Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: Rp+fjYCBO8zVqdbmdnI7XMnrMWD3Bfv3UmQPJgXRqOo=
Subject key identifier: 88:F6:63:97:69:E2:09:A5:14:B4:21:A2:B7:01:D6:74:C6:6F:CE:71
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 27ED73C39D127F8D1DDB9F88DD0E7E24195CA5F4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS209242.roa
Signing time: Sat 30 May 2026 13:10:34 +0000
ROA not before: Sat 30 May 2026 13:05:34 +0000
ROA not after: Sat 29 May 2027 13:10:34 +0000
asID: 209242
IP address blocks: 51.194.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ed:73:c3:9d:12:7f:8d:1d:db:9f:88:dd:0e:7e:24:19:5c:a5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 30 13:05:34 2026 GMT
Not After : May 29 13:10:34 2027 GMT
Subject: CN=88F6639769E209A514B421A2B701D674C66FCE71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:b1:60:b1:9e:3a:7b:b1:aa:14:36:72:02:
cc:8e:f5:ed:ef:20:48:4a:7a:25:6a:52:a4:49:65:
75:a1:40:b3:f2:fb:d9:57:5f:d2:66:e0:7c:23:12:
dc:b3:26:36:38:b8:f4:99:b8:84:07:fd:45:0b:44:
12:7e:85:ad:32:8c:84:95:81:d5:ca:ba:1f:5c:7f:
e7:3b:dd:df:5c:01:68:47:f3:8e:15:ee:8c:84:46:
33:11:eb:1c:7a:61:6d:35:f0:c0:a0:a5:26:73:f4:
fb:34:c1:27:50:4d:f5:c3:6e:bf:cd:f5:0b:44:de:
a0:ee:24:db:5f:1c:a6:cd:f5:23:ba:6d:fa:da:ff:
fa:32:d6:64:00:01:2a:bf:6d:17:ad:9c:1a:d0:4d:
5f:7c:16:97:05:8e:ca:2e:d6:67:5b:db:f8:fb:26:
af:e8:73:2c:c3:4b:3a:2d:8f:f1:f6:cc:c1:3e:9b:
ec:a9:34:55:dd:a9:8e:b2:b3:32:7d:6f:6f:27:38:
e8:e5:78:fa:78:68:50:31:a0:99:5a:78:73:43:d5:
ca:0c:d6:5b:6b:83:77:ab:67:eb:ca:64:a6:09:53:
ff:5b:5e:9d:08:49:de:a2:14:55:ba:56:3f:e4:22:
b6:45:94:21:56:c3:2f:fc:39:99:16:bc:94:52:24:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F6:63:97:69:E2:09:A5:14:B4:21:A2:B7:01:D6:74:C6:6F:CE:71
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.144.0/22
Signature Algorithm: sha256WithRSAEncryption
15:e1:73:27:bc:70:be:14:cc:03:dd:2f:f2:5b:17:85:bb:df:
3e:33:0b:c2:0b:1d:1f:c1:12:cc:b7:17:5a:90:b5:e5:df:b4:
f7:ca:d0:b7:f1:73:4c:f2:d6:3e:5c:94:af:7d:3c:59:76:e5:
12:55:a1:14:b8:90:39:27:d0:50:d7:01:ce:84:51:24:6a:2d:
2d:ce:88:09:ce:0b:b7:b4:dc:fa:7a:1a:ae:02:72:09:bc:15:
73:77:66:bf:2f:01:ea:61:e1:66:0c:7c:03:59:76:f6:87:f2:
38:33:ab:1e:05:f4:23:9b:95:f0:42:8d:a7:25:b4:e5:7c:a6:
01:21:34:e0:37:26:88:c9:c9:ef:ab:75:19:45:3c:00:69:a7:
31:de:0e:30:df:14:44:9d:fc:91:b5:99:18:9c:50:16:a0:b1:
3f:91:26:84:79:ac:0f:a7:c8:94:a3:d0:91:c9:d3:86:1b:a9:
60:e7:92:93:13:80:b4:6f:c3:d1:b5:5d:1e:70:c6:f5:38:26:
5c:a2:3a:a9:be:44:d3:2b:80:1b:cc:f6:63:9e:9e:7a:eb:7c:
89:df:e1:b6:ad:ae:48:74:e5:eb:36:76:0c:21:c6:82:9c:39:
0c:77:91:98:7b:21:c1:01:f1:8c:ba:38:11:87:33:45:e9:54:
2f:9c:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:06 2026 by rpki-client