Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209181.roa
File: AS209181.roa (raw, json)
Hash identifier: gbMgde0BuJQ4dwCz1NQKS8AGiYiKH6QYn39PJECwMh0=
Subject key identifier: F4:FE:7F:2D:90:F8:AE:08:F9:AC:8D:07:A0:99:FE:F7:CF:18:6E:BE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5E84C69D52AAB2D88FE9C6DF7C4F2D8883A890D5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209181.roa
Signing time: Tue 10 Nov 2026 21:24:19 +0000
ROA not before: Tue 10 Nov 2026 21:19:19 +0000
ROA not after: Tue 09 Nov 2027 21:24:19 +0000
asID: 209181
IP address blocks: 178.94.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:84:c6:9d:52:aa:b2:d8:8f:e9:c6:df:7c:4f:2d:88:83:a8:90:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 10 21:19:19 2026 GMT
Not After : Nov 9 21:24:19 2027 GMT
Subject: CN=F4FE7F2D90F8AE08F9AC8D07A099FEF7CF186EBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:12:89:ca:47:b6:57:42:b2:7b:7e:2e:65:
67:9e:5f:5f:11:f3:70:86:20:da:a3:74:91:98:b0:
83:97:67:61:af:3e:34:7e:82:69:80:ae:b6:28:7a:
69:a5:71:bc:fa:5c:84:f0:a1:07:e1:bf:8f:67:a3:
52:bf:43:88:01:77:d6:31:a3:0d:be:c4:54:02:46:
52:01:f6:c0:77:4d:28:0c:07:ec:67:5d:92:a6:af:
1c:94:f2:86:50:a7:d3:b1:42:82:4d:19:0d:f6:b5:
53:04:15:7b:f1:d9:1b:59:37:24:5d:48:7d:80:ed:
59:4b:98:27:08:c3:2d:b3:f8:2a:f7:d1:65:d2:fb:
62:de:9f:f3:16:e7:7c:bc:0e:2d:b3:15:f6:25:cb:
79:1e:86:35:f7:72:a4:49:2d:9b:22:2d:50:03:8e:
11:cd:71:f1:27:fe:f3:7f:d3:fb:8f:39:8e:1d:86:
31:13:8a:bf:49:ef:64:39:11:72:12:0f:28:0c:b7:
93:62:49:22:c8:1f:23:b7:4b:43:37:6b:d9:1c:e2:
62:03:aa:18:47:1c:2f:05:61:54:1b:5f:55:71:7d:
01:4e:4f:f4:5d:1c:9b:28:86:b3:25:cd:24:ae:0b:
63:45:70:af:4a:90:36:b8:4d:b7:7a:f3:b9:e9:79:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FE:7F:2D:90:F8:AE:08:F9:AC:8D:07:A0:99:FE:F7:CF:18:6E:BE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0a:83:2e:38:9c:2c:e4:3c:1d:07:fe:0b:57:f4:0b:1f:c5:
3b:87:80:a8:28:82:47:e3:ec:93:a5:ca:94:63:b7:8e:ce:8f:
b3:ce:f4:73:15:30:90:2b:d9:c2:63:86:2c:05:01:37:0e:d8:
6d:c1:78:82:84:97:9a:6c:9e:37:75:1a:4f:ba:0d:6c:ba:33:
5a:fc:4f:ce:a9:55:06:12:74:bf:c2:2c:e8:91:cb:15:88:4e:
57:6a:88:a6:c7:fb:dd:2a:bf:3f:39:91:23:49:6f:eb:49:bb:
3f:2c:66:37:59:a8:b0:06:62:59:68:c8:a6:ba:b4:ca:98:17:
53:26:6f:c5:bc:c9:37:f8:15:cd:27:dc:b3:37:61:d6:17:15:
2a:24:a5:13:50:0e:06:68:f9:b2:bc:70:69:79:7e:70:6a:4f:
82:35:f3:89:52:61:6e:57:62:3e:8e:f3:54:f1:47:a6:a5:f7:
64:88:00:28:35:c0:9f:51:30:96:0e:d7:4b:81:17:6a:61:b1:
bd:cc:39:19:08:b4:e7:1f:fb:9d:f4:a9:51:00:a7:ed:4f:69:
43:d5:9b:08:bb:73:1c:5c:b0:a0:30:81:0f:4b:21:39:d1:28:
e8:95:f7:e9:d3:2e:35:49:94:df:68:c2:fa:58:b4:44:35:d3:
8f:0c:4e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:54:18 2026 by rpki-client