Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa
File: AS209526.roa (raw, json)
Hash identifier: /pHHeMXWCKKCFMHbPlKkXRbYyiQNWVfoSZrHLR4olwQ=
Subject key identifier: 74:68:AB:2C:D3:D7:92:58:5E:67:04:1D:62:2A:B4:A7:96:CB:65:63
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 57A87AA07DD6104D35E6C38245400181011C342C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa
Signing time: Thu 23 Jul 2026 08:04:57 +0000
ROA not before: Thu 23 Jul 2026 07:59:57 +0000
ROA not after: Thu 22 Jul 2027 08:04:57 +0000
asID: 209526
IP address blocks: 82.21.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a8:7a:a0:7d:d6:10:4d:35:e6:c3:82:45:40:01:81:01:1c:34:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 23 07:59:57 2026 GMT
Not After : Jul 22 08:04:57 2027 GMT
Subject: CN=7468AB2CD3D792585E67041D622AB4A796CB6563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:b6:de:65:9a:71:17:86:aa:68:78:90:1c:
79:a2:02:a8:9b:a3:dd:00:bc:8d:ba:b0:de:9e:e0:
97:d6:44:8c:3f:4f:e4:22:83:74:98:e2:1c:43:4a:
37:34:7f:8a:55:63:cb:36:d8:49:9f:6e:c8:7f:17:
9d:14:57:44:7e:c4:03:db:c7:75:47:bd:7a:fc:c7:
95:c3:7d:31:6d:51:04:f9:1d:f6:bb:6a:54:fa:80:
70:bd:b7:8d:4c:5e:65:d5:3b:e5:84:ac:75:7f:62:
a9:38:c3:9b:17:f4:ff:41:2d:53:8c:c0:26:ef:78:
f1:e6:78:be:c6:97:6f:02:76:8d:57:1f:04:50:2c:
7a:d9:29:1e:88:20:30:9d:4f:a3:24:91:e2:e5:53:
28:3a:8f:9f:13:05:f8:e0:ae:fc:ac:47:c5:c7:0a:
0b:d9:30:cc:50:1b:5b:b1:ef:1a:8f:18:28:17:97:
1d:e9:74:f3:59:ef:70:03:3d:86:da:37:a8:84:c2:
f3:aa:0d:1b:c3:6f:c6:7b:ee:7e:70:c5:06:9b:2c:
0a:bc:6c:43:88:ef:82:f0:0c:c2:b1:4c:64:c1:bd:
21:4b:25:6e:3b:42:94:61:29:e5:49:09:77:ba:de:
9b:e0:d4:de:a5:bf:86:f2:b1:f1:fd:90:ca:39:05:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:AB:2C:D3:D7:92:58:5E:67:04:1D:62:2A:B4:A7:96:CB:65:63
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.188.0/24
Signature Algorithm: sha256WithRSAEncryption
59:45:ba:80:7b:10:57:a2:80:ba:82:06:99:b2:91:c9:62:91:
85:f5:e8:ac:7d:9b:5c:94:80:70:97:f3:bf:86:68:01:e4:c1:
01:bf:44:d5:cd:9f:e0:54:18:25:b5:b6:d8:24:9d:a8:f2:b8:
6d:2a:b6:3e:9f:57:9e:2e:f3:7c:ff:84:77:98:07:a0:86:f1:
fd:a3:29:63:a4:a0:a2:d2:55:6d:aa:e5:52:15:4c:a4:9c:d5:
2f:26:7f:84:23:ea:87:b7:a3:df:7d:60:0a:cf:71:69:c2:a3:
de:d9:54:e0:ba:d4:ca:57:8d:8f:ab:b7:34:16:cf:31:02:c3:
42:b8:f9:59:38:38:f2:8b:23:46:f5:e3:56:48:4f:fb:85:c6:
06:22:42:f8:26:0b:0c:1b:52:4e:fd:78:34:d2:31:28:fe:9f:
d8:ad:7a:05:9e:af:4d:dd:ac:ca:11:64:d3:d1:3d:c7:a9:2f:
d6:5c:15:75:01:9e:94:12:b0:2b:0d:ce:70:c0:c3:cc:e9:c7:
23:b5:01:fc:ea:23:79:43:7b:41:b7:23:2c:02:27:3e:6e:88:
ab:f8:b7:71:11:b0:cf:11:9f:2b:5d:4e:74:c0:3c:b0:c4:6b:
da:c5:01:5d:ea:16:67:e2:b6:b3:c0:58:1a:b8:18:7e:3a:5f:
78:eb:d9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:21:43 2026 by rpki-client