Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209317.roa
File: AS209317.roa (raw, json)
Hash identifier: rN0KzjYxEw67Wl6cam0aLU0oFdvj1sslWwXhsyIWMqY=
Subject key identifier: 82:2A:15:7C:19:D3:FC:5C:4B:48:CB:F4:CE:02:BB:D7:41:3F:5A:34
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1E0888CA34D60AF832CE81F68F8454E65F3CC11A
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209317.roa
Signing time: Sat 22 Aug 2026 13:49:30 +0000
ROA not before: Sat 22 Aug 2026 13:44:30 +0000
ROA not after: Sat 21 Aug 2027 13:49:30 +0000
asID: 209317
IP address blocks: 45.155.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:08:88:ca:34:d6:0a:f8:32:ce:81:f6:8f:84:54:e6:5f:3c:c1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 22 13:44:30 2026 GMT
Not After : Aug 21 13:49:30 2027 GMT
Subject: CN=822A157C19D3FC5C4B48CBF4CE02BBD7413F5A34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:29:50:8e:2f:d0:01:75:16:d8:24:af:e1:d0:
cd:69:af:9b:9a:1f:6f:85:9c:71:5d:0c:15:81:87:
1f:58:6b:12:b6:e8:79:ce:8a:20:ae:9f:ee:c9:18:
19:f0:18:0c:c7:3c:a5:1a:67:82:8e:eb:5e:56:2c:
11:ad:af:85:ca:97:d3:53:67:27:5a:39:39:36:0d:
84:53:98:26:ee:70:bd:45:f2:4a:3c:dc:11:8d:67:
18:49:93:c8:ce:95:6c:12:0b:db:53:97:fa:6c:73:
b2:de:7e:88:1d:7e:28:35:fe:48:4a:48:bc:09:dd:
7d:28:c5:fa:b4:f5:a7:e8:f6:fc:e0:5c:f1:0a:98:
c3:9a:4d:1e:b1:01:d6:ec:07:1e:21:79:ef:d8:16:
18:4b:32:7b:7d:e3:3f:7a:d8:76:37:bb:ce:ac:3a:
be:aa:f5:6d:a8:43:fc:bb:99:d2:ed:2a:f5:0b:a8:
7a:20:c1:6a:ce:dc:7d:03:79:45:7a:aa:a8:85:93:
4e:78:7f:7d:5b:56:4d:99:96:ce:5d:19:32:10:1d:
54:bb:7c:ef:50:8f:ee:f6:cd:fc:03:bd:5f:af:08:
1b:78:69:c6:b9:d4:1a:c2:8c:c3:30:36:b7:c2:7e:
75:84:4d:ca:c8:57:e7:e3:af:08:42:ea:9b:2b:1d:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:15:7C:19:D3:FC:5C:4B:48:CB:F4:CE:02:BB:D7:41:3F:5A:34
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.19.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4d:42:26:53:b2:ca:04:a7:b2:2d:f4:0d:e9:ec:73:23:69:
76:1f:9e:50:b0:4c:c2:46:24:6c:aa:5d:73:88:43:4e:a1:91:
e3:81:a1:40:c1:2e:7f:14:ec:2e:23:23:b5:cd:e8:d1:45:ad:
52:4b:89:37:cf:d6:54:1e:71:03:dc:1c:54:ec:06:cb:9f:ad:
76:ce:85:0f:75:76:62:e2:13:fa:a3:7b:50:65:70:68:50:82:
19:76:fd:75:60:b6:42:c7:3b:13:06:1a:f1:2c:f7:1b:2d:ff:
3e:8f:74:d8:25:e9:3c:2f:b5:6d:a4:41:17:00:a1:df:54:96:
e8:2d:28:58:fc:ff:f2:03:83:6d:a7:4d:df:08:a0:e7:c8:d9:
a1:28:4b:cd:bf:72:d9:de:9b:4d:62:a7:85:dd:92:02:0a:fa:
7e:21:32:e8:1c:04:16:fb:f2:11:9b:d7:9e:d9:d3:e0:68:bc:
b3:50:5a:25:75:a7:fa:4d:c7:fd:17:80:10:cc:6f:31:a0:c9:
34:fd:72:fd:2d:c0:10:1f:6a:ef:17:82:cb:10:a6:e7:d5:a3:
f3:7f:84:a5:a4:bb:59:9a:ef:0d:a9:f2:22:c1:07:37:61:f7:
a5:cd:17:38:8e:30:68:a5:9f:7d:05:32:f4:e8:64:3e:d3:44:
5c:64:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:21:38 2026 by rpki-client