Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS209349.roa
File: AS209349.roa (raw, json)
Hash identifier: fuWxA00hn5w6KkPZVbdz2MgJjspkZh1ySmS7ZUVrwBM=
Subject key identifier: 30:53:1B:7D:3E:A5:25:04:35:15:BE:09:3C:F9:97:4E:8B:64:D8:51
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 69E814E8FBDFA2F5B1CCB03A0B8A0C6F778632C7
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS209349.roa
Signing time: Fri 01 May 2026 09:14:10 +0000
ROA not before: Fri 01 May 2026 09:09:10 +0000
ROA not after: Fri 30 Apr 2027 09:14:10 +0000
asID: 209349
IP address blocks: 82.139.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e8:14:e8:fb:df:a2:f5:b1:cc:b0:3a:0b:8a:0c:6f:77:86:32:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: May 1 09:09:10 2026 GMT
Not After : Apr 30 09:14:10 2027 GMT
Subject: CN=30531B7D3EA525043515BE093CF9974E8B64D851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:b8:70:73:ac:f9:da:31:10:ec:47:3f:9c:
18:20:e6:47:84:8d:7b:40:4c:1f:ff:77:66:fa:9a:
db:24:8d:44:90:e7:be:f5:e0:82:fd:5b:13:2b:92:
54:8b:5c:5f:14:72:3a:8a:0b:e6:64:00:1c:c0:c4:
d2:42:82:9a:c9:f8:26:6e:4a:f7:0c:e4:6e:de:bc:
42:d0:8a:aa:44:aa:ac:5a:d0:4d:aa:64:16:60:fe:
25:cf:1e:a7:31:9b:65:d2:a6:3b:12:8c:24:70:46:
59:0e:d0:51:ea:5e:c0:75:3a:eb:50:27:88:ea:8c:
0f:9e:ff:88:34:71:08:6d:7e:45:b5:45:57:b0:5b:
99:85:71:1b:56:b0:fa:83:7a:b8:67:11:2b:6a:2d:
17:da:b9:f9:c0:02:96:70:93:57:51:3a:13:49:8d:
4c:ff:dc:87:2e:9d:d9:3e:6d:88:3b:4c:fc:06:9c:
67:7b:61:2a:29:43:c7:cd:11:52:ac:3c:3b:bc:64:
07:17:e3:ef:ee:f5:54:a7:2b:c3:30:16:83:6f:21:
9a:ac:2d:9c:32:54:9a:5c:88:7b:8d:03:d2:5d:9b:
5d:42:8b:f6:df:b2:ad:2d:7d:d1:2a:ca:08:c7:4e:
96:a9:d9:60:67:2e:18:03:75:44:31:3a:20:bb:d9:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:53:1B:7D:3E:A5:25:04:35:15:BE:09:3C:F9:97:4E:8B:64:D8:51
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS209349.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.230.0/24
Signature Algorithm: sha256WithRSAEncryption
67:23:d3:85:75:bd:33:44:5e:93:b7:0c:62:97:02:c2:b5:22:
ee:df:e1:94:5c:26:9e:49:be:f4:8d:00:52:1d:cd:92:89:fe:
f5:48:34:15:11:fb:17:e0:5e:7f:63:21:5c:5b:a8:2e:d5:85:
59:dd:b1:ef:76:8e:9a:05:bd:88:63:00:d3:47:0c:4e:46:f5:
67:e9:d9:e7:aa:77:53:7a:b8:64:18:3f:6a:67:54:c5:44:e8:
86:90:b9:11:68:90:4d:fb:68:a6:98:c5:31:af:38:32:c4:dd:
16:5b:f6:81:96:57:eb:ce:7f:97:b6:73:08:0f:68:ec:b2:9d:
bc:54:c3:e5:9c:78:0d:d7:27:b2:30:8b:37:7b:5b:7a:c1:8c:
c4:5e:10:9a:1a:e6:e3:51:18:bd:69:d7:d3:f5:b9:4e:91:b1:
1d:c2:45:10:c9:81:0e:a4:a6:89:f9:70:21:14:cd:5d:a1:28:
77:91:6c:92:6e:91:76:36:83:b7:ed:a3:5c:42:8c:d8:45:d4:
1c:c4:ec:f1:8d:9d:ae:a1:d5:52:71:da:70:2f:c2:55:5d:70:
4c:23:c6:43:5e:c0:26:04:ae:a7:47:ad:bc:fd:44:78:f5:b7:
62:c2:a1:01:4f:eb:d1:5d:5e:33:d5:69:47:b2:79:a0:94:94:
20:46:74:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:44 2026 by rpki-client