Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS209192.roa
File: AS209192.roa (raw, json)
Hash identifier: f+3WYVd0kOdC/l0oCkCA8bsM/gXnZKEcG86RUDqEz40=
Subject key identifier: FC:16:D0:E2:E4:3C:75:CE:65:70:19:B1:07:5A:91:C8:6C:48:5A:75
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 6B24E1367542D7E7DE8BA53EAD7976C147995B01
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS209192.roa
Signing time: Mon 08 Sep 2025 15:23:09 +0000
ROA not before: Mon 08 Sep 2025 15:18:09 +0000
ROA not after: Mon 07 Sep 2026 15:23:09 +0000
asID: 209192
IP address blocks: 212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:24:e1:36:75:42:d7:e7:de:8b:a5:3e:ad:79:76:c1:47:99:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Sep 8 15:18:09 2025 GMT
Not After : Sep 7 15:23:09 2026 GMT
Subject: CN=FC16D0E2E43C75CE657019B1075A91C86C485A75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:80:b0:10:8f:42:dd:16:0f:fe:09:45:8b:
25:25:03:f5:d5:d6:65:7f:ae:85:15:c3:0b:3c:ec:
cf:51:1a:92:9c:e8:76:be:67:21:aa:d6:34:50:98:
7b:8a:75:4e:7d:72:0f:6b:5e:7b:8b:cc:df:8a:41:
83:ff:88:cc:c5:25:80:27:bb:de:55:6e:61:35:5d:
5b:93:4b:7b:fd:f4:b7:8b:f6:27:24:5a:7b:45:54:
83:83:4e:1b:38:d2:80:5d:bf:90:1e:9b:10:0d:47:
3a:e4:c5:f8:cc:fd:66:dd:32:d5:fe:ba:9e:22:a1:
d5:23:8b:05:a2:6b:6a:b2:e7:48:f9:0c:97:a0:94:
86:7f:00:f1:2d:02:37:e5:e2:35:85:cc:cc:f0:57:
69:d3:3a:7d:d4:cd:84:50:03:e0:34:87:1e:c7:41:
9d:b7:b8:d3:1b:b9:84:a7:59:74:25:6f:25:49:4e:
b4:3c:b9:dc:83:a4:d3:a8:71:41:40:6f:c3:43:b4:
6c:67:08:e3:17:f5:b3:22:d7:4b:4d:88:c3:f9:6e:
a6:02:f3:c0:a1:95:6d:d2:34:dd:63:32:0f:f7:f3:
31:c8:eb:0f:93:df:1b:72:a2:1c:b6:2e:79:34:6d:
31:1d:ca:bb:b0:54:3d:47:11:f3:5e:73:56:0d:98:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:16:D0:E2:E4:3C:75:CE:65:70:19:B1:07:5A:91:C8:6C:48:5A:75
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS209192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9d:7a:62:b0:5b:06:32:af:bc:68:88:45:64:85:2b:92:82:
40:aa:c6:f4:2e:29:42:b6:19:1b:47:be:cb:e2:1c:f3:c5:c8:
13:db:83:54:d9:c9:d2:24:2d:86:8a:d2:54:94:a5:d4:8b:29:
36:cb:ce:37:7e:55:58:cc:07:60:e4:6e:28:03:3b:20:a8:88:
73:d3:d9:e8:2e:11:7e:35:4c:fd:d1:8e:31:98:50:a8:ca:e4:
d9:06:91:8d:fa:b8:b1:34:f4:74:57:d2:63:b0:64:3b:14:64:
98:fa:8e:fe:66:79:ac:fc:39:ab:14:3f:2d:d4:13:8f:ee:6e:
54:26:41:37:cb:43:71:9e:67:1b:ba:38:ac:00:32:fb:2b:4b:
68:df:22:0b:21:8b:d1:d9:b1:6b:e4:a2:0a:6e:1e:46:e5:fc:
34:ad:94:3e:72:69:27:22:a1:88:30:b2:e9:a8:d5:1c:3e:18:
13:b8:86:ac:dc:42:6b:30:67:95:09:4f:80:82:9f:96:5e:18:
e8:5a:18:9f:72:1c:b6:8b:dd:d6:47:a3:da:16:11:ac:1e:27:
f0:94:5a:9a:88:83:ee:73:1c:70:47:8d:7f:f5:5b:ae:91:72:
8f:c7:52:b6:7f:e1:5d:38:b6:41:0d:20:78:46:2c:e8:cc:ed:
28:a1:8d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:44 2025 by rpki-client