Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: uG4S8C4SoKhBFgt4S9zBhE4WaLtcoB8EykpQFJWxc2U=
Subject key identifier: 0B:3C:09:09:26:19:45:7A:74:C9:53:97:44:63:7B:97:E6:66:1A:59
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2F33F4A3A51FBF15B4D3B53755755C5B9711C8CA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209242.roa
Signing time: Wed 05 Aug 2026 18:49:19 +0000
ROA not before: Wed 05 Aug 2026 18:44:19 +0000
ROA not after: Wed 04 Aug 2027 18:49:19 +0000
asID: 209242
IP address blocks: 141.11.194.0/23 maxlen: 24
141.11.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:33:f4:a3:a5:1f:bf:15:b4:d3:b5:37:55:75:5c:5b:97:11:c8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 5 18:44:19 2026 GMT
Not After : Aug 4 18:49:19 2027 GMT
Subject: CN=0B3C09092619457A74C9539744637B97E6661A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:6e:1c:58:1b:cc:bf:bb:53:f7:a0:4d:9b:
e6:7d:6f:f0:2b:1a:7f:b2:aa:8d:52:4f:37:93:07:
2f:d8:28:01:c8:c3:fb:de:44:81:c1:62:42:11:b5:
9c:5e:09:ce:6b:bd:01:58:86:b3:f0:cc:83:5e:be:
d1:c4:ce:64:e5:67:ff:90:1e:2d:0a:b3:ee:8c:9c:
ed:d9:b9:65:81:bd:f1:2a:64:73:ce:a1:0e:14:17:
51:88:e3:f6:6e:2d:e2:15:5a:2c:f1:00:9b:78:00:
0f:18:cb:01:4d:54:a9:79:df:f5:2a:5c:2b:0f:d0:
50:9f:04:ae:f3:09:b0:4e:20:bd:8d:ac:b4:36:e6:
64:02:7a:e3:49:3d:3d:da:55:e7:03:45:ec:e5:8a:
b7:54:1b:b0:f5:8d:49:f6:56:64:73:5c:4b:c3:37:
92:84:9c:df:93:7a:dc:16:a2:9a:4f:fd:85:4b:f7:
cb:b1:0f:e7:4c:e5:d2:e6:a8:e4:c2:97:d0:fa:f3:
88:46:ca:4d:51:e2:91:31:a3:ea:22:0f:dc:45:c2:
2a:4f:ad:b3:4f:86:d4:c6:c4:76:4d:45:a5:f8:6a:
92:e5:a6:9d:b0:e5:74:1e:58:9e:79:ef:6a:3d:46:
cb:e1:18:d3:a8:53:97:56:db:d4:fe:d7:05:cc:71:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3C:09:09:26:19:45:7A:74:C9:53:97:44:63:7B:97:E6:66:1A:59
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.194.0/23
141.11.202.0/23
Signature Algorithm: sha256WithRSAEncryption
87:0e:00:93:2c:f0:7b:34:6f:9f:75:f6:fc:de:72:4b:49:d3:
a7:b6:11:6f:a4:35:fc:7d:35:9d:ac:b6:73:23:21:54:c6:51:
11:ad:da:a9:1b:e2:b8:9b:08:4d:a1:a2:84:06:b8:4f:47:2c:
ca:fa:4b:97:5c:ea:70:06:48:f3:bc:19:df:0a:60:93:ea:48:
33:4c:f2:85:76:fc:42:bf:34:e2:27:84:58:55:fa:e3:bf:85:
2f:58:3b:a0:6d:db:a5:c7:6f:70:39:49:92:e4:c3:e2:aa:c3:
32:4d:da:8e:b4:36:18:f2:33:7b:ad:ca:37:db:cb:d7:a5:69:
18:eb:6a:b4:aa:12:da:99:e0:65:cc:df:2a:c1:81:c7:f2:4e:
e9:d0:d2:30:ee:05:d1:44:98:b6:a2:2d:78:cf:d5:2e:6d:55:
36:f6:26:98:5c:be:3b:0a:65:fb:83:82:8e:c0:3e:f2:7e:b5:
52:0f:9e:ea:d8:3d:59:02:88:3b:dd:b2:db:35:f8:d2:d0:df:
ca:6d:47:30:2c:1c:b2:85:fd:d9:59:30:38:33:d2:62:3e:03:
fa:40:00:68:b8:45:16:6a:c0:5d:62:65:19:4d:98:42:6b:c3:
19:15:fa:08:30:e8:b4:2e:e3:bd:f4:cf:5d:75:40:30:1d:ed:
f2:cc:a8:d6
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIULzP0o6UfvxW007U3VXVcW5cRyMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA4MDUxODQ0MTlaFw0yNzA4MDQxODQ5MTlaMDMxMTAvBgNV
BAMTKDBCM0MwOTA5MjYxOTQ1N0E3NEM5NTM5NzQ0NjM3Qjk3RTY2NjFBNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmm4cWBvMv7tT96BNm+Z9b/Ar
Gn+yqo1STzeTBy/YKAHIw/veRIHBYkIRtZxeCc5rvQFYhrPwzINevtHEzmTlZ/+Q
Hi0Ks+6MnO3ZuWWBvfEqZHPOoQ4UF1GI4/ZuLeIVWizxAJt4AA8YywFNVKl53/Uq
XCsP0FCfBK7zCbBOIL2NrLQ25mQCeuNJPT3aVecDRezlirdUG7D1jUn2VmRzXEvD
N5KEnN+TetwWoppP/YVL98uxD+dM5dLmqOTCl9D684hGyk1R4pExo+oiD9xFwipP
rbNPhtTGxHZNRaX4apLlpp2w5XQeWJ5572o9RsvhGNOoU5dW29T+1wXMcWuXAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUCzwJCSYZRXp0yVOXRGN7l+ZmGlkwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA5MjQyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBjQvC
AwQBjQvKMA0GCSqGSIb3DQEBCwUAA4IBAQCHDgCTLPB7NG+fdfb83nJLSdOnthFv
pDX8fTWdrLZzIyFUxlERrdqpG+K4mwhNoaKEBrhPRyzK+kuXXOpwBkjzvBnfCmCT
6kgzTPKFdvxCvzTiJ4RYVfrjv4UvWDugbdulx29wOUmS5MPiqsMyTdqOtDYY8jN7
rco328vXpWkY62q0qhLameBlzN8qwYHH8k7p0NIw7gXRRJi2oi14z9UubVU29iaY
XL47CmX7g4KOwD7yfrVSD57q2D1ZAog73bLbNfjS0N/KbUcwLByyhf3ZWTA4M9Ji
PgP6QABouEUWasBdYmUZTZhCa8MZFfoIMOi0LuO99M9ddUAwHe3yzKjW
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:09 2026 by rpki-client