Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: RB0y08Cb3r4SrhUWsZonZAMZu2ktcw6jUpgBDIShDLw=
Subject key identifier: 72:07:B1:75:6D:C6:B2:99:11:30:BF:EC:78:69:D0:44:87:27:EE:6C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4AAD193F46B56140672E66C96A9EB802A1B95850
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209242.roa
Signing time: Wed 29 Apr 2026 21:20:49 +0000
ROA not before: Wed 29 Apr 2026 21:15:49 +0000
ROA not after: Wed 28 Apr 2027 21:20:49 +0000
asID: 209242
IP address blocks: 178.83.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ad:19:3f:46:b5:61:40:67:2e:66:c9:6a:9e:b8:02:a1:b9:58:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 29 21:15:49 2026 GMT
Not After : Apr 28 21:20:49 2027 GMT
Subject: CN=7207B1756DC6B2991130BFEC7869D0448727EE6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:44:38:84:26:af:8c:4e:63:06:9c:8a:53:
e9:67:08:2c:f4:3b:9a:4b:e0:da:2a:9a:2f:0d:40:
84:4b:6a:e8:a2:c0:62:0f:19:2e:2a:ee:f3:b7:4e:
16:20:59:e3:73:c0:dd:0d:ec:a9:ac:f5:f9:8f:6a:
bf:ef:69:45:f5:ac:0f:e8:a7:e5:ce:25:b9:87:72:
1a:dc:81:cb:83:67:d1:52:5b:76:52:d0:99:d0:5c:
c6:61:27:31:a7:bf:e6:f4:59:a1:0b:a5:8a:b5:3e:
c4:75:c6:1e:df:7e:58:99:7b:0c:47:21:7e:5b:a5:
2c:35:74:72:88:78:68:ef:e6:7f:0e:59:b5:63:00:
ff:6e:40:6f:7a:c6:d9:35:3b:ad:03:b5:1c:1b:ba:
f9:98:83:0c:dd:77:84:19:77:7a:0c:1b:b6:47:6a:
ca:e4:b0:c7:fe:a4:f5:8f:f7:3f:30:5e:33:fb:47:
f8:49:f1:ee:56:00:f9:b6:32:d2:6c:93:1a:1e:50:
37:62:53:ca:c1:16:31:f7:80:03:51:ce:19:e9:b7:
09:83:21:a0:d7:03:ec:97:76:12:df:a0:5d:ff:82:
cc:19:0a:4e:00:cd:dd:33:90:ad:d3:22:83:ae:8b:
c8:3d:48:c9:55:44:10:ba:25:b1:5a:75:8f:b4:b1:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:07:B1:75:6D:C6:B2:99:11:30:BF:EC:78:69:D0:44:87:27:EE:6C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:43:cd:ff:22:04:c2:6a:52:6b:a4:48:02:ec:1e:3e:84:75:
41:7a:89:ac:62:44:16:f7:8b:52:68:6c:f5:43:04:c6:e0:41:
93:80:2b:c0:1b:4f:5b:96:0e:37:f3:15:40:fd:1c:ca:52:60:
df:a4:cd:0e:15:da:ff:fe:76:8e:87:84:6b:94:63:7c:e6:bb:
cb:88:f8:78:83:55:a2:dd:69:3e:c4:4a:62:b6:b5:ee:2d:7f:
65:ff:3e:d0:36:f0:c5:0f:8a:12:48:f8:5f:bf:8e:5e:36:6d:
ad:ab:b2:e8:d6:7a:aa:81:38:ad:57:bd:32:57:ae:3e:e9:a7:
35:b1:05:f7:58:26:d2:cf:3a:c5:dc:f0:cc:91:eb:d3:ac:16:
e2:ae:91:77:70:5f:76:cc:01:0f:24:df:84:e1:26:bc:9f:85:
bb:60:1b:e3:af:e0:a8:83:8d:a7:73:cd:70:a5:44:5b:36:1a:
0f:33:f9:6b:a7:63:e3:0a:2e:c5:dc:a9:e5:61:01:09:ed:68:
d0:7e:5e:22:15:14:98:5d:3d:90:dc:30:a7:22:2d:69:5b:68:
84:00:dd:cf:c3:67:6d:12:48:c6:37:41:ae:59:da:24:79:da:
5f:f3:09:4f:fc:6c:d5:16:83:ae:65:1b:0d:98:85:63:d0:70:
26:7d:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 12:31:38 2026 by rpki-client