Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208483.roa
File: AS208483.roa (raw, json)
Hash identifier: v/sDq06c/fQbSSioKrbGYGy2eg8zK0+JctfnRlYccHw=
Subject key identifier: 41:DC:29:BC:A7:D7:A2:5B:E8:9D:1D:38:32:0F:4A:FA:1D:B0:B1:C3
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2591DD7776BED27918894720C1BA02205CA09216
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208483.roa
Signing time: Sun 13 Jul 2025 11:11:57 +0000
ROA not before: Sun 13 Jul 2025 11:06:57 +0000
ROA not after: Sun 12 Jul 2026 11:11:57 +0000
asID: 208483
IP address blocks: 143.20.20.0/24 maxlen: 24
143.20.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 11:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:91:dd:77:76:be:d2:79:18:89:47:20:c1:ba:02:20:5c:a0:92:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 13 11:06:57 2025 GMT
Not After : Jul 12 11:11:57 2026 GMT
Subject: CN=41DC29BCA7D7A25BE89D1D38320F4AFA1DB0B1C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ce:f4:3d:18:ba:7d:57:41:ef:b8:bb:76:8d:
2f:a4:61:a5:98:ac:3a:fd:20:56:19:09:3a:33:73:
4c:40:52:d1:ad:35:7d:b5:83:a8:7b:55:bd:d2:91:
7f:36:03:ed:24:a7:7d:7b:92:f3:72:20:ca:12:b2:
95:43:80:66:09:47:30:45:0c:4a:6f:5e:db:79:2d:
bd:da:b6:d1:0c:98:28:ee:0e:d6:77:c0:67:6b:14:
1e:7c:fd:09:c3:91:41:8f:36:30:af:23:85:c6:78:
d0:4c:ce:c4:21:eb:89:e2:c2:b6:93:ce:e2:6b:57:
d1:39:16:b7:b4:7e:2e:55:d9:ca:53:24:38:6d:6e:
da:a7:87:fa:c3:29:13:97:ad:4e:97:75:5e:65:b4:
ef:ef:7c:88:61:65:f9:b6:ba:fc:8c:6c:8e:78:ca:
f3:90:70:ae:41:49:e4:bb:01:67:d8:12:bd:e1:9b:
8f:cc:aa:37:5e:c5:c5:02:bc:20:22:7a:ef:9c:fa:
ef:be:63:2c:21:09:78:75:54:26:d7:ac:b0:ec:29:
32:29:35:b7:10:c3:36:f0:6c:60:c1:b4:bf:a4:9b:
59:6c:65:de:9b:9c:e2:23:d6:46:2c:20:82:11:9f:
ee:af:fe:d8:96:28:b5:d4:90:5f:fe:a2:c8:2b:14:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DC:29:BC:A7:D7:A2:5B:E8:9D:1D:38:32:0F:4A:FA:1D:B0:B1:C3
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.20.0/24
143.20.222.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:30:3e:73:2b:d8:1a:87:55:89:61:c6:6f:64:7b:c1:65:c7:
26:34:00:18:b5:a2:93:b2:1d:da:68:10:d4:2d:ca:9f:8a:98:
38:19:2b:0b:29:a2:f0:35:77:2d:3a:d4:7b:be:02:ef:4f:2a:
ba:97:8e:2d:b2:e7:fd:1f:7d:f5:5a:19:f4:ab:57:d7:90:c0:
60:8e:3c:34:8b:a6:d1:e8:05:9f:cf:ec:e5:04:d4:96:8f:38:
22:f6:b8:62:c8:0c:0c:10:a6:39:e2:06:5c:32:19:a5:a9:34:
e9:fa:30:b2:3d:a7:cc:c0:b8:0c:ce:d7:a1:de:91:ae:17:60:
b1:48:14:06:a2:e8:d6:ba:cd:11:8e:99:b6:b6:4d:b3:de:35:
57:52:5a:61:fc:e0:24:67:3a:b3:4c:f7:b9:6a:66:0e:c8:cb:
e9:4b:3b:2e:95:bf:0b:08:99:d3:d5:c8:6a:ef:0d:04:bf:a9:
64:e0:6c:44:2b:39:5c:28:50:13:4a:75:d3:a0:a1:ce:2f:be:
71:13:33:c5:f1:29:8d:00:9e:9d:e8:80:27:72:c5:25:41:c1:
82:df:0c:9e:9a:e2:c1:5f:b9:00:73:c8:1b:0b:eb:68:4d:ae:
67:d0:8c:04:c1:9b:1b:7d:c6:32:e9:9b:ac:a5:d9:a8:f0:98:
c0:85:31:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:30:34 2025 by rpki-client