Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209658.roa
File: AS209658.roa (raw, json)
Hash identifier: oJgNU2FBISiAmp9pE9C8Str53oErJByuutmGLHrGQOE=
Subject key identifier: E6:37:79:C9:B1:A6:D0:9D:94:6D:D5:9C:3B:80:D8:B0:07:6E:02:57
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 751641BFDC18B3141EAD5DD1AB76028821FCAEDE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209658.roa
Signing time: Sat 27 Sep 2025 13:24:54 +0000
ROA not before: Sat 27 Sep 2025 13:19:54 +0000
ROA not after: Sat 26 Sep 2026 13:24:54 +0000
asID: 209658
IP address blocks: 95.134.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:16:41:bf:dc:18:b3:14:1e:ad:5d:d1:ab:76:02:88:21:fc:ae:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 27 13:19:54 2025 GMT
Not After : Sep 26 13:24:54 2026 GMT
Subject: CN=E63779C9B1A6D09D946DD59C3B80D8B0076E0257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:3d:87:6d:6d:8c:bc:f3:f1:37:f2:fd:f9:
f3:aa:de:e3:6a:21:c4:67:90:72:82:ee:8a:f5:0c:
e6:27:2f:13:06:77:39:92:96:f5:88:f0:ff:85:b0:
e4:9f:4a:7c:f6:db:ee:a9:41:4b:e5:d8:6b:23:8c:
00:b0:2e:80:d9:c5:24:b4:36:66:0c:b3:59:dc:db:
70:4a:40:06:46:03:9f:68:13:6e:14:de:cf:88:4b:
1e:36:86:7b:2a:d2:cb:40:aa:7a:4d:51:e7:57:b5:
cd:4d:28:54:cc:63:59:2f:71:b6:95:ce:31:ff:17:
ce:d4:9b:50:61:88:2d:fd:14:8c:1c:c9:33:56:6c:
ee:2f:27:b1:76:a2:84:c2:22:15:6c:97:d7:b8:64:
d8:c6:6e:0f:c2:66:0c:4f:6a:94:87:a3:bf:8c:e1:
ac:aa:31:3f:85:69:35:8c:86:cc:4d:90:67:b5:c2:
b8:db:9f:73:a3:fe:d5:19:0f:00:1d:81:71:40:38:
2c:e4:33:45:2f:f4:18:37:a8:27:d6:4b:85:b8:bf:
ce:b6:3d:3c:ea:b7:f4:fc:09:5b:8c:93:8c:6b:cf:
d2:dd:39:90:f0:0c:d5:fb:35:92:30:4c:07:30:49:
6e:e6:0d:44:16:14:b0:71:a0:14:56:43:bd:95:c4:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:37:79:C9:B1:A6:D0:9D:94:6D:D5:9C:3B:80:D8:B0:07:6E:02:57
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209658.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.4.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0e:ba:ca:6c:2f:19:ad:02:22:40:20:b1:68:97:b0:a2:05:
15:35:a6:8e:7a:61:db:29:b0:d9:4c:1f:e5:92:a6:d7:a7:de:
b3:33:13:96:56:70:99:fa:fe:ab:b0:99:85:b8:d0:f0:a3:cf:
90:d2:54:53:47:fa:2f:c9:74:b1:30:6a:70:1e:54:ca:10:7e:
03:e1:98:41:c3:41:e8:20:75:9b:c8:71:f6:4e:59:4c:3c:51:
3f:59:c0:44:69:f2:1a:50:49:8f:20:a2:a1:24:e1:f8:85:d7:
6a:dc:8b:e5:b1:24:35:65:73:a0:e4:ea:19:9d:1a:b1:be:68:
c9:4e:db:c2:51:b4:a8:46:a5:14:51:5a:1f:d3:19:88:bc:02:
0c:df:87:de:83:ff:69:93:b2:44:35:2e:08:82:87:be:ae:11:
70:9c:f2:7e:e6:cd:cd:04:f3:1f:05:6e:20:7c:38:12:96:e9:
69:c4:79:aa:6b:74:55:cb:ca:c3:37:71:b4:88:06:da:e9:2d:
3e:db:53:51:c9:d8:8e:49:78:35:06:be:23:8f:57:aa:93:11:
14:53:02:76:a9:0c:42:15:b7:5d:cc:19:4e:af:97:79:0f:f8:
a6:03:97:44:1f:20:d9:c9:79:55:eb:22:e3:24:75:aa:c2:cd:
93:de:79:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 21:27:47 2025 by rpki-client