Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209809.roa
File: AS209809.roa (raw, json)
Hash identifier: kFuZbUJvtd18/scgbL9nOPlSIM3p60+LOjCsZZSFr5E=
Subject key identifier: 2B:45:63:58:CE:52:1E:42:F0:39:66:75:71:42:9D:0D:AB:09:61:CA
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1959218FDD48460D041EB8FCE5ACA59A52D8EA3F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209809.roa
Signing time: Tue 10 Nov 2026 11:49:58 +0000
ROA not before: Tue 10 Nov 2026 11:44:58 +0000
ROA not after: Tue 09 Nov 2027 11:49:58 +0000
asID: 209809
IP address blocks: 2a14:7580:ffe9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:59:21:8f:dd:48:46:0d:04:1e:b8:fc:e5:ac:a5:9a:52:d8:ea:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 10 11:44:58 2026 GMT
Not After : Nov 9 11:49:58 2027 GMT
Subject: CN=2B456358CE521E42F039667571429D0DAB0961CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ef:cc:f5:1b:9d:71:4a:50:d1:b6:1a:48:d5:
84:b5:79:37:d1:aa:ec:b8:76:6c:e3:4b:28:f6:26:
a4:9c:d3:46:1e:a5:5b:fb:34:e5:19:24:bc:ad:5c:
d0:bf:e8:0a:0b:da:20:10:a7:0b:3b:18:47:07:86:
5d:92:ac:38:70:a9:51:ce:7a:0c:2d:2a:02:61:13:
cf:18:88:cc:89:04:93:d6:cf:d7:19:ee:2e:35:3a:
6c:3a:98:cc:b3:0f:c6:40:ad:82:2b:8d:c3:25:75:
07:d4:38:f1:e8:bd:46:98:a8:38:f0:b2:f3:70:39:
76:c0:d6:0f:b7:10:ea:1a:1b:34:bf:9b:0f:49:52:
c0:70:99:a5:77:4d:77:85:98:f9:51:7b:c0:2b:eb:
3e:84:f8:d2:62:73:6a:b5:30:62:95:8f:60:09:00:
9f:e1:20:ef:35:05:0d:c5:ac:e0:09:a8:7d:24:cc:
7d:91:23:3f:22:61:06:b5:aa:dd:2d:60:90:99:02:
fd:f3:e2:81:23:3d:63:88:6f:9a:83:1c:8a:95:5d:
c9:53:d1:fc:c5:f5:f7:db:19:75:31:11:5b:57:77:
7e:20:50:75:a5:78:59:21:0a:62:19:8a:cf:11:7b:
57:5f:42:ff:36:ae:c1:2c:05:b6:cc:0d:64:1f:70:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:45:63:58:CE:52:1E:42:F0:39:66:75:71:42:9D:0D:AB:09:61:CA
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ffe9::/48
Signature Algorithm: sha256WithRSAEncryption
2e:3b:c0:fd:bb:bd:ca:1c:95:42:f0:bb:04:ee:ea:76:63:fc:
18:e4:07:d1:2c:0b:b2:c7:54:7f:f7:45:56:17:1a:da:fc:1e:
e2:35:12:b1:95:68:91:c9:b0:cc:df:78:0d:cd:cc:d3:e2:bf:
8a:77:13:1f:a3:f5:4b:73:7c:a3:61:36:ac:dd:9f:b1:b7:e7:
ee:50:e1:cb:5f:be:d1:f0:76:c8:86:6e:94:02:cc:94:1d:5c:
a4:ad:30:eb:b4:df:25:03:9f:45:18:0c:57:ba:df:9b:57:87:
26:4c:d2:4c:30:08:83:11:f2:6e:29:c9:ab:bc:c9:e5:36:e0:
c0:e3:b7:16:30:5b:ce:5b:18:8b:75:fd:bf:7f:52:c3:10:35:
63:fc:d9:b5:ab:6b:2a:42:7e:7a:37:dc:1b:44:4e:cc:52:34:
73:0d:40:81:a9:28:7e:44:b8:ed:f6:52:9a:bd:48:fb:46:f6:
4b:8b:78:b1:f3:3a:1e:d7:b5:f6:23:b1:03:ea:ae:e0:de:f0:
0b:94:1a:ad:38:00:5f:41:0e:a4:4f:de:f0:20:3a:fc:8b:3a:
db:f9:48:13:4e:a3:79:22:33:3f:05:5f:2f:28:e0:b8:ec:20:
8b:e3:7d:24:33:6e:c2:47:3e:96:d6:7d:20:72:31:84:45:8e:
01:41:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:14:26 2026 by rpki-client