Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209181.roa
File: AS209181.roa (raw, json)
Hash identifier: SLjPx9G1/ndkwxK1g9GhK0RxWpLVJ6W4Kwq+hoXu25Q=
Subject key identifier: 27:43:D3:39:66:54:33:6E:E4:5D:BE:1F:B5:DD:D1:A7:E3:E6:1B:D7
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2EA72DFB6639AB2D8937700B19CC36D80F81ED08
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209181.roa
Signing time: Tue 01 Sep 2026 16:49:31 +0000
ROA not before: Tue 01 Sep 2026 16:44:31 +0000
ROA not after: Tue 31 Aug 2027 16:49:31 +0000
asID: 209181
IP address blocks: 141.11.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a7:2d:fb:66:39:ab:2d:89:37:70:0b:19:cc:36:d8:0f:81:ed:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 1 16:44:31 2026 GMT
Not After : Aug 31 16:49:31 2027 GMT
Subject: CN=2743D3396654336EE45DBE1FB5DDD1A7E3E61BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:e3:65:ab:80:9d:ca:a0:2d:80:81:4b:5f:
60:61:1d:62:f9:78:1c:06:50:00:95:b0:e6:bb:3a:
f5:5c:3a:53:47:c3:c2:26:f8:97:71:37:36:fc:ec:
40:c1:13:5a:12:16:59:6c:41:c1:88:40:b9:3a:54:
2d:ed:b5:48:20:89:e2:8a:63:20:b7:68:57:36:d6:
6b:75:98:ee:c4:c4:af:a1:2e:9d:d1:22:6c:4b:82:
e8:2b:28:cc:ad:36:43:bb:9a:9d:d0:0c:67:35:3a:
71:a3:c9:9e:f1:fd:55:e8:64:c1:3b:b9:50:56:54:
3d:06:52:66:e0:54:37:6a:2d:01:63:98:76:47:51:
81:3b:16:61:a1:96:bc:f5:01:44:49:97:56:e9:b1:
01:66:60:54:3f:61:63:9e:6f:b1:73:12:a7:91:0c:
7a:8d:41:e7:6a:46:5c:0e:df:aa:ea:d9:bf:82:92:
b6:aa:d7:e6:8c:08:fd:2d:30:de:68:6d:0f:b1:6e:
29:36:ce:15:86:9f:e9:7b:5f:0c:af:6e:9f:5b:ed:
c4:2c:e1:d4:82:4b:7f:92:00:3e:ea:b4:dc:8e:c8:
96:2d:21:08:fb:75:b8:38:01:f9:b7:55:a3:02:ee:
8e:98:6b:0f:be:7c:89:b6:f3:05:17:7d:c9:b0:76:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:43:D3:39:66:54:33:6E:E4:5D:BE:1F:B5:DD:D1:A7:E3:E6:1B:D7
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.41.0/24
Signature Algorithm: sha256WithRSAEncryption
32:70:69:b1:08:e8:46:2b:75:db:ae:ac:82:d2:04:96:76:c7:
97:e1:d7:ba:1d:2c:df:09:1c:b7:9b:5e:0b:39:a1:15:00:62:
7d:71:05:37:ab:52:9f:14:5c:21:36:01:04:6e:51:0b:12:49:
70:74:e8:a6:bc:03:27:2e:2e:04:bc:90:2a:e6:6d:05:8a:e1:
39:ad:8e:ef:7b:f5:76:ef:e5:25:8c:00:97:14:b0:d4:24:14:
7d:c8:66:52:8c:19:86:f4:d1:e6:13:c2:fa:3b:47:db:4f:d3:
e7:e3:f4:3e:4a:7f:bc:b4:b9:c1:14:0e:79:42:f5:79:d8:33:
e4:9e:0c:76:1d:37:e6:f4:03:1f:7b:bd:1b:0a:0d:ed:db:c2:
83:2a:40:ab:30:11:0b:5a:29:3e:19:a5:93:16:fa:f1:fd:5f:
fb:ea:62:c6:0c:a7:cd:08:90:8f:b5:f1:b8:b1:3a:e5:47:dd:
79:85:70:d4:dd:4a:0e:8a:12:5e:55:41:9d:8a:26:66:09:ee:
a3:bd:af:6f:81:ef:6a:44:18:8c:86:d0:df:d4:8f:96:34:d9:
53:34:80:ff:b7:42:a5:3b:7a:a2:c4:14:e0:d4:5b:1e:75:45:
1a:c3:da:3a:d5:3d:8d:00:b9:ec:d1:b6:33:76:4f:9d:33:e6:
99:39:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:20:24 2026 by rpki-client