Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208271.roa
File: AS208271.roa (raw, json)
Hash identifier: IUMY6+QZ6uxF8rE3o0JVpOiNsaJqO0n6BUzRGyNQiQ0=
Subject key identifier: FE:1B:74:2A:99:75:F8:5A:07:ED:73:3A:DF:97:63:3A:15:B0:BF:14
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 14DBAD9BFEA2C54C1FAF8AE94BB59A2081304FBA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208271.roa
Signing time: Thu 15 Oct 2026 09:37:36 +0000
ROA not before: Thu 15 Oct 2026 09:32:36 +0000
ROA not after: Thu 14 Oct 2027 09:37:36 +0000
asID: 208271
IP address blocks: 82.27.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:db:ad:9b:fe:a2:c5:4c:1f:af:8a:e9:4b:b5:9a:20:81:30:4f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 15 09:32:36 2026 GMT
Not After : Oct 14 09:37:36 2027 GMT
Subject: CN=FE1B742A9975F85A07ED733ADF97633A15B0BF14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:36:d8:2e:de:23:8e:22:79:55:e6:41:80:
b5:cc:33:59:41:b3:91:f7:1a:2f:91:cf:09:e2:58:
55:df:ee:97:4b:1f:76:08:a1:c2:10:8f:47:ac:13:
e0:99:82:72:fe:ce:1f:34:55:18:95:7c:1e:d6:ec:
20:68:57:34:be:33:7a:74:f3:4c:2e:cc:1a:59:9a:
1d:13:43:e1:1b:96:a9:57:f4:25:f4:cc:cf:d2:e5:
c2:1c:52:26:03:a8:3f:e4:c9:cb:e5:9a:51:c6:c0:
ba:98:e0:0b:ba:e4:7d:f9:f3:a8:01:c4:d1:94:48:
00:7b:0c:33:b6:49:f9:45:28:0a:f8:a4:5d:6d:37:
2d:dd:e5:66:31:93:b0:00:d0:b4:24:15:83:28:55:
24:8b:b0:92:b4:8b:4c:f9:06:81:3a:1a:da:c4:82:
62:ab:2a:0b:79:12:3b:16:7a:81:d8:f2:a1:4b:da:
76:67:63:81:cb:5a:ff:48:eb:8e:96:82:6d:ad:d0:
1a:b7:fb:d7:f0:30:d2:50:b4:dc:f6:bc:dc:4e:d1:
d2:68:2b:88:b4:cb:88:34:7c:b0:ec:b8:8e:49:61:
f4:44:0a:77:27:a0:6f:d9:fa:7d:8b:a9:f9:9e:be:
d6:1d:25:05:17:c1:d1:d7:47:b7:2d:41:db:67:bf:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1B:74:2A:99:75:F8:5A:07:ED:73:3A:DF:97:63:3A:15:B0:BF:14
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208271.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:80:72:dd:d0:49:32:a0:97:29:3b:02:7b:70:bf:da:9a:7f:
3f:e4:74:45:c6:7e:b5:dd:fd:3b:99:ff:3a:64:7a:2f:6d:78:
2b:b9:d3:db:6f:da:4f:e4:8f:da:5a:3c:c4:3c:f1:d5:00:81:
5b:63:6f:3e:61:5c:8f:85:f4:e6:f5:fc:e2:e7:9b:89:80:52:
ac:26:61:02:db:e6:31:7c:24:28:de:67:d3:58:d5:fe:7c:b4:
f3:a1:22:c0:38:49:12:f8:23:b1:30:f9:f1:82:61:47:8a:75:
27:93:c6:70:f3:1d:37:fb:58:37:02:fe:28:a1:97:b1:b8:a9:
a0:ec:f5:3a:ca:15:0a:75:d4:1c:c6:b0:11:2f:58:b6:2b:94:
ac:83:ea:b7:ac:0d:d6:f5:a4:51:91:59:18:9f:56:f5:61:8a:
63:74:9a:af:79:58:4c:4e:53:9c:fb:46:df:96:10:d4:9e:37:
ce:a2:07:21:4c:f6:0d:d2:37:90:17:86:ef:38:18:54:bf:4a:
79:ce:69:62:b4:0a:1a:2e:bc:02:8d:84:35:71:8b:34:75:2a:
12:73:ce:d0:9a:63:3c:3b:ac:4d:93:4f:93:9d:bd:60:22:e6:
6b:d4:11:b7:5c:1a:53:a3:b3:4f:24:2f:59:82:3e:f9:04:7d:
d0:b9:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:13:11 2026 by rpki-client