Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209988.roa
File: AS209988.roa (raw, json)
Hash identifier: qqBPFNyxWmpOoJzO5j8Unh+PAE3s6RcP0PRicAGmQQQ=
Subject key identifier: 8F:AF:5D:DF:11:18:50:89:BB:7C:8C:BC:AC:4E:B6:F8:14:18:77:C4
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 15C64952B9A58DC2923F3B7B0283B320BF851589
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209988.roa
Signing time: Tue 23 Jun 2026 00:47:48 +0000
ROA not before: Tue 23 Jun 2026 00:42:48 +0000
ROA not after: Tue 22 Jun 2027 00:47:48 +0000
asID: 209988
IP address blocks: 141.11.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c6:49:52:b9:a5:8d:c2:92:3f:3b:7b:02:83:b3:20:bf:85:15:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 23 00:42:48 2026 GMT
Not After : Jun 22 00:47:48 2027 GMT
Subject: CN=8FAF5DDF11185089BB7C8CBCAC4EB6F8141877C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:6b:c6:28:e0:26:8d:48:80:0c:91:31:16:
3b:16:90:ec:d9:3e:1b:00:93:14:af:f5:2b:f0:8e:
9f:7a:2f:c4:b2:9a:72:77:e8:b9:1a:eb:77:70:2e:
25:4c:b8:3b:bf:4f:92:91:a6:22:30:02:f9:ce:b9:
aa:3b:6a:81:dd:60:93:f4:1c:66:28:53:e0:9d:9b:
7f:10:60:dc:5d:d2:ea:32:3a:b9:67:66:ba:48:1f:
8f:61:ea:c8:5f:84:1f:31:31:6a:d5:c9:37:e3:e1:
1d:58:e4:c2:a7:b4:e2:a2:25:b2:a2:0d:06:5c:5b:
a2:f9:70:0b:66:6d:49:4c:18:35:77:70:59:17:30:
19:31:b6:91:c4:71:33:32:85:09:5d:19:0a:19:08:
7a:9e:8f:8a:06:64:bf:0b:a2:1a:5e:ea:25:20:d1:
56:0d:4b:da:78:94:a3:ee:df:f6:07:eb:72:a0:96:
60:4a:17:4c:c5:71:9a:22:c7:ca:4b:3e:d0:4d:98:
e1:cb:9b:5c:f7:d7:c6:44:d9:98:72:a6:1a:ad:d5:
06:26:b4:89:54:4d:b3:f9:4b:da:22:2f:25:78:13:
55:57:b4:85:c2:e0:f7:1b:09:45:66:9a:5d:cf:2b:
40:8b:be:a1:d6:95:3e:54:f7:c5:5f:74:7e:e9:6d:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:5D:DF:11:18:50:89:BB:7C:8C:BC:AC:4E:B6:F8:14:18:77:C4
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209988.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.238.0/23
Signature Algorithm: sha256WithRSAEncryption
94:98:f0:b4:61:ba:02:07:60:41:f8:d7:2d:db:17:2a:ef:00:
48:94:97:40:06:f7:4a:a2:25:21:e5:33:ac:1d:fc:30:34:64:
df:d7:3a:cf:b1:a4:6a:f3:2e:d3:ed:d0:f9:e3:cc:07:28:60:
56:d9:db:04:aa:57:64:ae:6a:04:f5:22:3a:64:d6:a8:a3:39:
a7:cf:81:7a:43:b0:a0:03:e4:14:24:30:5f:55:fc:b0:bc:d3:
e4:e6:63:9c:d2:75:0b:52:09:44:ee:66:f6:27:1b:2b:0c:2a:
13:15:33:0c:c2:07:0c:fc:4a:b7:75:54:80:51:05:cf:96:20:
00:a8:34:c5:50:11:f9:82:99:33:5a:11:c5:01:a9:29:b5:af:
23:1f:c9:8d:59:ad:18:3e:53:37:76:d2:97:2d:cd:e8:6f:0b:
64:3e:a0:2d:cc:11:54:61:49:c2:02:12:0f:30:f3:f7:98:ed:
d6:d4:69:a8:50:6d:4c:8c:1b:13:ff:f9:90:55:0c:43:dc:d9:
de:1c:96:5c:d7:10:fc:7b:f3:3c:c0:6a:23:1e:e9:eb:12:24:
15:62:0d:ee:4a:47:9d:62:b0:dc:7b:fd:2e:94:75:4d:30:4e:
96:58:f8:cb:56:75:d7:dc:2c:1f:34:52:a2:5f:72:50:73:6b:
e0:30:a4:12
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUFcZJUrmljcKSPzt7AoOzIL+FFYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA2MjMwMDQyNDhaFw0yNzA2MjIwMDQ3NDhaMDMxMTAvBgNV
BAMTKDhGQUY1RERGMTExODUwODlCQjdDOENCQ0FDNEVCNkY4MTQxODc3QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoB2vGKOAmjUiADJExFjsWkOzZ
PhsAkxSv9Svwjp96L8SymnJ36Lka63dwLiVMuDu/T5KRpiIwAvnOuao7aoHdYJP0
HGYoU+Cdm38QYNxd0uoyOrlnZrpIH49h6shfhB8xMWrVyTfj4R1Y5MKntOKiJbKi
DQZcW6L5cAtmbUlMGDV3cFkXMBkxtpHEcTMyhQldGQoZCHqej4oGZL8Lohpe6iUg
0VYNS9p4lKPu3/YH63KglmBKF0zFcZoix8pLPtBNmOHLm1z318ZE2Zhyphqt1QYm
tIlUTbP5S9oiLyV4E1VXtIXC4PcbCUVmml3PK0CLvqHWlT5U98VfdH7pbdRjAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUj69d3xEYUIm7fIy8rE62+BQYd8QwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA5OTg4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjQvu
MA0GCSqGSIb3DQEBCwUAA4IBAQCUmPC0YboCB2BB+Nct2xcq7wBIlJdABvdKoiUh
5TOsHfwwNGTf1zrPsaRq8y7T7dD548wHKGBW2dsEqldkrmoE9SI6ZNaoozmnz4F6
Q7CgA+QUJDBfVfywvNPk5mOc0nULUglE7mb2JxsrDCoTFTMMwgcM/Eq3dVSAUQXP
liAAqDTFUBH5gpkzWhHFAakpta8jH8mNWa0YPlM3dtKXLc3obwtkPqAtzBFUYUnC
AhIPMPP3mO3W1GmoUG1MjBsT//mQVQxD3NneHJZc1xD8e/M8wGojHunrEiQVYg3u
SkedYrDce/0ulHVNME6WWPjLVnXX3CwfNFKiX3JQc2vgMKQS
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:09:20 2026 by rpki-client