Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209043.roa
File: AS209043.roa (raw, json)
Hash identifier: gqmpOK1Mz8++hI2c1UoqINtGdPzpnFDDzmwT0YSpe6U=
Subject key identifier: 06:F6:26:52:3F:BF:6C:AD:47:C6:22:8C:67:92:C0:C4:86:27:B4:4B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 19999BE5D7B0872727A038D246412A7701C77C32
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209043.roa
Signing time: Tue 13 Oct 2026 15:49:36 +0000
ROA not before: Tue 13 Oct 2026 15:44:36 +0000
ROA not after: Tue 12 Oct 2027 15:49:36 +0000
asID: 209043
IP address blocks: 96.62.197.0/24 maxlen: 24
146.103.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:99:9b:e5:d7:b0:87:27:27:a0:38:d2:46:41:2a:77:01:c7:7c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 13 15:44:36 2026 GMT
Not After : Oct 12 15:49:36 2027 GMT
Subject: CN=06F626523FBF6CAD47C6228C6792C0C48627B44B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:f1:94:f6:11:20:94:08:32:e8:28:e2:54:
a3:03:eb:ee:6b:04:a9:aa:6f:9c:83:4a:e0:c4:f6:
8a:44:12:62:d6:55:52:59:3b:90:ef:0e:6b:3b:bc:
9e:13:75:86:10:81:25:81:77:10:43:3c:7f:23:31:
31:cd:d7:bc:ea:3c:70:11:c4:de:10:99:27:03:74:
a4:64:23:b0:bc:1d:36:f3:c7:0f:91:d1:b1:ca:5b:
91:87:09:aa:cc:8c:db:30:6d:83:f3:e0:91:46:50:
b3:ce:0b:72:c2:01:3f:a9:d1:1a:4c:73:5e:f8:8c:
a8:a1:07:b1:ac:96:b2:0f:37:5d:ae:33:7c:5f:5d:
5d:20:e3:4e:61:cf:35:65:79:82:67:31:dd:ac:09:
6b:e9:01:01:22:cf:a7:da:05:7e:ee:e6:b1:8a:99:
2c:c2:3a:50:b9:08:1f:89:33:ce:80:3c:1a:bc:3f:
33:1b:e0:7e:37:bc:13:00:5e:ab:b7:40:a3:1a:27:
7a:77:99:49:e2:e4:95:50:69:f0:b1:54:91:83:b0:
ee:63:64:23:1f:11:d9:59:5e:f0:fb:37:68:4f:73:
fb:51:f4:a9:00:d2:c7:f5:f1:da:65:2d:53:c1:86:
e2:44:70:12:cc:99:8b:aa:d6:03:48:09:db:c6:c2:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:26:52:3F:BF:6C:AD:47:C6:22:8C:67:92:C0:C4:86:27:B4:4B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.197.0/24
146.103.36.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8c:f3:ca:49:f2:f5:9a:31:31:71:a7:e6:0c:77:1b:54:ba:
34:0c:c7:35:ac:d2:45:84:44:60:36:da:d2:e2:2f:92:a9:e3:
9d:d2:01:6b:a9:28:0b:4d:d6:80:cf:d4:7c:8c:92:bc:72:28:
90:7d:e6:45:b5:3e:69:57:7f:fd:d5:72:9c:48:4a:55:6c:e3:
37:2f:58:a4:1b:55:51:ad:9f:f2:7d:04:c5:d6:2d:02:32:b4:
da:a4:5d:b0:41:61:d7:9b:d2:12:5c:1a:5f:bb:29:f9:ea:8b:
6f:8a:29:71:c5:55:05:fb:d1:1e:d2:e2:40:4e:17:48:13:06:
f8:05:56:b9:63:ed:5b:21:8d:47:69:24:37:51:07:61:ba:65:
6d:82:16:ec:92:2f:df:5c:7d:46:94:85:ce:99:47:6a:fa:35:
26:00:68:3f:f0:b8:07:5f:8f:9a:90:2e:e2:17:ca:b9:b1:6d:
de:26:cc:c3:5a:67:09:51:89:1f:65:32:df:60:b0:ec:b1:c1:
7e:b9:43:d8:7a:ad:26:42:6b:ca:8b:f5:31:6d:ad:69:dd:69:
8a:25:c1:53:d5:a8:b6:14:c3:1b:ba:66:99:a4:40:1e:d3:da:
87:89:8b:8d:82:7a:1a:31:ed:5b:55:54:7f:ef:54:3b:dd:a6:
25:08:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:55:20 2026 by rpki-client