Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209858.roa
File: AS209858.roa (raw, json)
Hash identifier: BD/FIPKRuZJ4gbBUjQimW8OHrmXhR5gpLy9N0n0elUE=
Subject key identifier: 15:54:A5:E9:06:B0:77:3A:DD:22:B2:EA:B2:6F:BE:77:9B:6D:99:C3
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2E3CC12DF69362041D135471BF2E458B1ACB7347
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209858.roa
Signing time: Mon 30 Mar 2026 14:15:39 +0000
ROA not before: Mon 30 Mar 2026 14:10:39 +0000
ROA not after: Mon 29 Mar 2027 14:15:39 +0000
asID: 209858
IP address blocks: 2a14:7581:fef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3c:c1:2d:f6:93:62:04:1d:13:54:71:bf:2e:45:8b:1a:cb:73:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 30 14:10:39 2026 GMT
Not After : Mar 29 14:15:39 2027 GMT
Subject: CN=1554A5E906B0773ADD22B2EAB26FBE779B6D99C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:d8:bd:f3:53:61:de:b8:db:87:30:ff:fa:
ab:fe:c1:83:5c:63:d5:87:e2:3a:d3:71:96:c5:0d:
36:5a:61:60:c9:6e:04:12:b9:c6:ff:49:ac:fa:9d:
80:5e:13:5c:2d:eb:eb:3a:85:cf:0f:6b:41:c9:67:
2c:a0:c9:af:fc:0f:11:dd:30:eb:77:b2:c1:9e:97:
16:e0:70:12:6f:cc:31:33:23:74:d4:b6:5a:76:3e:
0d:b4:55:32:ad:12:e6:03:0a:18:ce:12:89:bb:68:
62:aa:9b:10:53:9f:32:7a:a7:86:82:ef:dc:35:bc:
5e:b1:4b:03:f3:fe:90:7d:52:55:ca:0f:03:05:9b:
0e:81:42:49:16:52:3e:71:4f:66:98:83:0d:8d:1c:
94:7d:91:34:19:ea:48:66:03:86:3b:e4:04:d2:f3:
5a:e4:c9:ec:38:04:28:d2:c1:23:ee:d5:73:00:80:
fa:eb:6a:12:1c:56:cf:47:a3:43:75:41:f3:90:b2:
3f:af:7b:f7:55:4d:55:46:13:6e:ef:91:4e:92:23:
a7:0f:5a:32:37:42:95:26:8e:ff:10:36:ba:6f:84:
40:8b:b2:bc:94:c2:5c:f2:98:ec:94:a7:ac:ed:63:
d6:89:67:5e:d3:10:4d:e4:b4:a1:ff:09:03:fc:a8:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:54:A5:E9:06:B0:77:3A:DD:22:B2:EA:B2:6F:BE:77:9B:6D:99:C3
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209858.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:fef::/48
Signature Algorithm: sha256WithRSAEncryption
6b:f6:fa:93:7a:6f:2c:ea:6d:7c:1a:40:35:60:9d:f1:63:cb:
7f:71:0e:2f:34:f4:7e:69:8e:78:e9:3c:38:be:02:3d:29:c8:
4b:61:d8:27:ef:a0:e3:97:1b:64:6a:02:2b:fa:81:d0:85:72:
e3:c1:70:ce:a9:65:39:2a:5e:98:3c:9a:42:dd:ca:08:bc:6d:
14:ff:2a:e7:6c:06:43:d4:07:0d:ff:f8:62:cb:b4:09:35:a3:
81:68:bb:f5:d3:4c:96:7b:59:1a:42:f3:97:75:b3:e6:39:ce:
32:9e:4d:27:28:8b:f9:0b:f3:44:2b:b1:15:bf:eb:43:c7:84:
f2:27:48:e2:f5:0e:53:07:d0:a2:fc:15:cb:d3:97:98:0c:27:
03:4b:12:82:d3:a6:1b:b2:e9:e1:90:d9:09:2e:6e:7d:23:e4:
0a:4e:55:ef:09:03:18:62:ff:42:a7:c0:6e:c5:b1:63:a6:9a:
b8:49:1c:8d:ba:f8:8a:48:c8:b7:07:48:18:a3:48:63:a6:57:
11:aa:e8:ba:69:c9:89:bc:ea:da:48:f7:18:36:17:31:01:3a:
0f:a4:91:52:c0:0b:d4:93:76:fd:e7:d6:e3:be:bc:9b:71:cf:
53:8e:b8:3e:5f:2f:b6:b0:c9:b8:a3:a5:26:61:18:84:36:5c:
8b:84:4b:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIULjzBLfaTYgQdE1Rxvy5FixrLc0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjAzMzAxNDEwMzlaFw0yNzAzMjkxNDE1MzlaMDMxMTAvBgNV
BAMTKDE1NTRBNUU5MDZCMDc3M0FERDIyQjJFQUIyNkZCRTc3OUI2RDk5QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKti981Nh3rjbhzD/+qv+wYNc
Y9WH4jrTcZbFDTZaYWDJbgQSucb/Saz6nYBeE1wt6+s6hc8Pa0HJZyygya/8DxHd
MOt3ssGelxbgcBJvzDEzI3TUtlp2Pg20VTKtEuYDChjOEom7aGKqmxBTnzJ6p4aC
79w1vF6xSwPz/pB9UlXKDwMFmw6BQkkWUj5xT2aYgw2NHJR9kTQZ6khmA4Y75ATS
81rkyew4BCjSwSPu1XMAgPrrahIcVs9Ho0N1QfOQsj+ve/dVTVVGE27vkU6SI6cP
WjI3QpUmjv8QNrpvhECLsryUwlzymOyUp6ztY9aJZ17TEE3ktKH/CQP8qEV5AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUFVSl6QawdzrdIrLqsm++d5ttmcMwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA5ODU4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
gQ/vMA0GCSqGSIb3DQEBCwUAA4IBAQBr9vqTem8s6m18GkA1YJ3xY8t/cQ4vNPR+
aY546Tw4vgI9KchLYdgn76DjlxtkagIr+oHQhXLjwXDOqWU5Kl6YPJpC3coIvG0U
/yrnbAZD1AcN//hiy7QJNaOBaLv100yWe1kaQvOXdbPmOc4ynk0nKIv5C/NEK7EV
v+tDx4TyJ0ji9Q5TB9Ci/BXL05eYDCcDSxKC06YbsunhkNkJLm59I+QKTlXvCQMY
Yv9Cp8BuxbFjppq4SRyNuviKSMi3B0gYo0hjplcRqui6acmJvOraSPcYNhcxAToP
pJFSwAvUk3b959bjvrybcc9Tjrg+Xy+2sMm4o6UmYRiENlyLhEtj
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:40:37 2026 by rpki-client