Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209888.roa
File: AS209888.roa (raw, json)
Hash identifier: GIMNHQblBd6UcMoZOyepjOhMEdmxSgXHi+E8XcAPULs=
Subject key identifier: A9:0C:45:1D:81:C4:EB:14:AC:22:DE:48:BF:DF:B4:99:68:79:04:EB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1017A69CBCEE354DEB54AA61D7FC389F8402091D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209888.roa
Signing time: Fri 14 Aug 2026 14:45:42 +0000
ROA not before: Fri 14 Aug 2026 14:40:42 +0000
ROA not after: Fri 13 Aug 2027 14:45:42 +0000
asID: 209888
IP address blocks: 178.92.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:17:a6:9c:bc:ee:35:4d:eb:54:aa:61:d7:fc:38:9f:84:02:09:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 14 14:40:42 2026 GMT
Not After : Aug 13 14:45:42 2027 GMT
Subject: CN=A90C451D81C4EB14AC22DE48BFDFB499687904EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:c9:9e:5e:ac:2b:3f:08:34:68:ee:32:d6:
72:1f:b2:03:43:5a:1f:61:32:75:48:56:11:b6:d6:
0e:a0:67:64:cb:10:75:71:e4:55:73:21:51:3a:ec:
f8:c8:ac:36:57:27:e4:b3:7e:3d:07:02:6f:ea:a0:
a3:86:16:26:8f:b3:84:3e:65:ba:22:e4:2c:44:db:
5e:e8:f2:17:10:18:6e:85:d1:e0:95:6c:a0:ac:7c:
84:54:11:2c:11:63:25:53:bc:f2:f4:4b:43:99:30:
99:27:71:b9:c4:43:00:51:3a:25:a6:2b:8c:a4:bb:
74:e6:84:59:be:41:cb:a8:41:9d:ed:dd:dd:4b:67:
d7:0a:56:1a:5e:33:cb:ea:1d:1b:b1:59:e3:83:5c:
dd:b9:4a:b3:84:78:f2:01:93:1d:78:52:d4:82:d0:
e2:e2:e5:88:57:f4:8e:2a:91:71:2c:36:82:62:f7:
65:89:e6:ed:a2:e9:95:02:ae:e3:d5:f2:f1:4b:e6:
86:a4:e7:59:5d:5d:72:bd:77:e9:12:a9:7e:fd:26:
36:54:b5:f6:3b:d0:1e:dc:de:20:ec:14:64:54:55:
29:2b:6f:b0:22:fa:7f:12:47:08:b1:16:4f:e0:fd:
71:57:1a:b5:27:b8:9d:cc:39:4d:e8:60:fd:3a:c7:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0C:45:1D:81:C4:EB:14:AC:22:DE:48:BF:DF:B4:99:68:79:04:EB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.19.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d7:48:7a:8f:46:02:2c:8f:c2:eb:bc:6b:23:36:51:2c:b7:
18:15:38:77:ee:b2:9b:07:30:61:8e:4c:03:8c:a1:76:df:44:
1a:44:97:f1:ec:8e:cc:83:95:59:b3:4c:f3:8a:95:b9:89:09:
80:f0:40:96:b1:6f:25:53:8b:00:58:eb:36:26:d1:3a:28:28:
37:37:4e:97:26:b7:32:ae:90:7d:de:09:f5:9a:72:42:c7:5b:
b3:5d:9c:6e:60:20:51:1e:7b:82:76:b2:ff:a7:bc:ba:3b:6d:
a5:05:04:bf:42:76:ca:76:6f:24:fc:ff:a3:98:59:4e:20:ce:
99:1a:95:bf:8c:6c:71:6d:f2:92:c8:22:ca:76:14:26:ea:6c:
c8:2a:5d:15:48:e7:dc:ca:a5:a3:f5:c9:3f:e6:86:a5:eb:dd:
91:a3:60:c3:38:3f:83:09:72:49:a3:d6:b8:65:1a:43:61:40:
dd:95:ca:fa:67:6a:c4:59:5a:e3:b1:e2:a7:6e:49:24:3e:2b:
a5:88:9b:16:9b:c4:3a:de:0b:3b:e4:d8:64:2e:b4:27:42:46:
0d:5c:6a:68:22:9e:b0:22:9c:fb:0a:d0:9a:6e:3a:e4:37:25:
f4:fb:eb:a8:5d:c2:a7:fb:39:86:4d:2b:a3:fd:40:eb:33:60:
4a:24:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:50:40 2026 by rpki-client