Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209630.roa
File: AS209630.roa (raw, json)
Hash identifier: 7rBQgBebkNEu1h9gdRvfrCr7mAW3k3SkVTCJWuDNlTo=
Subject key identifier: 2E:F3:77:25:1D:21:F6:C1:3D:26:4B:5B:78:F6:88:50:B2:8A:48:AA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 25DEFC6786EE959237FDA4A517086E1291003B99
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209630.roa
Signing time: Wed 22 Apr 2026 19:23:10 +0000
ROA not before: Wed 22 Apr 2026 19:18:10 +0000
ROA not after: Wed 21 Apr 2027 19:23:10 +0000
asID: 209630
IP address blocks: 141.11.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:de:fc:67:86:ee:95:92:37:fd:a4:a5:17:08:6e:12:91:00:3b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 22 19:18:10 2026 GMT
Not After : Apr 21 19:23:10 2027 GMT
Subject: CN=2EF377251D21F6C13D264B5B78F68850B28A48AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:f9:06:ec:6a:a7:06:d9:7b:a7:05:1c:c3:
60:eb:34:89:61:ea:23:f3:c3:6c:fb:86:0f:5e:10:
d2:87:84:57:c7:8a:33:41:d0:4c:6b:9f:7d:b7:d0:
9e:b4:3e:98:07:16:78:cf:e9:77:1b:8b:51:37:0b:
7b:d2:56:ab:06:b1:fb:62:7e:a8:94:91:b2:0c:42:
13:73:b5:c9:f0:a9:30:53:7b:7e:07:50:be:e3:8e:
6e:e2:cb:f4:1f:0f:fb:44:90:b0:a7:f8:e8:15:b0:
fe:b3:34:27:1c:8d:5f:d6:55:67:b4:0c:0a:18:a3:
ca:15:cd:f6:5c:47:bb:46:c6:89:60:43:5a:fb:d1:
ea:64:a6:7a:1d:62:a1:69:79:9f:4b:bc:78:ef:c3:
57:b3:5a:85:5a:55:31:b7:85:68:22:18:72:6a:13:
06:52:27:dc:16:89:8b:91:48:de:5b:83:e1:e6:17:
7d:95:fe:96:94:12:82:5b:7e:43:95:6a:e3:ad:64:
e0:91:2b:24:fc:36:06:9d:bf:0b:26:6f:ee:80:e5:
3d:ac:a0:76:51:bf:16:2d:e5:0f:7f:cc:07:0b:24:
a0:11:45:78:22:50:41:a1:34:89:cb:16:66:7c:f8:
7e:a9:13:cf:1f:a2:69:c2:ee:b1:bb:a2:6f:2a:de:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F3:77:25:1D:21:F6:C1:3D:26:4B:5B:78:F6:88:50:B2:8A:48:AA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b9:6a:26:22:d2:97:6c:b4:a4:1b:56:9c:d6:03:b4:b3:fd:
05:9e:12:49:fc:3c:c0:06:b2:7f:a2:3b:6e:f1:37:40:2d:d6:
4a:8d:71:0b:50:46:c8:88:aa:eb:e9:f9:f2:17:66:a2:eb:da:
54:73:43:ba:d3:41:fb:d6:22:67:27:61:35:6f:ea:d4:6c:cc:
e0:d6:7e:0a:62:1d:c8:0d:4a:a4:72:13:81:3b:fd:84:5d:4c:
32:9f:a0:05:55:f6:09:fd:af:4f:49:59:93:1a:45:2e:0a:2b:
01:ab:0f:42:0f:c9:c2:91:6a:df:6a:3d:28:bd:86:2c:df:11:
1d:9b:ed:3c:44:54:f6:e7:22:4f:d5:cb:63:ea:d5:2d:d1:b0:
81:72:28:bc:dc:11:d7:8e:c8:ac:b8:ec:09:19:a5:00:0c:b2:
1e:18:d4:86:e3:07:9b:fd:28:70:b1:4d:fc:0d:b9:bd:67:e8:
69:01:2f:fa:a9:d0:6d:e7:66:49:71:1e:95:a2:d8:1d:62:83:
40:1b:c3:22:b4:09:b2:fb:62:cf:db:13:a3:40:9a:91:ea:20:
af:d5:d1:bc:62:e7:c6:f0:ba:13:9e:74:80:b6:00:e8:92:73:
b1:d8:04:2d:93:d8:f4:ab:b5:a1:b0:c2:60:b7:8e:6e:e2:de:
2b:22:4a:c5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUJd78Z4bulZI3/aSlFwhuEpEAO5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA0MjIxOTE4MTBaFw0yNzA0MjExOTIzMTBaMDMxMTAvBgNV
BAMTKDJFRjM3NzI1MUQyMUY2QzEzRDI2NEI1Qjc4RjY4ODUwQjI4QTQ4QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVkPkG7GqnBtl7pwUcw2DrNIlh
6iPzw2z7hg9eENKHhFfHijNB0Exrn3230J60PpgHFnjP6Xcbi1E3C3vSVqsGsfti
fqiUkbIMQhNztcnwqTBTe34HUL7jjm7iy/QfD/tEkLCn+OgVsP6zNCccjV/WVWe0
DAoYo8oVzfZcR7tGxolgQ1r70epkpnodYqFpeZ9LvHjvw1ezWoVaVTG3hWgiGHJq
EwZSJ9wWiYuRSN5bg+HmF32V/paUEoJbfkOVauOtZOCRKyT8Ngadvwsmb+6A5T2s
oHZRvxYt5Q9/zAcLJKARRXgiUEGhNInLFmZ8+H6pE88fomnC7rG7om8q3sbnAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQULvN3JR0h9sE9JktbePaIULKKSKowHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA5NjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQv2
MA0GCSqGSIb3DQEBCwUAA4IBAQBvuWomItKXbLSkG1ac1gO0s/0FnhJJ/DzABrJ/
ojtu8TdALdZKjXELUEbIiKrr6fnyF2ai69pUc0O600H71iJnJ2E1b+rUbMzg1n4K
Yh3IDUqkchOBO/2EXUwyn6AFVfYJ/a9PSVmTGkUuCisBqw9CD8nCkWrfaj0ovYYs
3xEdm+08RFT25yJP1ctj6tUt0bCBcii83BHXjsisuOwJGaUADLIeGNSG4web/Shw
sU38Dbm9Z+hpAS/6qdBt52ZJcR6VotgdYoNAG8MitAmy+2LP2xOjQJqR6iCv1dG8
YufG8LoTnnSAtgDoknOx2AQtk9j0q7WhsMJgt45u4t4rIkrF
-----END CERTIFICATE-----
Generated at Wed May 13 04:42:40 2026 by rpki-client