Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209697.roa
File: AS209697.roa (raw, json)
Hash identifier: N+vNToGZPDTHR4DfYIA4N1pjm6YAAuyU+ymi+3ND8GE=
Subject key identifier: A9:E4:4E:D7:AD:5C:E7:E2:5B:DA:79:C1:32:D1:72:0A:29:15:86:17
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1F4B410E4D27643E7BE48BF9E088837F0C1776E8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209697.roa
Signing time: Thu 19 Mar 2026 07:41:19 +0000
ROA not before: Thu 19 Mar 2026 07:36:19 +0000
ROA not after: Thu 18 Mar 2027 07:41:19 +0000
asID: 209697
IP address blocks: 46.203.199.0/24 maxlen: 24
46.203.235.0/24 maxlen: 24
92.113.4.0/24 maxlen: 24
92.113.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4b:41:0e:4d:27:64:3e:7b:e4:8b:f9:e0:88:83:7f:0c:17:76:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 19 07:36:19 2026 GMT
Not After : Mar 18 07:41:19 2027 GMT
Subject: CN=A9E44ED7AD5CE7E25BDA79C132D1720A29158617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:65:90:be:3c:a5:f5:49:b1:e2:5c:72:1c:
30:4b:14:0c:bc:26:54:59:4e:87:43:c4:f8:22:35:
df:b6:ba:6c:f0:cd:6b:cf:1a:d2:b8:8a:13:b5:82:
de:c4:38:bd:ab:82:98:fc:d1:8b:b3:b2:bd:11:5d:
16:09:ee:0f:99:90:d8:49:53:b4:85:52:83:82:64:
d1:3f:e1:81:80:8e:f4:71:5e:6a:0a:b4:1c:9e:77:
7d:41:bd:91:80:35:72:cd:19:94:0b:00:b0:f5:00:
32:08:48:83:f6:9e:ba:9c:ca:0a:ac:15:62:bf:f0:
ed:cf:95:0b:86:e8:b0:1f:80:24:99:b8:fc:21:45:
03:3d:9b:af:ed:73:31:70:85:99:60:e8:7a:5e:87:
c2:ef:40:e7:1a:c0:5c:45:c1:75:e7:75:24:e6:f7:
f2:19:11:22:a8:cd:62:52:62:9f:b4:4a:fb:d7:0a:
f6:a0:57:d5:fc:6b:53:8a:d9:59:d1:16:af:4c:ab:
5d:86:d9:1d:f4:d5:26:27:ca:22:74:8f:06:eb:7b:
e0:51:9e:f3:cc:8e:c2:25:3d:9b:90:f1:d0:da:60:
b4:a9:7e:5c:c5:8a:ef:f0:60:64:84:7f:a1:34:0d:
7a:4f:e7:f5:94:59:05:f5:b6:f8:b1:f0:67:aa:a0:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E4:4E:D7:AD:5C:E7:E2:5B:DA:79:C1:32:D1:72:0A:29:15:86:17
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209697.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.199.0/24
46.203.235.0/24
92.113.4.0/24
92.113.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b4:ef:26:f1:2a:fa:43:e7:99:23:40:04:3e:17:5f:bf:ea:
d4:e2:e0:de:c8:35:ab:c4:90:4a:73:5b:0d:d9:7f:d6:f0:52:
fd:c4:40:a3:41:28:ff:0f:71:86:26:db:ee:30:3b:b0:6e:f7:
41:e9:25:32:fa:90:6f:7c:26:a9:5d:0d:b3:3a:dc:58:72:71:
b9:00:81:2c:5e:15:2c:4d:04:16:7a:32:0b:69:23:79:95:2b:
ea:4f:8e:18:4f:d0:a1:47:9d:90:8f:90:8f:9b:40:1e:90:16:
1f:c7:7b:e8:fa:3e:ba:79:6d:dd:f0:71:d7:cb:52:3b:b3:d4:
4a:94:87:fb:74:80:55:b3:1c:e9:9a:71:b2:99:99:79:1d:1f:
76:af:6d:fc:12:b8:b5:63:8b:0f:51:81:5b:a5:37:5e:4e:0f:
20:6d:fa:2e:30:09:82:f9:e2:75:ce:19:98:74:71:15:8b:c7:
df:bc:b7:12:05:74:71:a1:11:02:7d:47:3a:9f:d1:b1:a3:01:
32:e3:73:04:45:7b:2c:8a:c3:e1:ee:3b:a9:42:58:d5:9c:23:
ed:d4:95:f4:b9:3f:52:f3:99:d6:48:bf:bb:84:dd:d9:ad:f3:
e9:a3:ec:52:47:28:11:9e:df:ec:b0:b2:9b:fb:c8:d6:60:e0:
91:a4:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 12:35:03 2026 by rpki-client