Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209552.roa
File: AS209552.roa (raw, json)
Hash identifier: ZKxCJVzY1D7q28mR2kQz7P4QWbwPsMnd7mHz2zM72h0=
Subject key identifier: 37:3E:B1:72:5E:89:11:D1:63:65:14:F3:A1:17:DC:F4:A3:D4:A8:B8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7A18574B6305C06F3549CD329AECE2DA5D7A3C15
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209552.roa
Signing time: Fri 26 Jun 2026 13:48:42 +0000
ROA not before: Fri 26 Jun 2026 13:43:42 +0000
ROA not after: Fri 25 Jun 2027 13:48:42 +0000
asID: 209552
IP address blocks: 2a13:9500:48::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:18:57:4b:63:05:c0:6f:35:49:cd:32:9a:ec:e2:da:5d:7a:3c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 13:43:42 2026 GMT
Not After : Jun 25 13:48:42 2027 GMT
Subject: CN=373EB1725E8911D1636514F3A117DCF4A3D4A8B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:1c:69:6b:e8:20:6a:4e:24:d8:98:76:d3:
46:c6:3c:b1:bd:c3:4c:09:6b:a1:98:96:3c:4d:49:
57:3a:1b:51:5a:bf:90:e3:ce:d3:22:d0:23:78:24:
0d:e9:fd:c9:9f:c5:fc:d8:3d:42:a7:89:2f:f3:4b:
47:90:49:f8:b0:18:b5:26:a0:5f:8d:f1:61:12:62:
89:86:11:31:ab:b3:8c:d1:5d:2f:a6:5b:6f:48:79:
a3:f7:28:ee:53:ad:f7:82:c0:fb:58:85:ca:17:ef:
19:64:24:5a:1b:a1:ae:91:e5:aa:4c:86:cc:e0:d9:
fe:ca:f2:ed:d3:34:15:f9:ca:9b:fc:82:1f:0a:9d:
ca:96:f8:30:a2:e5:09:c0:50:7f:97:ee:59:7c:0e:
fd:2e:2d:cc:50:4b:75:62:44:c6:ae:d6:c2:bf:71:
ef:30:03:df:39:25:02:03:e2:b2:5a:81:c7:c4:5c:
0a:a3:ce:f0:f3:22:5d:8a:ee:5c:e8:82:a1:1d:66:
90:cd:c5:c1:e5:2f:66:e1:f2:c0:7e:38:92:78:02:
eb:be:cb:f7:ce:bb:80:56:4a:09:66:a4:5c:a8:90:
b1:c9:1b:31:4d:8b:11:71:0d:a0:a7:d7:1a:ab:5f:
c6:df:9b:e7:c6:be:f4:71:86:06:d0:54:20:00:5c:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3E:B1:72:5E:89:11:D1:63:65:14:F3:A1:17:DC:F4:A3:D4:A8:B8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209552.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:48::/48
Signature Algorithm: sha256WithRSAEncryption
4e:3f:1c:23:be:55:62:bc:e4:44:35:4f:56:49:69:60:95:e4:
74:d4:e8:1b:5e:a3:cf:f2:bb:70:9f:8a:95:5d:de:16:3b:da:
5c:2b:6b:9d:f6:5a:2e:5b:01:aa:35:41:f7:75:7c:84:a4:05:
78:2d:cc:ed:8f:e6:1a:14:dc:9b:61:29:71:eb:bb:71:1b:17:
59:ff:aa:27:1f:1f:5d:41:dd:b7:c2:ed:4e:13:32:c3:bb:f7:
75:1c:80:b6:ca:44:1d:93:85:25:a0:9d:8e:6b:1a:75:1f:78:
cc:ce:d1:f9:99:db:8c:e5:58:e6:28:99:ae:d2:cd:eb:04:02:
44:0a:84:44:a8:f0:4a:3f:bc:19:24:c6:8d:03:49:e4:4f:68:
e3:fe:cb:c7:47:0c:89:17:32:12:cd:b5:45:5b:a0:b7:19:7e:
26:92:df:d0:14:63:42:db:2d:1a:e8:86:99:df:cb:3a:4c:65:
37:99:03:c4:a7:8c:40:3e:49:02:e8:aa:8c:d5:2f:00:81:36:
de:36:ec:eb:fc:c7:2c:48:e9:c2:69:af:3e:ac:95:82:c8:35:
ee:52:84:88:0e:ac:9b:5e:76:0b:07:60:85:3a:e5:99:bb:59:
67:37:a4:24:ab:2f:e0:aa:ff:ff:47:62:26:e2:5d:9c:dd:cd:
9e:a3:26:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:20:16 2026 by rpki-client