Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209888.roa
File: AS209888.roa (raw, json)
Hash identifier: 4m5BjhpNJ1DvZz4CxOuzx7wMUBrUgmbq+Pz2ucKW1xs=
Subject key identifier: 6E:D6:45:3C:69:74:6F:17:F5:FE:00:0C:14:C8:26:88:FB:69:91:CB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3D41887604A6FE47EFA8CE7BBF8B9E2C6824A849
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209888.roa
Signing time: Tue 22 Sep 2026 12:50:33 +0000
ROA not before: Tue 22 Sep 2026 12:45:33 +0000
ROA not after: Tue 21 Sep 2027 12:50:33 +0000
asID: 209888
IP address blocks: 178.93.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:41:88:76:04:a6:fe:47:ef:a8:ce:7b:bf:8b:9e:2c:68:24:a8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 22 12:45:33 2026 GMT
Not After : Sep 21 12:50:33 2027 GMT
Subject: CN=6ED6453C69746F17F5FE000C14C82688FB6991CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:a2:38:01:e3:6d:79:05:d0:a2:fe:9a:a4:
74:82:5c:c4:ca:e3:9a:35:d6:c1:41:cb:10:2a:36:
6a:11:1c:2d:27:18:75:a4:28:8a:f3:3c:f6:cf:1c:
75:07:4b:16:4e:a8:d6:49:0c:61:cb:37:dd:ef:96:
a0:78:d4:86:e9:c5:96:ad:33:55:f6:af:da:d9:46:
65:c1:ac:bc:a1:a5:e2:1f:67:f0:93:79:65:6b:fb:
38:17:c4:71:47:67:c1:35:f2:63:5c:fd:67:0f:34:
cd:0e:ea:9f:c5:92:2d:85:ce:23:ba:56:eb:14:27:
0d:92:a4:01:69:da:3a:68:26:58:a6:8e:77:96:fb:
7a:08:44:a7:da:ed:61:cc:16:29:b8:aa:fe:5b:cd:
84:95:6a:66:9f:18:86:51:44:ca:53:d4:8f:95:97:
02:cf:5c:4a:81:d8:a7:da:0a:5e:d2:4f:8c:7a:d3:
cf:7f:66:e7:fd:4c:38:70:1a:c8:cb:65:e6:7d:8d:
7e:5d:93:be:b0:d4:bb:27:1e:e3:4f:be:a9:f7:b0:
5f:22:83:d2:4b:62:07:b9:50:6d:ef:a3:f7:42:cc:
a9:14:d4:97:0a:0e:8c:17:86:6a:35:6f:3e:c5:e8:
c5:df:c7:59:5c:fe:95:74:fd:7b:34:d7:d6:92:5f:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D6:45:3C:69:74:6F:17:F5:FE:00:0C:14:C8:26:88:FB:69:91:CB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8e:d3:16:09:e4:69:98:ec:a6:0b:04:0f:f5:d4:31:e5:e1:
7f:1a:10:9a:bd:da:a4:00:cd:1d:a2:80:77:f8:f0:fd:ae:08:
88:c3:ee:36:c0:f9:70:1f:a5:b4:0c:49:04:a1:87:40:f3:f5:
ca:f3:04:40:69:c8:a8:1f:a5:90:63:9e:1f:f9:18:7e:c8:fb:
b8:b4:ab:ec:0c:d3:9b:17:13:48:34:53:d8:8d:60:82:c2:38:
5e:92:5e:b9:26:69:bc:6d:0d:25:61:62:26:c0:07:33:60:05:
ff:27:59:a6:c3:89:a5:90:e1:a0:1e:28:86:a9:60:f6:68:a9:
74:fb:f3:a4:52:ec:c9:67:b1:30:b6:36:a0:2f:67:dd:09:e8:
2b:a9:e4:b2:ba:32:34:68:3b:26:2b:8b:75:2f:e3:47:a9:9d:
85:3b:f0:e3:fd:64:bd:c8:e0:13:3c:e6:8d:c1:42:4a:87:f3:
4d:1b:af:98:c8:00:8e:46:cb:7f:ec:a6:8f:e5:ec:06:9e:19:
1c:da:d0:36:14:3b:a1:a6:a9:1b:3a:4a:74:65:5c:85:52:c2:
ff:f4:32:59:42:ef:6d:1d:ca:19:32:5c:fb:6b:c4:1f:37:4f:
11:a3:c5:19:67:66:12:5e:4b:39:87:68:5f:af:a8:de:08:6f:
da:71:e8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:47:24 2026 by rpki-client