Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209181.roa
File: AS209181.roa (raw, json)
Hash identifier: SEK9dgka5aoqsYk6Nut7Ho6Alwlk0jARNts5T/1sBAQ=
Subject key identifier: 02:02:0B:AC:CD:69:DC:4B:BC:18:11:86:D7:2E:2D:B0:9F:C9:32:1F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 61AD5C362232F9BA2095D4AA9CB9251C594629F7
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209181.roa
Signing time: Tue 24 Mar 2026 01:46:53 +0000
ROA not before: Tue 24 Mar 2026 01:41:53 +0000
ROA not after: Tue 23 Mar 2027 01:46:53 +0000
asID: 209181
IP address blocks: 5.252.160.0/24 maxlen: 24
85.208.73.0/24 maxlen: 24
181.214.53.0/24 maxlen: 24
191.96.72.0/24 maxlen: 24
191.96.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ad:5c:36:22:32:f9:ba:20:95:d4:aa:9c:b9:25:1c:59:46:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 24 01:41:53 2026 GMT
Not After : Mar 23 01:46:53 2027 GMT
Subject: CN=02020BACCD69DC4BBC181186D72E2DB09FC9321F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:c2:40:d6:d2:12:7d:00:76:63:32:45:fd:
0d:2d:95:4a:02:87:d4:6e:3c:74:ab:ac:3c:94:9c:
fb:e0:e1:53:08:6e:36:be:e6:8c:e4:bf:7a:ac:83:
e8:68:b6:41:78:f4:9d:9c:91:6f:ca:ed:bb:be:99:
a3:53:0e:47:03:e5:07:36:1d:07:84:de:55:6f:cc:
f8:bb:3c:fb:ba:70:97:66:36:e6:d8:ea:66:31:9c:
e5:eb:d7:e1:8a:75:b8:46:c8:49:59:d1:11:f5:e8:
17:82:d5:5e:a4:a8:b7:5d:40:45:cf:d8:0e:66:4a:
84:4a:dc:a0:c3:1c:b1:6d:6c:d2:f5:97:64:b3:6a:
c8:36:c6:ff:4e:15:62:6c:6c:69:9a:e3:a4:a0:e5:
10:3b:93:66:b1:53:1c:e0:2c:b0:64:e6:81:56:59:
8b:56:91:de:cf:97:f9:3a:04:b5:7e:f1:ab:b2:73:
e3:a2:78:8b:5e:41:c5:b7:32:0e:f8:8f:71:4b:75:
8d:18:7e:c0:13:70:a2:d6:f0:53:a9:54:9b:d7:40:
e5:4d:c9:e5:a3:da:26:c2:55:ce:f7:76:69:61:d3:
28:9a:a5:e8:a2:74:81:1f:41:b5:84:53:a1:98:2f:
a7:3b:24:cc:d2:b6:d7:6c:55:dc:13:48:61:0c:fb:
24:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:02:0B:AC:CD:69:DC:4B:BC:18:11:86:D7:2E:2D:B0:9F:C9:32:1F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.160.0/24
85.208.73.0/24
181.214.53.0/24
191.96.72.0/24
191.96.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c8:d6:f8:20:75:cd:01:b4:f7:1f:4c:e0:92:2d:df:23:a8:
30:74:1a:f6:74:e3:6e:2a:fa:d7:aa:6a:e5:e5:f5:fd:6a:b6:
72:1d:6d:aa:76:89:2c:d3:db:ad:7b:ac:93:1f:29:fd:e2:cb:
0b:21:61:16:ef:93:bd:43:1d:5a:05:7d:13:b6:86:05:50:c1:
e2:a4:fe:18:d1:4f:ab:2e:79:b2:ce:cc:50:fb:e8:68:66:e1:
96:a4:40:4a:bf:11:57:1f:79:d3:31:a6:9e:76:fb:8f:8f:ae:
c0:b5:46:82:f1:b5:b0:df:1a:e0:c5:23:06:f0:e6:79:5c:cb:
6f:23:36:26:b3:18:09:12:1b:8f:dc:98:25:8f:6c:02:ab:5c:
cf:17:b7:05:75:87:6d:98:c8:e6:27:eb:bc:60:04:80:73:57:
45:75:94:86:a9:b9:6a:34:b6:91:fd:9f:ca:f1:40:68:0f:06:
f6:46:dc:47:d4:07:bf:71:48:17:b8:5b:25:f5:2b:f9:50:0b:
9f:de:7e:00:98:3a:1c:85:c7:c7:b1:61:22:4a:38:c5:ce:6d:
f7:4a:47:6a:e3:dd:f4:d6:43:61:95:2d:60:84:84:d6:81:05:
e2:05:f1:f0:b7:1d:8c:bb:b5:53:5b:50:74:59:24:58:30:fa:
df:13:ed:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:51:16 2026 by rpki-client