Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: Rj3G8zS3eGLWSA30gAA6k1rgzBEwxl+o4WDlHzUUz0I=
Subject key identifier: 62:09:12:A3:7C:49:BA:9E:FC:DD:EB:F3:C1:D1:60:6C:DE:D6:33:73
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0D64A08D9FBE4E819B5881C0ED7A03D673C2AEB9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209242.roa
Signing time: Mon 03 Aug 2026 00:49:17 +0000
ROA not before: Mon 03 Aug 2026 00:44:17 +0000
ROA not after: Mon 02 Aug 2027 00:49:17 +0000
asID: 209242
IP address blocks: 46.202.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:64:a0:8d:9f:be:4e:81:9b:58:81:c0:ed:7a:03:d6:73:c2:ae:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 3 00:44:17 2026 GMT
Not After : Aug 2 00:49:17 2027 GMT
Subject: CN=620912A37C49BA9EFCDDEBF3C1D1606CDED63373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:e0:60:49:b5:ea:ee:08:6f:d7:74:c2:a6:
95:82:29:13:d8:c4:03:13:84:cc:5d:34:f8:df:9a:
8f:a6:7b:17:aa:16:bb:0a:fd:fe:5a:31:ff:a0:fc:
79:c0:21:ab:0b:db:15:29:69:71:39:ee:fb:5a:cc:
06:7e:7d:dc:e8:04:c1:d0:91:85:cb:ce:a6:14:79:
d8:df:70:4a:cf:ad:c7:9d:31:d4:98:96:cc:22:14:
c6:b1:0c:bb:c2:da:9d:27:dc:6e:c4:7e:7a:ab:ce:
f8:92:d2:80:ba:92:7d:59:3d:93:17:02:93:15:9a:
1f:58:21:db:95:52:d2:96:cb:b7:90:0b:d2:16:eb:
f3:26:ab:e2:73:d7:0c:6b:43:85:58:58:5b:d1:16:
db:14:0a:b2:0e:11:25:97:16:6b:23:9c:37:18:fa:
35:44:1b:91:e5:25:99:6b:9d:2c:c2:ad:0a:aa:51:
56:0f:b3:ba:4a:cd:91:60:ad:35:91:33:d9:33:7b:
92:e7:7a:e2:67:c5:40:a3:ac:a2:ff:d2:f0:82:60:
24:32:5b:96:38:87:b6:63:87:84:24:1c:ed:59:fe:
55:5b:50:14:4b:f7:b2:a6:f8:55:18:61:23:3b:4a:
3f:36:29:f0:db:48:87:4c:d0:07:d5:ef:ae:18:b9:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:09:12:A3:7C:49:BA:9E:FC:DD:EB:F3:C1:D1:60:6C:DE:D6:33:73
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.30.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ef:0d:5f:99:ef:bf:f3:87:9e:5b:8f:d5:00:6b:7d:ee:42:
7d:17:ae:ed:ba:20:61:ff:61:fd:ee:1f:05:45:8a:ed:41:50:
e8:5c:3a:84:08:f9:e2:c5:ff:27:c3:d2:18:93:be:b2:70:f5:
b5:7c:59:09:ce:d0:19:76:29:df:da:45:97:96:99:2f:1c:a2:
f9:ea:bd:35:ca:a6:70:85:f9:26:84:a2:d7:66:99:98:e2:99:
f5:20:e9:b0:c6:a6:27:3e:a2:02:03:b9:f8:3a:2e:db:73:db:
b7:f5:04:96:85:8a:92:80:01:12:99:3d:dd:2a:f7:2a:38:71:
2c:29:10:fd:81:77:17:f7:56:a7:39:d6:17:fe:54:ff:97:ab:
95:77:4a:7a:fe:13:71:10:e7:04:12:bd:1d:ab:67:5d:76:4d:
b7:55:73:5e:9b:ef:4e:3b:7e:cc:2b:c9:e7:80:ab:4f:4a:89:
d8:ee:f9:8c:89:27:5d:f7:d3:94:b5:5f:92:fc:18:6d:e6:f1:
d6:b7:53:ef:2f:f7:5e:2b:6f:1b:dd:b9:e6:00:7c:1b:06:b7:
10:f7:91:24:df:55:a8:06:aa:05:c2:be:04:67:81:3b:9f:4b:
ae:65:d9:98:2c:03:bd:7e:cc:17:b2:28:39:e2:eb:ba:ad:a1:
34:f4:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 12:16:44 2026 by rpki-client