Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: u5+4DfE46qXMJgOaB5ve7LU+UJlKJ1xNuLpOyCzKoQs=
Subject key identifier: B2:5D:4C:3F:6B:4D:6A:E6:9F:DA:78:71:40:CF:C8:9A:01:65:D2:32
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 07A7F09376848B3A0F6F73D7D32BF70460A1D498
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS209242.roa
Signing time: Thu 27 Aug 2026 16:42:41 +0000
ROA not before: Thu 27 Aug 2026 16:37:41 +0000
ROA not after: Thu 26 Aug 2027 16:42:41 +0000
asID: 209242
IP address blocks: 177.28.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 11:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a7:f0:93:76:84:8b:3a:0f:6f:73:d7:d3:2b:f7:04:60:a1:d4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Aug 27 16:37:41 2026 GMT
Not After : Aug 26 16:42:41 2027 GMT
Subject: CN=B25D4C3F6B4D6AE69FDA787140CFC89A0165D232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:a7:f5:dc:42:fc:7a:9b:4f:79:0a:93:ea:
ca:ff:99:74:6b:2b:82:b6:74:cd:4b:5c:3a:7f:56:
92:fb:88:e4:1d:a6:19:d4:f5:eb:1e:37:67:68:88:
de:f0:f5:94:1f:24:32:6b:d0:46:b1:bc:ce:73:1b:
b3:a2:16:a7:b0:fe:55:dd:e6:c2:79:e0:e3:02:55:
b8:9a:db:63:9d:e6:d9:f1:da:98:47:e1:b8:3d:ab:
79:ac:d4:ed:9f:71:fb:f6:bc:66:34:57:70:9c:bb:
6e:fc:ea:a7:42:ed:74:dc:55:52:6b:fc:15:ae:d2:
b2:ca:1b:14:a1:c5:f2:98:08:f7:9b:7b:56:e5:b3:
47:d2:bf:2a:06:8d:88:f8:b7:4d:f3:62:68:f1:9c:
13:a8:ea:ed:50:f7:84:3c:36:ee:7a:c9:1b:ba:29:
ba:b4:d3:28:09:0a:d5:9d:6b:77:87:77:f1:2d:19:
61:6e:3d:4e:ab:40:b3:30:e4:4d:cf:5f:89:b5:18:
ed:31:10:0f:7a:b8:e1:96:09:41:18:3f:96:a6:32:
3b:1d:20:be:1b:81:9c:09:75:e4:42:d0:47:a6:38:
dd:b4:ad:ef:57:97:bf:2f:58:48:dc:20:16:f9:dd:
88:68:83:a3:6b:24:0e:bb:c2:8c:de:ca:8a:f2:ec:
ed:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5D:4C:3F:6B:4D:6A:E6:9F:DA:78:71:40:CF:C8:9A:01:65:D2:32
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c1:86:33:3f:cf:50:d2:b1:38:7f:05:cd:82:80:b0:e6:17:
ce:6e:17:18:f1:fb:cb:cf:86:d5:07:cc:8d:dd:b5:9b:e4:02:
1b:fe:4e:8a:80:b4:ff:e4:5b:5e:76:98:30:5b:f3:a1:53:36:
c7:f6:52:8a:7d:14:10:3b:b1:63:5e:75:bd:a3:b8:e6:04:12:
88:50:90:83:12:29:d0:78:1e:73:f6:3f:d0:0d:5b:a8:50:71:
9b:3b:a2:57:3b:2d:42:3f:54:b8:bb:63:cb:26:2c:05:d2:94:
ea:d2:29:bd:b7:06:aa:1c:f7:85:ae:24:8b:48:4f:bc:d4:e6:
05:6d:50:61:f3:37:85:e0:cb:21:0f:c1:1a:28:67:d7:ff:16:
f3:ec:00:9b:5d:55:be:c4:37:f8:6f:5f:a6:60:ff:84:37:cd:
b1:6c:ab:fa:79:ce:eb:68:00:74:d0:26:5b:34:63:54:48:2d:
16:c9:85:0f:57:53:d5:3e:35:5a:9e:eb:20:9b:20:47:7a:ce:
14:2d:16:3e:d6:2e:84:b5:f8:bf:03:e4:b3:9f:8b:e9:3e:86:
3a:ec:6b:66:c6:4e:99:74:8e:c4:ab:ee:17:4c:03:c1:61:fc:
57:c4:bd:af:89:fe:cd:66:58:84:68:43:b7:7d:5b:a9:3c:3d:
c7:72:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:19:33 2026 by rpki-client