Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209389.roa
File: AS209389.roa (raw, json)
Hash identifier: go1CTXCqdYnprExZlMwczo7MbjYbzjVB0T1a5TEZ/Qc=
Subject key identifier: 17:E6:BF:91:66:7D:4A:6E:C7:F0:5A:42:3F:B8:4D:02:A0:63:46:51
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1E73BEC16BBE677F1167443956385CA349B32EDE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209389.roa
Signing time: Sat 13 Jun 2026 10:35:11 +0000
ROA not before: Sat 13 Jun 2026 10:30:11 +0000
ROA not after: Sat 12 Jun 2027 10:35:11 +0000
asID: 209389
IP address blocks: 2a13:9500:192::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:73:be:c1:6b:be:67:7f:11:67:44:39:56:38:5c:a3:49:b3:2e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 13 10:30:11 2026 GMT
Not After : Jun 12 10:35:11 2027 GMT
Subject: CN=17E6BF91667D4A6EC7F05A423FB84D02A0634651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:13:df:44:80:be:28:06:72:e3:68:7f:62:
aa:b7:f4:48:6e:14:8f:a3:ef:9d:39:60:11:74:bb:
41:d8:6b:6c:f0:49:64:3c:c4:ff:5c:bb:77:ce:1a:
b4:96:d0:e7:ba:54:2f:b7:fa:ab:b4:2f:e3:0f:ed:
80:f6:d4:5c:e5:a4:ac:12:05:5a:c2:1e:98:de:6c:
d1:2c:72:c5:e9:5e:72:fd:c4:27:da:da:27:e8:c7:
81:89:c4:4b:d1:6e:6a:40:01:74:e3:be:11:ed:9c:
8f:68:c1:a5:90:c2:81:4f:35:3c:48:dd:7c:83:2b:
41:0a:10:f5:cc:95:3d:c8:70:8e:84:f5:6e:5c:aa:
7a:6d:52:34:82:f1:23:bf:80:50:2c:92:83:a7:8d:
8d:a1:e9:42:eb:e1:26:23:15:15:90:ef:97:95:f1:
f6:56:d9:8f:ca:6e:4c:98:e2:25:c7:cb:73:57:02:
ff:6f:25:d8:2e:30:d1:a6:3b:46:80:30:ed:fe:3b:
22:36:ab:3a:10:e5:c4:f4:e3:a7:36:08:4a:a8:11:
92:c0:d9:d1:ea:0a:67:bf:b9:85:09:a8:4b:48:b5:
63:6c:53:ac:12:ef:2d:b4:20:24:28:6e:8e:29:e6:
80:47:4a:7a:cc:be:55:83:c1:ea:c3:5c:c3:76:a8:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:BF:91:66:7D:4A:6E:C7:F0:5A:42:3F:B8:4D:02:A0:63:46:51
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209389.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:192::/48
Signature Algorithm: sha256WithRSAEncryption
1c:2c:85:71:2e:a6:c1:a5:ae:01:23:9c:9f:f1:9e:93:41:f9:
a7:c9:a3:15:6d:2a:07:64:63:cb:7b:61:e0:bc:7a:10:7b:a1:
4e:59:2e:e4:c0:49:f2:68:18:b5:6a:73:d1:8a:eb:2d:1f:6d:
61:b8:75:53:72:45:3c:43:ec:8c:39:07:48:85:b8:a0:46:98:
64:c5:05:67:78:0c:f4:b7:d5:4f:80:99:f3:4f:7a:7d:e3:dc:
dc:74:ec:03:b1:25:78:65:57:ca:6e:33:1c:3a:23:c8:5c:b4:
7c:9f:a6:10:4b:89:21:0d:6f:cb:0f:02:ef:9f:a2:75:e2:1f:
e2:f5:97:78:79:a7:92:64:81:f1:53:bf:b2:82:26:55:47:56:
0a:d9:69:a3:37:6c:30:da:0a:51:0d:6f:fc:a1:f5:e4:57:5b:
6c:30:df:f3:ae:f9:7a:4d:7d:62:9e:00:c2:bd:c0:a7:20:17:
2e:ce:30:cd:9f:88:5f:92:b1:ad:17:72:96:22:85:e5:ba:46:
e5:00:d7:a4:2d:f3:5a:13:80:58:1f:2a:03:40:f7:0a:da:ca:
f9:bc:c7:4e:19:1d:43:98:1d:be:94:82:f8:af:84:42:51:2e:
ee:5a:0d:08:8c:c1:37:4c:8a:c4:59:e2:a0:bf:a5:36:01:05:
b9:f9:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:54 2026 by rpki-client