Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: QuJFBNbDbj6L+DWZ56gxwGkYgul/jsQP9Jg8ecJ+qPY=
Subject key identifier: 18:F6:FB:03:0E:2A:78:B5:BC:B0:23:53:F2:46:7F:FE:90:D2:0F:96
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 09043C26E3240178BF0498A220EB8D4A0715BFEA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209242.roa
Signing time: Thu 25 Jun 2026 15:36:34 +0000
ROA not before: Thu 25 Jun 2026 15:31:34 +0000
ROA not after: Thu 24 Jun 2027 15:36:34 +0000
asID: 209242
IP address blocks: 194.113.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:04:3c:26:e3:24:01:78:bf:04:98:a2:20:eb:8d:4a:07:15:bf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 25 15:31:34 2026 GMT
Not After : Jun 24 15:36:34 2027 GMT
Subject: CN=18F6FB030E2A78B5BCB02353F2467FFE90D20F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:1d:ed:4e:5c:e0:f6:c7:a5:d5:a1:80:27:
d7:99:7d:9e:3a:3f:3c:f5:be:f5:a5:fb:f8:44:d0:
7f:68:79:56:2e:a7:32:96:36:a2:75:c2:2d:c0:47:
70:25:5d:42:a5:bd:bf:d7:b9:cf:fa:84:12:dd:6a:
5b:42:3f:1a:96:85:98:cc:d9:5f:36:42:13:1d:3d:
94:91:b7:24:2f:ef:cd:ef:c6:2f:8c:1a:5d:ec:76:
c5:ad:77:68:31:97:83:5b:9c:99:e5:75:ef:5f:d2:
72:ac:f6:b5:23:4f:d5:8b:93:70:34:7f:51:9f:a3:
42:29:ee:83:0c:ce:7b:e6:68:ee:4f:eb:f8:72:ae:
fe:29:12:37:a6:91:59:b9:35:a2:d7:bc:5c:1b:eb:
eb:78:8e:41:62:42:f1:6d:25:72:4e:a5:5b:ed:5f:
5b:c5:61:9f:43:3e:35:17:f8:69:8f:4e:de:09:60:
ba:50:96:f7:33:a8:06:43:e5:9b:db:21:0d:ab:23:
82:3e:4d:eb:2f:9f:f2:e4:16:04:21:eb:1a:89:66:
de:84:b5:ca:6b:fa:69:9e:9d:07:5e:6f:52:11:dd:
8f:75:6e:4c:2b:41:98:eb:62:08:ef:76:e8:32:73:
6d:5c:c5:3d:d9:ad:d2:4d:bd:d3:bb:50:2d:b8:71:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F6:FB:03:0E:2A:78:B5:BC:B0:23:53:F2:46:7F:FE:90:D2:0F:96
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bd:36:ce:b5:b4:e8:51:e8:09:43:18:9a:6e:b2:63:3b:98:
c3:29:e4:5a:41:5f:ac:d3:4f:32:90:94:a5:01:4c:3b:0b:d1:
a7:5f:5f:73:59:67:12:f1:c1:a2:9a:6d:dd:79:78:4f:53:92:
48:3b:39:7c:e4:b8:22:4d:1d:8f:0d:ed:e3:6f:11:04:c6:5a:
c6:49:74:f1:58:79:f3:5d:2a:eb:97:1a:c3:47:99:9b:85:5e:
18:53:17:4d:4b:ec:4c:6b:70:ab:60:3b:6e:0c:07:bd:72:7e:
92:4e:ec:4d:4c:ce:47:e5:bf:4c:bc:3f:e0:f0:f2:9f:73:ac:
64:2e:b5:c5:88:f2:4c:5b:6f:45:50:a0:5c:ae:81:91:25:82:
71:15:1c:fc:02:b3:f7:e4:6e:6e:e0:4e:a5:8c:bc:6f:62:c1:
42:6c:7a:48:37:79:44:1a:9a:03:45:73:f9:7b:ad:fb:60:6c:
5a:e5:93:d4:c1:ba:0c:b5:b6:51:e2:38:08:c4:78:b4:0e:fb:
b0:e4:c7:96:43:5f:85:f6:cb:7e:09:97:33:de:3d:68:d7:29:
42:e0:9a:64:49:a7:f6:07:33:f7:4d:c0:08:ae:4a:8d:80:ad:
5a:bb:f1:90:05:51:24:bd:7c:1a:d0:dc:b9:73:19:c8:6c:b2:
8e:45:38:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:41:05 2026 by rpki-client