Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209267.roa
File: AS209267.roa (raw, json)
Hash identifier: 6OGJ6vO95Me8lepPbPawl27aN07+LQQ5yw7pkNjPKMU=
Subject key identifier: 74:72:02:E0:68:75:46:F4:E1:0D:C1:96:9F:E5:2C:9F:95:A5:CE:EC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7A34F6E72F01E2918846384AD0CE07AAD6A67066
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209267.roa
Signing time: Fri 26 Jun 2026 08:08:39 +0000
ROA not before: Fri 26 Jun 2026 08:03:39 +0000
ROA not after: Fri 25 Jun 2027 08:08:39 +0000
asID: 209267
IP address blocks: 2a0f:85c1:70::/44 maxlen: 44
2a0f:85c1:70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:34:f6:e7:2f:01:e2:91:88:46:38:4a:d0:ce:07:aa:d6:a6:70:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:39 2026 GMT
Not After : Jun 25 08:08:39 2027 GMT
Subject: CN=747202E0687546F4E10DC1969FE52C9F95A5CEEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:1f:7c:a2:7f:10:1f:3f:d4:0d:8f:37:93:
ab:28:47:20:29:a8:17:57:20:3c:a5:bb:90:26:2d:
4a:43:88:e7:3d:c3:27:04:5e:67:e1:b4:0a:21:08:
5d:d0:9e:18:5d:1d:1d:7f:57:41:ea:4c:a5:ff:96:
59:88:bc:13:9d:b1:30:b9:fc:fe:23:d9:fe:ff:4d:
8b:4d:c6:d5:a3:a7:10:62:8a:39:12:ec:41:0d:b4:
4d:47:0b:43:53:3b:af:36:49:a9:21:58:d8:40:72:
e1:6f:ee:8d:2f:34:6d:4f:37:3d:68:93:7f:ca:b8:
c5:b8:47:5d:c6:4f:0e:2d:c1:9b:d3:cc:63:6e:86:
54:d2:e1:d3:0d:fa:89:0e:28:11:b3:bb:31:47:7d:
f0:95:02:05:c0:f3:7a:de:05:90:6f:a2:b5:c8:c2:
97:e0:df:48:b3:35:a8:d5:e7:2c:58:ff:01:28:55:
a7:01:af:2a:e6:a2:89:d1:c4:78:21:6a:4c:ea:26:
82:93:e8:90:4b:78:34:4a:a9:75:1d:e2:f0:32:41:
ed:79:af:7e:9e:e0:e3:b5:09:24:33:90:82:c4:e4:
32:10:bc:30:b1:35:d5:82:af:b3:66:50:12:2e:2e:
dd:18:7a:e2:a0:d6:3e:f7:40:5e:05:02:79:42:3d:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:72:02:E0:68:75:46:F4:E1:0D:C1:96:9F:E5:2C:9F:95:A5:CE:EC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:70::/44
Signature Algorithm: sha256WithRSAEncryption
d0:03:26:fb:f8:7e:06:1f:dd:7d:f0:33:66:35:5c:2a:a9:f8:
d2:32:f2:0e:14:11:4e:7b:cb:e9:6e:74:54:b9:46:d9:36:5c:
e7:4d:39:95:5b:fc:de:e4:d1:19:e5:c8:8a:bc:a2:cd:04:7c:
ab:75:49:bc:7a:f0:9a:bd:5f:ef:37:09:a8:20:3d:8a:63:7b:
60:80:cc:ec:20:ac:84:b2:48:fe:aa:fd:0e:cb:50:f8:b2:d1:
df:02:62:8f:8d:7e:6d:b5:de:55:14:cf:8f:cc:ba:3d:d9:1c:
b2:0b:b0:86:7c:1d:90:76:05:15:92:63:b7:dc:c9:7f:4e:6c:
d4:00:8e:da:c2:79:2d:4e:6e:db:90:45:e2:0c:64:d7:9c:37:
a8:52:74:2e:3a:82:89:8e:22:36:d7:e1:aa:80:cf:cb:ce:84:
63:54:b8:d3:00:36:19:9e:e2:bf:14:6a:9f:55:00:af:74:f5:
da:46:d4:ec:fb:cb:83:d9:15:90:1b:da:b5:af:d9:24:80:15:
71:85:0e:3e:06:5c:b1:d9:44:2e:24:a0:b0:df:b3:e6:2c:a0:
1b:36:4c:10:3e:31:c1:5a:ee:18:d6:97:e3:45:7c:9a:b0:c6:
2f:cc:a0:90:89:a1:5c:6b:02:10:e5:63:b2:1c:74:62:ff:0a:
dd:a1:b2:69
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUejT25y8B4pGIRjhK0M4HqtamcGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzMzlaFw0yNzA2MjUwODA4MzlaMDMxMTAvBgNV
BAMTKDc0NzIwMkUwNjg3NTQ2RjRFMTBEQzE5NjlGRTUyQzlGOTVBNUNFRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWXB98on8QHz/UDY83k6soRyAp
qBdXIDylu5AmLUpDiOc9wycEXmfhtAohCF3QnhhdHR1/V0HqTKX/llmIvBOdsTC5
/P4j2f7/TYtNxtWjpxBiijkS7EENtE1HC0NTO682SakhWNhAcuFv7o0vNG1PNz1o
k3/KuMW4R13GTw4twZvTzGNuhlTS4dMN+okOKBGzuzFHffCVAgXA83reBZBvorXI
wpfg30izNajV5yxY/wEoVacBryrmoonRxHghakzqJoKT6JBLeDRKqXUd4vAyQe15
r36e4OO1CSQzkILE5DIQvDCxNdWCr7NmUBIuLt0YeuKg1j73QF4FAnlCPfm1AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUdHIC4Gh1RvThDcGWn+Usn5WlzuwwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA5MjY3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg+F
wQBwMA0GCSqGSIb3DQEBCwUAA4IBAQDQAyb7+H4GH9198DNmNVwqqfjSMvIOFBFO
e8vpbnRUuUbZNlznTTmVW/ze5NEZ5ciKvKLNBHyrdUm8evCavV/vNwmoID2KY3tg
gMzsIKyEskj+qv0Oy1D4stHfAmKPjX5ttd5VFM+PzLo92RyyC7CGfB2QdgUVkmO3
3Ml/TmzUAI7awnktTm7bkEXiDGTXnDeoUnQuOoKJjiI21+GqgM/LzoRjVLjTADYZ
nuK/FGqfVQCvdPXaRtTs+8uD2RWQG9q1r9kkgBVxhQ4+Blyx2UQuJKCw37PmLKAb
NkwQPjHBWu4Y1pfjRXyasMYvzKCQiaFcawIQ5WOyHHRi/wrdobJp
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:28:08 2026 by rpki-client