Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209181.roa
File: AS209181.roa (raw, json)
Hash identifier: eIJzpsz/QP8xxCYhY9wkCdaEQUJ+GRE8UMVZ3+faYAA=
Subject key identifier: 0D:D9:31:DB:94:5B:5F:E5:B5:B6:EB:15:69:79:C7:49:01:EA:FD:21
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 567665F5B8E44F847E79A7DDD53CED1E3D76B29B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209181.roa
Signing time: Tue 30 Sep 2025 15:55:07 +0000
ROA not before: Tue 30 Sep 2025 15:50:07 +0000
ROA not after: Tue 29 Sep 2026 15:55:07 +0000
asID: 209181
IP address blocks: 141.11.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:76:65:f5:b8:e4:4f:84:7e:79:a7:dd:d5:3c:ed:1e:3d:76:b2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 30 15:50:07 2025 GMT
Not After : Sep 29 15:55:07 2026 GMT
Subject: CN=0DD931DB945B5FE5B5B6EB156979C74901EAFD21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:3a:f3:eb:31:c7:47:8b:c8:15:2d:65:59:
96:bb:22:12:6c:31:9c:c5:fe:f3:d3:9c:b4:bd:c1:
d0:68:c7:a3:6f:6e:d1:57:ae:f1:06:60:ba:fe:1a:
ab:6b:e7:9b:f9:c5:3b:e8:f9:a2:c2:1b:40:8f:a4:
1c:d1:a9:dd:61:86:0a:ff:f0:f8:23:6c:7f:a1:8c:
00:e3:6a:67:59:6d:0d:74:e5:08:fd:ba:52:aa:b3:
96:93:ce:13:c6:f6:f2:95:47:95:ae:71:ef:48:c9:
ab:75:71:f4:8c:c9:9b:60:bd:7e:d0:41:c5:8b:91:
9a:4d:9f:5b:b5:f2:6e:cb:9c:08:a5:e5:07:e2:e2:
03:35:7e:e7:0e:37:18:24:e6:e6:c2:eb:82:8a:6f:
d9:e1:48:b9:78:4e:fa:92:52:4f:5e:d6:2c:1a:b1:
d5:b6:a6:9e:37:cf:cc:0f:b2:61:2c:8e:0c:8f:63:
a8:20:a6:57:99:b3:45:1f:5c:95:02:6b:33:19:44:
f6:4e:ee:34:14:31:64:f1:ec:f0:c2:5f:c1:c3:81:
71:ef:de:c4:85:5b:cc:12:1f:d7:a0:65:71:a6:c1:
ce:73:bf:b9:37:ba:d0:4f:7d:39:06:4f:90:c5:f0:
e5:53:e4:64:31:96:0c:f0:8b:05:26:7e:77:31:cb:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D9:31:DB:94:5B:5F:E5:B5:B6:EB:15:69:79:C7:49:01:EA:FD:21
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.41.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1a:e0:1c:83:07:67:3f:0a:ea:89:2a:92:12:4e:de:5c:e7:
b4:24:56:f4:86:87:56:62:9b:67:bb:d4:63:50:dd:9e:04:21:
64:e8:db:c8:24:e9:9c:b4:77:1f:99:ac:0f:ac:f1:9d:52:de:
78:d6:bf:f3:00:7a:b7:c6:46:db:d1:7e:da:dd:58:5b:84:5c:
ba:51:70:de:db:d4:8a:ce:b9:6f:84:e1:e8:04:59:b8:7e:12:
b5:ee:aa:3c:f2:00:60:49:b0:1a:88:c7:32:80:9a:66:b7:b9:
4b:f0:85:85:d9:a9:d3:82:bc:6d:b2:b5:13:23:9f:c4:72:c9:
71:08:c6:94:bf:d7:10:7d:74:dc:8a:2e:98:50:3c:59:36:4e:
cb:bc:32:36:f4:5e:ab:c9:49:55:33:ca:94:b2:db:ce:dd:57:
7a:46:08:32:ab:b0:76:f3:a5:d2:78:21:8b:30:d0:f5:51:25:
59:5e:0f:1e:15:50:8d:69:85:05:b9:31:c2:52:fd:8d:b1:41:
68:c2:87:dc:6c:8b:3b:73:bc:11:3e:35:72:fa:d4:13:f6:4b:
5c:14:ea:d1:4d:35:86:84:fe:fe:86:9f:23:da:88:d6:43:a3:
04:f9:f8:8f:9f:60:76:8f:34:f9:0a:02:8f:05:12:ca:39:06:
b1:d8:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:24 2025 by rpki-client