Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS200709.roa
File: AS200709.roa (raw, json)
Hash identifier: uPr1a2vcAWKskfn88sYc1PEyUPHjdvEbf34Bu1eaVQk=
Subject key identifier: E1:21:6A:00:98:9A:2F:CD:21:AF:AC:FB:C9:BD:84:52:74:39:E0:6F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 153F213C1668A3D88367B36DD0C9E8F6B30ECE73
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS200709.roa
Signing time: Tue 03 Mar 2026 14:48:39 +0000
ROA not before: Tue 03 Mar 2026 14:43:39 +0000
ROA not after: Tue 02 Mar 2027 14:48:39 +0000
asID: 200709
IP address blocks: 178.92.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 15:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:3f:21:3c:16:68:a3:d8:83:67:b3:6d:d0:c9:e8:f6:b3:0e:ce:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 3 14:43:39 2026 GMT
Not After : Mar 2 14:48:39 2027 GMT
Subject: CN=E1216A00989A2FCD21AFACFBC9BD84527439E06F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:9d:43:18:e9:4d:7d:eb:06:98:06:d5:04:
21:8b:53:5d:0c:0f:12:de:cf:4b:99:93:d0:a2:9e:
17:87:78:f7:34:43:c3:94:63:4f:c0:94:90:0c:f7:
91:20:fd:a4:7b:63:60:11:0b:05:01:b6:4f:38:5e:
6a:93:bd:a7:c9:ef:eb:47:a7:7c:10:53:b7:b5:e8:
01:40:7b:aa:38:53:dc:b4:f0:b3:d3:b9:a8:ac:f1:
d3:c1:93:5f:94:c0:d4:c9:2c:3a:5a:49:17:50:d5:
cd:70:1d:65:76:b1:81:40:76:2a:7f:03:37:dc:0a:
4e:1d:fd:a2:06:f8:72:bc:d1:36:d8:13:15:19:ee:
e0:26:48:77:63:44:dc:4f:2d:c2:d1:67:1c:ee:37:
b6:b1:13:d4:53:e1:c2:e6:5f:77:91:57:0d:d4:c5:
39:a4:dd:21:41:96:c8:f3:6f:f3:0d:90:2e:bb:a8:
8a:01:bc:b6:77:15:78:50:c4:95:bd:c7:85:f8:d2:
0d:05:5e:17:88:c0:25:53:73:fc:c5:5e:e6:4c:df:
77:a0:95:60:cd:0d:d2:17:ab:4b:1b:11:10:c3:0b:
e2:4f:78:ab:25:e2:fd:0c:1b:2e:58:ac:e1:6b:4d:
e4:23:7c:8d:49:b6:66:3c:45:db:ec:bb:49:81:39:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:21:6A:00:98:9A:2F:CD:21:AF:AC:FB:C9:BD:84:52:74:39:E0:6F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS200709.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2f:a4:cf:5c:7e:e9:49:5a:67:f0:7a:fd:a4:1c:0f:19:59:
15:55:40:24:6a:a6:f0:b6:4b:8d:a0:d9:86:ce:ab:9b:d3:98:
93:7c:b6:86:0e:aa:24:38:e6:b7:cd:30:77:23:1e:cb:0b:35:
4a:46:0d:9a:33:dd:9a:6a:d2:91:34:30:95:88:7a:3d:7d:4b:
4b:96:16:f4:6b:54:76:24:d2:94:b6:9a:66:e7:5f:19:ad:3b:
05:1a:e8:4e:21:a6:db:8a:e3:d0:96:ea:bf:57:67:c1:fc:d8:
8c:81:b7:78:8c:8b:9f:28:aa:e9:a4:95:6e:0e:52:b2:ac:45:
32:af:26:32:c1:ac:a5:36:7f:52:38:4a:8d:e8:51:48:73:24:
dd:bb:a9:43:62:46:3b:69:73:e9:2e:59:1c:9d:b6:b6:e8:cd:
d8:13:54:67:28:39:3b:77:d9:01:c7:4a:d9:4e:8a:38:fb:dc:
41:22:db:c0:31:6b:c0:67:79:78:c5:d2:9b:fc:70:8a:fe:6b:
1d:73:08:53:c8:ba:76:c1:d5:78:60:ac:41:79:53:ab:d5:db:
e6:8e:b6:23:0c:1e:17:e6:b3:07:f5:81:7d:31:fc:f3:4f:13:
1a:e5:50:e0:38:73:7a:9a:af:25:03:f7:41:f7:05:ce:98:1c:
f2:67:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:04:49 2026 by rpki-client