Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209699.roa
File: AS209699.roa (raw, json)
Hash identifier: OanBPjsopCOQiRymKd5Aea7mOqNSUBGHOhpjM0j8cXA=
Subject key identifier: 75:B0:C8:DC:96:84:AF:E6:BD:F8:96:33:DA:3D:90:66:23:3F:16:BE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7B310C0713CEA3895CD1A071E912596C81625074
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209699.roa
Signing time: Wed 30 Apr 2025 13:22:21 +0000
ROA not before: Wed 30 Apr 2025 13:17:21 +0000
ROA not after: Wed 29 Apr 2026 13:22:21 +0000
asID: 209699
IP address blocks: 92.112.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 20:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:31:0c:07:13:ce:a3:89:5c:d1:a0:71:e9:12:59:6c:81:62:50:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 30 13:17:21 2025 GMT
Not After : Apr 29 13:22:21 2026 GMT
Subject: CN=75B0C8DC9684AFE6BDF89633DA3D9066233F16BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:70:68:d5:61:ac:26:64:ad:34:66:e3:14:dd:
7b:36:a7:d6:44:34:9c:e3:a8:d1:dc:40:40:62:1e:
b6:21:28:fc:c8:7f:66:bf:cd:35:74:63:38:79:21:
30:41:47:0d:b7:4c:3e:00:5e:b2:a4:b0:98:3b:25:
ef:7b:72:bf:b7:b2:0f:94:47:c8:97:4a:ff:cf:04:
61:34:0b:f8:c9:e1:60:b3:1b:d9:09:1f:7e:ba:60:
df:c0:17:c9:1d:ba:02:f9:15:11:7b:a0:c8:a2:d6:
1f:b2:c0:bd:a3:43:3f:23:63:94:90:60:32:8c:d7:
2c:85:29:22:1d:e7:bb:86:d5:04:16:d3:d1:7b:39:
90:34:63:3f:1d:9f:ec:2c:df:9b:6d:67:84:f2:41:
14:9c:93:69:16:db:f0:33:e6:66:b0:da:43:7f:5a:
cb:d9:49:05:f0:f0:c7:0e:42:f6:2e:aa:6e:a3:41:
f7:8a:7e:6d:0e:06:82:eb:7d:38:9d:96:0c:67:6b:
4c:25:88:5c:ed:84:23:1c:e8:ba:6f:14:2e:74:d6:
a9:c6:b6:98:6d:f5:86:ab:f6:d1:53:9b:42:af:b4:
c1:12:32:0c:59:7b:a2:07:2a:b3:89:49:8c:b6:cd:
a3:be:5b:66:b1:04:c4:f4:32:d7:82:69:9d:91:aa:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B0:C8:DC:96:84:AF:E6:BD:F8:96:33:DA:3D:90:66:23:3F:16:BE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209699.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.20.0/22
Signature Algorithm: sha256WithRSAEncryption
21:7c:1d:4e:ef:ff:a8:c7:b3:d5:bb:6a:57:d0:ee:d9:2f:ff:
d1:ab:ef:4e:28:ae:5c:18:d1:be:94:e5:7b:d7:0e:0f:b7:a2:
d8:05:79:66:ee:e7:25:06:7b:e1:54:69:ce:ba:a8:09:43:dd:
3a:22:25:17:cb:e5:26:71:96:a6:c7:69:82:27:ff:6b:a9:62:
ce:9d:fc:dd:aa:38:e2:45:a1:ed:4e:7f:18:d4:6d:d5:eb:f0:
a8:68:77:22:ab:0d:15:12:c1:43:b1:8c:06:e4:fb:84:60:b9:
44:ac:5a:b0:d9:2b:fa:2b:ae:70:67:72:1c:8d:9c:d4:ac:82:
2b:73:d5:ca:35:4c:9a:69:09:78:29:45:e6:87:77:db:08:55:
f7:41:d0:43:51:5c:f8:72:b0:24:f0:dc:f6:f5:1a:95:bf:fc:
70:83:8e:fb:db:a5:eb:0b:06:ef:c6:24:58:03:8a:81:2f:60:
87:be:65:ec:88:bc:98:87:bf:be:a3:ac:26:92:1a:6b:b8:e0:
08:64:22:8e:63:f1:b9:3c:12:26:e8:fe:71:75:b2:da:b1:53:
bf:af:8e:06:c4:e6:de:ee:05:c6:90:68:b1:a4:09:01:12:88:
38:e9:88:fb:ad:94:ba:05:70:41:c3:d6:72:47:df:50:5b:05:
a6:58:6e:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUezEMBxPOo4lc0aBx6RJZbIFiUHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA0MzAxMzE3MjFaFw0yNjA0MjkxMzIyMjFaMDMxMTAvBgNV
BAMTKDc1QjBDOERDOTY4NEFGRTZCREY4OTYzM0RBM0Q5MDY2MjMzRjE2QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDscGjVYawmZK00ZuMU3Xs2p9ZE
NJzjqNHcQEBiHrYhKPzIf2a/zTV0Yzh5ITBBRw23TD4AXrKksJg7Je97cr+3sg+U
R8iXSv/PBGE0C/jJ4WCzG9kJH366YN/AF8kdugL5FRF7oMii1h+ywL2jQz8jY5SQ
YDKM1yyFKSId57uG1QQW09F7OZA0Yz8dn+ws35ttZ4TyQRSck2kW2/Az5maw2kN/
WsvZSQXw8McOQvYuqm6jQfeKfm0OBoLrfTidlgxna0wliFzthCMc6LpvFC501qnG
tpht9Yar9tFTm0KvtMESMgxZe6IHKrOJSYy2zaO+W2axBMT0MteCaZ2RqhqDAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUdbDI3JaEr+a9+JYz2j2QZiM/Fr4wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA5Njk5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHAU
MA0GCSqGSIb3DQEBCwUAA4IBAQAhfB1O7/+ox7PVu2pX0O7ZL//Rq+9OKK5cGNG+
lOV71w4Pt6LYBXlm7uclBnvhVGnOuqgJQ906IiUXy+UmcZamx2mCJ/9rqWLOnfzd
qjjiRaHtTn8Y1G3V6/CoaHciqw0VEsFDsYwG5PuEYLlErFqw2Sv6K65wZ3IcjZzU
rIIrc9XKNUyaaQl4KUXmh3fbCFX3QdBDUVz4crAk8Nz29RqVv/xwg47726XrCwbv
xiRYA4qBL2CHvmXsiLyYh7++o6wmkhpruOAIZCKOY/G5PBIm6P5xdbLasVO/r44G
xObe7gXGkGixpAkBEog46Yj7rZS6BXBBw9ZyR99QWwWmWG7I
-----END CERTIFICATE-----
Generated at Wed Jun 4 10:15:16 2025 by rpki-client