Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209630.roa
File: AS209630.roa (raw, json)
Hash identifier: daEu078vge5SMBMRoHG23s3Eyljrp8P+Yy9Cj+uC1rI=
Subject key identifier: 70:B4:DE:CA:6F:41:56:F1:BA:26:AC:EF:21:4F:76:E9:CA:51:34:1B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 60ACF6444F1BE2D5B3417EA9B6EA9392BDCA883E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209630.roa
Signing time: Sat 21 Mar 2026 13:17:02 +0000
ROA not before: Sat 21 Mar 2026 13:12:02 +0000
ROA not after: Sat 20 Mar 2027 13:17:02 +0000
asID: 209630
IP address blocks: 141.11.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ac:f6:44:4f:1b:e2:d5:b3:41:7e:a9:b6:ea:93:92:bd:ca:88:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 21 13:12:02 2026 GMT
Not After : Mar 20 13:17:02 2027 GMT
Subject: CN=70B4DECA6F4156F1BA26ACEF214F76E9CA51341B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:3a:ae:f3:db:cf:28:2e:a1:64:ff:6f:b5:
d5:d2:da:06:cc:a6:b8:13:11:f7:f0:86:09:5a:0d:
17:48:bf:90:c8:d7:8e:9d:e6:01:0d:d6:e3:a4:cd:
75:a6:f4:bf:85:2a:37:77:30:97:ae:b9:1a:7f:d0:
d7:0f:a0:e4:64:71:22:75:ec:89:23:61:93:7c:65:
a3:93:18:c6:63:92:c6:65:e1:10:eb:a4:d1:5b:25:
43:9e:1b:d6:93:c4:ff:0b:4e:19:12:b9:49:0c:99:
8f:aa:37:6f:7f:9b:5d:b4:77:6a:d1:96:59:bb:4c:
f2:a9:91:ad:46:ef:7d:19:bb:86:ae:8b:df:0e:d2:
a7:d7:1b:05:f0:fa:6e:0d:16:e6:83:82:47:c2:be:
b8:6d:66:50:ae:39:87:85:b4:36:1f:88:b5:6f:1d:
e1:37:b8:52:04:3d:e5:a6:6b:47:0d:95:db:e4:74:
de:d6:43:5e:1b:64:45:b5:44:bc:42:2b:74:22:4f:
72:13:b0:0f:1b:a9:77:07:d9:b2:f0:0e:32:97:db:
fc:2e:05:29:7c:7e:c3:58:f8:37:5a:fb:a0:71:88:
e9:34:85:9d:3b:19:4c:04:ab:3c:23:fe:fa:32:8e:
40:24:a8:45:31:da:15:ee:23:64:a3:c3:b7:2d:4b:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B4:DE:CA:6F:41:56:F1:BA:26:AC:EF:21:4F:76:E9:CA:51:34:1B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.246.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:b9:0a:46:63:9f:f5:06:b4:5a:5e:1c:35:30:e5:9b:4c:f7:
26:0c:f2:f1:1c:27:eb:8c:02:01:5a:29:22:60:9b:17:d2:a9:
4d:d9:ff:4a:44:4b:ab:af:a8:3e:ad:b5:11:6f:dc:df:12:69:
bc:00:e5:93:87:ac:11:c6:6a:53:2f:9e:76:52:7e:60:a7:1a:
ab:05:e5:f1:72:6b:fa:bb:a4:18:5d:fe:a2:14:47:1b:37:aa:
d4:69:38:25:af:a2:9a:ed:83:57:94:f9:be:d1:53:a6:9b:35:
1b:81:17:cd:4f:53:16:d3:a4:18:73:ac:41:21:d8:a9:1d:22:
04:af:2a:0c:b0:88:f3:fb:59:ad:3d:31:3b:b7:f0:27:c9:f4:
70:9a:b4:f8:50:97:9b:6e:c1:8f:ec:6d:3c:22:78:83:a2:4e:
99:03:62:74:6b:7a:59:97:f3:e6:07:dc:63:40:18:0e:f9:c3:
0b:15:6f:5a:67:d6:f9:60:96:ea:f0:2d:79:30:32:28:b6:31:
c2:7a:86:e6:77:03:53:31:d2:cf:94:8f:77:9c:13:58:99:9b:
e4:35:71:50:16:21:e9:82:c2:4e:dd:92:aa:ca:a2:e4:b5:27:
d4:13:f6:c3:62:37:7e:27:70:fe:a5:eb:54:ec:0f:55:d8:a3:
c8:4d:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:44 2026 by rpki-client