Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209181.roa
File: AS209181.roa (raw, json)
Hash identifier: Npto+vHdfsNjN9pNBaaAfPZ4wQlxZdRwYOyHlAoOfac=
Subject key identifier: 9B:83:79:D5:CF:58:C9:07:72:D5:47:7F:23:D3:5E:F2:1C:D8:7E:5C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3BF9F4D6C23B1E1A99293CA149140ED343D39529
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209181.roa
Signing time: Sat 16 May 2026 13:44:32 +0000
ROA not before: Sat 16 May 2026 13:39:32 +0000
ROA not after: Sat 15 May 2027 13:44:32 +0000
asID: 209181
IP address blocks: 178.94.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 19:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f9:f4:d6:c2:3b:1e:1a:99:29:3c:a1:49:14:0e:d3:43:d3:95:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 16 13:39:32 2026 GMT
Not After : May 15 13:44:32 2027 GMT
Subject: CN=9B8379D5CF58C90772D5477F23D35EF21CD87E5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:98:e2:2f:0d:68:08:15:63:5b:38:3d:3a:
c3:9d:7e:3c:96:6d:01:ca:40:5a:7d:8a:75:4e:ac:
fa:34:2e:b6:e1:bf:ea:9a:de:2c:64:0a:7a:3d:7a:
91:91:ef:85:28:25:a2:e3:dd:bf:d1:a9:8a:7b:74:
e5:99:b9:46:0d:c5:00:50:d9:ea:3c:29:09:1e:9e:
00:ce:d0:02:b8:87:01:1a:ef:c8:62:f8:5d:d4:a7:
e5:14:2d:4b:e8:27:54:b6:37:3b:41:90:f2:15:c6:
01:8b:98:3c:9d:2d:5f:1c:16:57:3d:5f:4e:59:ea:
74:e8:5a:0c:ab:1e:aa:d1:14:ba:1d:4d:b9:4f:e7:
6c:34:fc:89:9c:f2:13:56:a5:49:0d:10:1b:2b:99:
2c:ea:39:26:7b:86:93:a7:36:b0:9b:bc:00:a8:71:
9c:50:7a:8a:19:04:3b:2d:23:d2:c2:08:fc:9b:b5:
d8:d8:a9:5d:87:66:4b:cc:6a:ba:d7:32:90:07:d9:
43:69:e6:69:1a:a8:c3:68:d5:23:f8:a7:92:dc:b1:
86:3f:6f:9f:52:f5:e6:2f:a4:b5:92:18:13:a8:65:
23:97:2f:f5:34:fb:1e:12:43:e6:39:51:99:b5:c9:
b9:31:46:55:67:ba:5c:1f:53:b7:6d:f4:27:86:b5:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:83:79:D5:CF:58:C9:07:72:D5:47:7F:23:D3:5E:F2:1C:D8:7E:5C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2d:bd:aa:0b:e0:46:82:bb:36:fd:0a:ef:98:a3:bb:be:21:
37:a3:5f:49:0f:6d:38:4b:f7:97:29:e4:e4:8b:12:0f:d3:e3:
e9:35:aa:85:e1:2d:2d:e4:38:ff:56:da:10:fd:42:c5:1e:85:
df:fc:e1:36:a9:3e:3e:1b:ba:c4:12:19:1e:c2:f0:8b:f0:cf:
4f:df:77:cc:0c:85:aa:b3:59:20:1d:ef:af:bc:54:e3:c3:30:
0a:c2:84:99:d4:1c:a4:0d:85:a2:03:d0:d5:fd:6b:b6:16:a7:
76:0f:1f:8d:c5:a2:02:64:0d:8b:8c:dc:ca:25:f9:3f:c7:c6:
b1:2d:7b:c6:f8:d5:17:65:2f:f8:4a:cf:73:42:39:ae:4c:a8:
89:1d:7d:42:3a:7c:d9:e6:1a:43:b1:41:57:fb:b4:f1:98:0e:
24:16:f3:62:11:7b:61:42:f9:47:04:c3:8e:39:f1:12:5d:a8:
e7:27:a5:64:3f:0b:c5:ce:be:49:09:79:a0:9d:27:5d:b3:38:
0d:d9:a5:5c:cb:3c:f4:a7:f6:e2:5e:15:59:17:c5:26:36:14:
27:13:dc:48:a7:a6:39:04:1a:d4:59:b9:7e:a9:f5:f9:0b:38:
d0:0e:e1:b8:ec:66:a7:0e:27:82:1e:7a:86:08:d0:77:2a:58:
91:22:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:42:45 2026 by rpki-client