7d:f9:d3:46:d3:9a:bb:c9:cb:90:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 19 00:04:13 2026 GMT
Not After : Sep 18 00:09:13 2027 GMT
Subject: CN=9DAC3171D0EFDDDFB17C9DCBCE1DF5C08DE1A18C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:24:c0:c9:52:1d:75:90:d1:24:9e:bc:05:
4f:b7:8c:bb:d9:7f:b7:30:65:f7:b5:18:15:db:df:
fa:3b:13:28:66:92:43:0c:ae:c3:d7:2f:82:77:21:
08:0e:1e:ba:d2:51:de:f0:1f:30:cc:7c:12:0d:34:
79:62:5f:a2:5d:af:25:75:12:8a:16:16:2f:40:17:
95:25:ab:14:cb:1d:d5:56:42:1c:a4:62:99:f6:cf:
1a:e3:32:86:2e:eb:91:fc:15:34:32:42:a3:ee:54:
96:ac:ea:7f:43:54:a6:00:57:24:57:04:af:88:89:
00:04:8a:68:0a:f0:5d:bf:6a:2b:a4:0f:d7:31:48:
f2:1f:0c:2a:9e:7f:01:89:03:01:f0:95:58:be:0d:
22:92:4a:d1:9d:af:f6:84:a8:5a:82:57:78:00:cf:
6f:d0:b8:bc:5c:e4:49:0c:1e:ea:5d:0a:bc:84:6c:
07:76:9b:09:41:60:68:6b:52:15:5b:22:72:69:c5:
f1:64:96:81:44:31:3f:48:91:cb:c8:ce:c5:1c:42:
2c:f9:13:0d:e7:b1:4f:48:ee:03:ed:72:e2:31:39:
dd:92:bd:76:44:0f:db:86:9e:66:1f:1b:dd:98:df:
ea:95:77:ac:68:f4:9c:26:f5:0f:cf:40:55:91:cc:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AC:31:71:D0:EF:DD:DF:B1:7C:9D:CB:CE:1D:F5:C0:8D:E1:A1:8C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:25::/48
Signature Algorithm: sha256WithRSAEncryption
df:0b:52:6c:8a:21:49:9f:0c:cb:76:a1:32:0c:7c:ac:8b:32:
f6:c0:e3:a8:ca:dd:9f:34:33:1b:51:53:d5:82:88:a1:30:40:
a5:89:59:dd:62:e8:01:e8:8c:d0:60:68:97:cb:bc:74:1e:9c:
20:2a:f2:60:85:c7:d5:63:de:87:20:cd:75:69:b8:d1:da:31:
7b:19:6e:12:84:c1:33:97:28:77:4d:6b:4c:ea:c2:63:39:80:
98:bf:7b:56:e3:26:9a:d6:13:92:95:8b:84:ed:7c:c4:9f:5f:
d1:98:cc:89:d9:be:df:e6:0b:be:06:e7:e9:4d:6d:13:b5:ac:
01:29:e8:45:e5:2b:5b:37:9e:a8:b0:c2:64:60:ad:50:de:1a:
46:02:2d:9d:0c:d3:e0:64:ff:c6:7b:08:9c:bf:5e:df:79:a6:
47:2e:44:11:cc:c9:43:35:6f:4b:7a:19:24:82:0b:59:14:a8:
9d:60:98:a7:5e:fd:64:3f:a8:62:7f:07:54:e1:81:4f:65:f8:
bd:f8:cc:c2:a8:86:ff:db:0e:5a:f3:f7:09:0b:0d:36:b0:55:
34:73:40:b5:95:c3:b2:9b:a3:f0:8b:43:76:86:ff:f0:2e:4c:
6f:a7:37:39:e5:19:ed:f5:22:d1:c3:bf:bd:bb:b4:16:c4:6d:
87:8e:35:dc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUQAnoJOeRzfSVffnTRtOau8nLkK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA5MTkwMDA0MTNaFw0yNzA5MTgwMDA5MTNaMDMxMTAvBgNV
BAMTKDlEQUMzMTcxRDBFRkREREZCMTdDOURDQkNFMURGNUMwOERFMUExOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChASTAyVIddZDRJJ68BU+3jLvZ
f7cwZfe1GBXb3/o7EyhmkkMMrsPXL4J3IQgOHrrSUd7wHzDMfBINNHliX6JdryV1
EooWFi9AF5UlqxTLHdVWQhykYpn2zxrjMoYu65H8FTQyQqPuVJas6n9DVKYAVyRX
BK+IiQAEimgK8F2/aiukD9cxSPIfDCqefwGJAwHwlVi+DSKSStGdr/aEqFqCV3gA
z2/QuLxc5EkMHupdCryEbAd2mwlBYGhrUhVbInJpxfFkloFEMT9IkcvIzsUcQiz5
Ew3nsU9I7gPtcuIxOd2SvXZED9uGnmYfG92Y3+qVd6xo9Jwm9Q/PQFWRzJyHAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUnawxcdDv3d+xfJ3Lzh31wI3hoYwwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA5NTA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQAlMA0GCSqGSIb3DQEBCwUAA4IBAQDfC1JsiiFJnwzLdqEyDHysizL2wOOoyt2f
NDMbUVPVgoihMECliVndYugB6IzQYGiXy7x0HpwgKvJghcfVY96HIM11abjR2jF7
GW4ShMEzlyh3TWtM6sJjOYCYv3tW4yaa1hOSlYuE7XzEn1/RmMyJ2b7f5gu+Bufp
TW0TtawBKehF5StbN56osMJkYK1Q3hpGAi2dDNPgZP/Gewicv17feaZHLkQRzMlD
NW9LehkkggtZFKidYJinXv1kP6hifwdU4YFPZfi9+MzCqIb/2w5a8/cJCw02sFU0
c0C1lcOym6Pwi0N2hv/wLkxvpzc55Rnt9SLRw7+9u7QWxG2HjjXc
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:41:38 2026 by rpki-client