Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209188.roa
File: AS209188.roa (raw, json)
Hash identifier: Zl2ih3rnbiJLPu8e50wqotCcgueKTYGpj3q7DnJEtWg=
Subject key identifier: 91:56:A4:F5:F1:58:E7:85:53:39:6C:B8:C9:A3:31:6B:BE:06:6E:EA
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1802BA016FFE1C5A3130088728122E1AC0EC0F4C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209188.roa
Signing time: Fri 26 Jun 2026 08:08:46 +0000
ROA not before: Fri 26 Jun 2026 08:03:46 +0000
ROA not after: Fri 25 Jun 2027 08:08:46 +0000
asID: 209188
IP address blocks: 2a0f:85c1:200::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:02:ba:01:6f:fe:1c:5a:31:30:08:87:28:12:2e:1a:c0:ec:0f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:46 2026 GMT
Not After : Jun 25 08:08:46 2027 GMT
Subject: CN=9156A4F5F158E78553396CB8C9A3316BBE066EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:ad:2d:db:7f:9a:e9:4f:0c:b5:45:ea:de:
7c:c3:12:cd:7c:1e:c2:fa:51:86:cf:8f:5a:4d:34:
df:52:2c:93:84:e4:c1:99:c3:69:c3:c9:36:1c:64:
0c:3e:31:f3:49:32:01:86:09:91:67:48:89:68:ab:
c0:91:7a:ca:80:16:df:46:15:3a:3c:0c:88:02:9e:
e5:38:45:31:24:5d:8b:99:c3:d3:1c:df:14:ef:5f:
44:81:24:19:a8:04:84:1d:7f:4f:5f:a1:ed:fa:d7:
2b:cb:02:78:53:16:9a:cd:b2:8c:6f:01:73:c5:d4:
3b:2f:f3:dc:4a:7e:f3:57:c5:b6:1a:f6:8f:26:f6:
7d:a3:61:41:b3:05:73:8c:a3:91:2a:d0:b7:e0:20:
4e:85:5a:1f:57:96:19:b4:b9:90:05:3b:7c:11:d8:
fa:35:7b:32:7a:d0:3e:3e:92:17:36:25:ae:63:39:
01:a9:c4:45:6f:17:ee:7a:aa:62:37:0b:81:4f:a0:
4e:fa:81:70:ef:10:dd:41:9a:3f:dc:2f:77:0b:ec:
52:48:a8:2d:ea:3a:be:81:63:c9:62:59:8d:ee:df:
5b:e9:47:75:d9:68:3e:74:55:e5:ce:de:94:71:02:
44:8d:bf:ac:64:0e:c3:cf:9c:a2:32:6c:a9:cb:89:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:56:A4:F5:F1:58:E7:85:53:39:6C:B8:C9:A3:31:6B:BE:06:6E:EA
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209188.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:200::/44
Signature Algorithm: sha256WithRSAEncryption
86:27:b8:ce:09:6b:b0:66:a9:0c:55:32:14:92:21:18:62:c5:
bc:54:34:d4:08:4d:8b:2e:b3:69:a6:18:de:1a:91:28:61:bd:
28:0e:dc:96:00:24:4b:26:a3:e1:ad:01:fc:6e:90:70:e0:52:
cf:a9:5e:8e:d5:c3:1b:c5:d2:98:81:05:5a:b8:4d:18:2e:3c:
e2:4e:49:46:c0:05:04:52:6c:0a:7a:37:5a:6e:52:91:e8:09:
1d:45:34:bc:4c:b8:15:77:7b:c6:84:54:8f:db:d0:23:7d:27:
02:8b:b1:77:6b:42:78:ed:dd:59:2f:ab:80:62:b1:b5:a6:cc:
61:36:6a:a0:80:e3:62:80:c6:2c:cb:53:2c:b7:40:5f:f4:d6:
f4:0a:59:01:7d:ac:19:00:bc:3c:14:9f:5e:df:a2:04:22:0b:
72:9e:ff:ee:84:ef:38:07:82:cc:3b:82:25:dc:ca:9a:44:86:
27:72:e8:fe:f7:0d:97:13:4f:99:2d:7f:ea:81:19:bf:5a:b0:
ce:90:60:d2:f0:b0:24:75:29:af:9c:e3:53:6a:26:d6:d8:41:
14:78:a1:79:42:3b:97:34:a7:54:37:7a:11:74:64:7d:a8:b6:
ca:fe:79:e9:04:9e:57:18:26:82:80:fe:e0:50:5d:19:20:cb:
7b:0a:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:00 2026 by rpki-client