Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208711.roa
File: AS208711.roa (raw, json)
Hash identifier: fk9lh5czZ468fhJv3hJfAF6Pm8Z9OxltxYRABrGMG6c=
Subject key identifier: EF:F4:82:5A:6E:E4:F8:F3:7F:D9:F5:89:7B:B7:76:FB:CB:72:18:DF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 140073A4F7067AD61865E613ACD5A400DAC05FA1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208711.roa
Signing time: Tue 06 Oct 2026 14:49:35 +0000
ROA not before: Tue 06 Oct 2026 14:44:35 +0000
ROA not after: Tue 05 Oct 2027 14:49:35 +0000
asID: 208711
IP address blocks: 82.22.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:00:73:a4:f7:06:7a:d6:18:65:e6:13:ac:d5:a4:00:da:c0:5f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 6 14:44:35 2026 GMT
Not After : Oct 5 14:49:35 2027 GMT
Subject: CN=EFF4825A6EE4F8F37FD9F5897BB776FBCB7218DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:c8:d8:9d:c0:82:7f:1d:e8:c8:87:a5:43:
b9:44:f0:41:e7:71:02:7d:90:18:3a:f8:e7:50:54:
06:b9:f2:c0:b1:d6:3c:c6:eb:c9:6a:7a:03:75:81:
0c:da:65:6e:a5:70:93:b5:93:c1:4c:b2:89:a2:be:
9d:55:28:52:8e:75:92:38:19:21:24:0a:17:af:7e:
34:a1:e6:2f:05:2a:5b:1b:71:18:27:cc:1d:2d:4d:
dd:22:64:d3:d6:3e:c0:8f:c1:d3:55:0b:cb:5d:59:
33:3a:31:36:df:8a:11:aa:4b:5c:7d:bc:27:88:ba:
dc:ef:ea:28:1a:04:45:0c:61:59:05:5d:c3:b6:e1:
df:57:25:b9:8b:9f:52:97:26:05:68:7a:89:bf:01:
a8:e1:87:af:aa:62:9e:bd:b6:00:c7:c9:c3:36:96:
e3:c2:4b:9d:00:05:c5:85:f6:03:c2:e2:09:a4:5c:
9f:2c:3c:9c:99:58:a4:d6:be:b0:68:01:b1:3f:0e:
2d:05:46:a7:02:09:91:9e:98:b3:07:db:3b:82:8c:
97:82:0f:8f:4b:87:f3:52:d1:fd:03:8b:cd:ca:32:
b7:10:ec:5b:4f:b4:06:75:88:86:c2:fc:bb:5c:a2:
45:5a:1e:0b:97:01:1e:b9:d9:67:ff:40:07:d5:20:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F4:82:5A:6E:E4:F8:F3:7F:D9:F5:89:7B:B7:76:FB:CB:72:18:DF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.43.0/24
Signature Algorithm: sha256WithRSAEncryption
82:3f:ae:8b:fc:26:5a:c7:7e:59:d0:1a:92:79:fd:84:21:92:
ef:71:61:54:80:ed:5b:bf:cb:7b:27:1a:ba:10:ef:18:04:6e:
08:93:43:27:e7:b7:fd:65:33:f3:ab:e3:fc:55:53:56:f7:a0:
a9:7d:b1:a3:ac:4e:22:ac:c6:16:05:df:6f:24:68:e6:b2:94:
db:ba:87:71:5e:5d:1b:cb:25:c1:e0:6f:ef:af:24:fc:c4:b6:
3e:ed:3b:4a:ba:73:ec:71:ae:14:e1:3c:2e:a0:4b:a4:8d:3b:
b2:6e:6f:b8:70:86:ec:89:3c:eb:d8:c9:c5:27:dd:af:5e:c1:
45:b1:b9:35:ad:ec:71:cb:63:a8:d0:3d:d2:42:1b:2c:11:6b:
a3:79:f4:60:83:32:55:3e:d9:13:e1:54:84:33:58:3c:cf:ba:
85:a9:a5:a1:95:51:8d:ac:31:33:bd:10:fa:99:dc:54:d6:24:
5b:54:17:e3:f6:0a:d0:dd:fa:c9:5e:91:ab:1e:86:2d:16:31:
74:3d:05:8d:39:33:c4:9f:45:01:e9:fb:66:2a:0f:f5:92:b5:
03:7a:61:eb:32:e9:84:c0:f9:cf:d2:3b:b3:a1:af:4b:74:ce:
28:74:d3:94:dd:4e:60:33:44:65:ba:6b:58:d2:20:3f:d2:f9:
1b:39:15:db
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUFABzpPcGetYYZeYTrNWkANrAX6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMDYxNDQ0MzVaFw0yNzEwMDUxNDQ5MzVaMDMxMTAvBgNV
BAMTKEVGRjQ4MjVBNkVFNEY4RjM3RkQ5RjU4OTdCQjc3NkZCQ0I3MjE4REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOJsjYncCCfx3oyIelQ7lE8EHn
cQJ9kBg6+OdQVAa58sCx1jzG68lqegN1gQzaZW6lcJO1k8FMsomivp1VKFKOdZI4
GSEkChevfjSh5i8FKlsbcRgnzB0tTd0iZNPWPsCPwdNVC8tdWTM6MTbfihGqS1x9
vCeIutzv6igaBEUMYVkFXcO24d9XJbmLn1KXJgVoeom/Aajhh6+qYp69tgDHycM2
luPCS50ABcWF9gPC4gmkXJ8sPJyZWKTWvrBoAbE/Di0FRqcCCZGemLMH2zuCjJeC
D49Lh/NS0f0Di83KMrcQ7FtPtAZ1iIbC/LtcokVaHguXAR652Wf/QAfVIB1bAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU7/SCWm7k+PN/2fWJe7d2+8tyGN8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA4NzExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhYr
MA0GCSqGSIb3DQEBCwUAA4IBAQCCP66L/CZax35Z0BqSef2EIZLvcWFUgO1bv8t7
Jxq6EO8YBG4Ik0Mn57f9ZTPzq+P8VVNW96CpfbGjrE4irMYWBd9vJGjmspTbuodx
Xl0byyXB4G/vryT8xLY+7TtKunPsca4U4TwuoEukjTuybm+4cIbsiTzr2MnFJ92v
XsFFsbk1rexxy2Oo0D3SQhssEWujefRggzJVPtkT4VSEM1g8z7qFqaWhlVGNrDEz
vRD6mdxU1iRbVBfj9grQ3frJXpGrHoYtFjF0PQWNOTPEn0UB6ftmKg/1krUDemHr
MumEwPnP0juzoa9LdM4odNOU3U5gM0RlumtY0iA/0vkbORXb
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:12:52 2026 by rpki-client