Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209888.roa
File: AS209888.roa (raw, json)
Hash identifier: exmaD0VCj0x2Cmw1IdxsM3jY3CIUrGOFuD8gSMdWoCs=
Subject key identifier: 80:79:5B:69:64:B0:FC:66:43:36:3D:59:EE:6D:1B:83:8C:36:FD:01
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7A26982A5D042B35C0751328D2EC47DE101D47EA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209888.roa
Signing time: Sat 09 May 2026 14:14:41 +0000
ROA not before: Sat 09 May 2026 14:09:41 +0000
ROA not after: Sat 08 May 2027 14:14:41 +0000
asID: 209888
IP address blocks: 82.21.57.0/24 maxlen: 24
82.23.184.0/24 maxlen: 24
82.27.134.0/24 maxlen: 24
82.47.150.0/24 maxlen: 24
82.47.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:26:98:2a:5d:04:2b:35:c0:75:13:28:d2:ec:47:de:10:1d:47:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 9 14:09:41 2026 GMT
Not After : May 8 14:14:41 2027 GMT
Subject: CN=80795B6964B0FC6643363D59EE6D1B838C36FD01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:16:7b:06:61:be:57:57:9c:18:86:4d:f5:d2:
08:81:64:4e:92:69:7f:6c:e6:95:1c:20:df:6c:bd:
40:42:84:56:eb:4d:18:47:f4:45:72:ee:de:fe:4f:
4e:63:32:1b:ff:f6:6f:d7:ba:0a:31:cd:8a:63:a2:
fc:a2:7e:cf:f9:ad:0e:5c:46:32:c5:e0:de:71:78:
37:ae:5b:f3:df:17:38:2a:92:15:29:d5:36:01:b5:
d5:1d:dc:89:ff:b2:7c:1a:30:fc:bb:7d:be:9e:ac:
d9:3a:ad:74:03:51:75:05:cb:53:68:72:08:ea:07:
27:b5:40:7c:39:78:36:b8:c5:3b:c8:12:30:ae:8f:
ae:9a:43:df:7a:d8:cf:5f:a8:f4:ec:cb:35:99:fc:
db:26:cb:92:8a:00:1b:69:21:0d:72:4f:e3:02:a5:
23:c3:05:b7:dc:57:ae:c5:f3:9f:e1:36:2e:78:f0:
f3:aa:78:ec:32:b7:21:cb:7b:2a:d9:c2:c6:5c:dc:
3c:8b:e2:a4:e0:31:e4:55:26:2b:ba:1a:72:cc:b6:
47:f1:de:85:aa:a0:ff:d4:8a:5d:e1:0d:2b:56:3e:
16:cb:cd:6e:6b:25:aa:55:f3:28:f2:1c:ef:85:d2:
49:0a:7d:ee:00:2b:89:94:60:17:60:5c:07:ed:ad:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:79:5B:69:64:B0:FC:66:43:36:3D:59:EE:6D:1B:83:8C:36:FD:01
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.57.0/24
82.23.184.0/24
82.27.134.0/24
82.47.150.0/24
82.47.222.0/24
Signature Algorithm: sha256WithRSAEncryption
38:51:a1:b3:ab:92:ca:07:5d:1d:68:91:15:9a:68:d7:be:2b:
f5:16:8f:17:38:9e:3e:b9:cf:06:91:08:d9:30:8b:16:80:ff:
2d:23:18:f8:91:f4:72:c7:63:b6:ae:c6:63:a1:44:df:0d:32:
4c:67:45:e7:52:59:00:55:a2:c3:6d:5a:01:d0:ab:f6:3c:22:
3d:52:fd:57:aa:8f:ed:4c:ae:05:5e:01:63:d0:bf:e4:f3:c7:
b1:39:ea:3f:f7:57:b2:dc:d2:78:a5:a1:e8:48:fa:77:fd:48:
14:dd:30:dd:75:45:91:dc:c8:bc:44:65:e5:a3:c1:4d:6d:65:
bc:a2:9b:95:7e:47:b1:5d:fe:80:f0:3b:99:d7:51:e4:f5:d0:
79:28:bb:d9:d5:4b:bb:d3:56:94:a3:9a:15:36:58:53:ab:cf:
8c:87:0b:73:fc:9d:ac:c7:2a:06:1e:fc:3f:5d:dd:2d:63:0f:
d2:fa:89:ab:78:67:ba:2e:16:8e:82:5d:72:76:6c:e3:5e:19:
f8:40:b1:74:fc:45:8b:b8:10:8d:02:82:c6:09:f2:8f:e2:14:
2b:7a:ac:d9:fa:bd:11:02:4a:bb:35:82:e4:f7:7f:39:3b:68:
d9:60:1f:86:75:92:3e:04:05:6d:17:ac:85:67:89:5b:8b:79:
64:d4:b0:ab
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUeiaYKl0EKzXAdRMo0uxH3hAdR+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MDkxNDA5NDFaFw0yNzA1MDgxNDE0NDFaMDMxMTAvBgNV
BAMTKDgwNzk1QjY5NjRCMEZDNjY0MzM2M0Q1OUVFNkQxQjgzOEMzNkZEMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0FnsGYb5XV5wYhk310giBZE6S
aX9s5pUcIN9svUBChFbrTRhH9EVy7t7+T05jMhv/9m/XugoxzYpjovyifs/5rQ5c
RjLF4N5xeDeuW/PfFzgqkhUp1TYBtdUd3In/snwaMPy7fb6erNk6rXQDUXUFy1No
cgjqBye1QHw5eDa4xTvIEjCuj66aQ9962M9fqPTsyzWZ/Nsmy5KKABtpIQ1yT+MC
pSPDBbfcV67F85/hNi548POqeOwytyHLeyrZwsZc3DyL4qTgMeRVJiu6GnLMtkfx
3oWqoP/Uil3hDStWPhbLzW5rJapV8yjyHO+F0kkKfe4AK4mUYBdgXAftrbPtAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQUgHlbaWSw/GZDNj1Z7m0bg4w2/QEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA5ODg4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUhU5
AwQAUhe4AwQAUhuGAwQAUi+WAwQAUi/eMA0GCSqGSIb3DQEBCwUAA4IBAQA4UaGz
q5LKB10daJEVmmjXviv1Fo8XOJ4+uc8GkQjZMIsWgP8tIxj4kfRyx2O2rsZjoUTf
DTJMZ0XnUlkAVaLDbVoB0Kv2PCI9Uv1Xqo/tTK4FXgFj0L/k88exOeo/91ey3NJ4
paHoSPp3/UgU3TDddUWR3Mi8RGXlo8FNbWW8opuVfkexXf6A8DuZ11Hk9dB5KLvZ
1Uu701aUo5oVNlhTq8+Mhwtz/J2sxyoGHvw/Xd0tYw/S+omreGe6LhaOgl1ydmzj
Xhn4QLF0/EWLuBCNAoLGCfKP4hQreqzZ+r0RAkq7NYLk9385O2jZYB+GdZI+BAVt
F6yFZ4lbi3lk1LCr
-----END CERTIFICATE-----
Generated at Wed May 13 02:38:45 2026 by rpki-client