Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208437.roa
File: AS208437.roa (raw, json)
Hash identifier: KOvLD3SZO2RF3l5Ul/pY54/6/8rXtQtCdiG5FD907yo=
Subject key identifier: E8:B0:79:E8:C0:A7:3A:9E:51:E4:52:5C:57:4B:86:CC:5F:63:1D:E4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 55BA708A5ADFC14735A624A458A0FE55ECB18B66
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208437.roa
Signing time: Mon 01 Sep 2025 18:40:58 +0000
ROA not before: Mon 01 Sep 2025 18:35:58 +0000
ROA not after: Mon 31 Aug 2026 18:40:58 +0000
asID: 208437
IP address blocks: 140.233.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ba:70:8a:5a:df:c1:47:35:a6:24:a4:58:a0:fe:55:ec:b1:8b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 1 18:35:58 2025 GMT
Not After : Aug 31 18:40:58 2026 GMT
Subject: CN=E8B079E8C0A73A9E51E4525C574B86CC5F631DE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:42:b0:9a:96:75:7d:9e:87:c0:a7:6c:5a:
8b:e2:a9:25:f0:b5:ea:53:7e:df:69:3a:79:71:81:
7a:eb:8f:1a:d2:a6:41:ae:13:2e:c1:b7:e6:94:f2:
5f:6a:d9:a2:fe:8c:e2:b1:ec:16:c6:44:7b:d3:68:
45:04:1e:c1:74:ae:05:e6:6e:2d:55:75:97:ad:50:
05:17:e5:31:61:1b:e4:b7:47:e7:8e:59:41:dd:97:
e2:b2:26:a8:62:84:27:0f:1c:7f:2b:e0:bb:74:a0:
3a:6b:9f:6e:93:ce:6a:34:d1:7c:1e:8c:bd:f9:4d:
16:db:6b:7f:5d:df:d0:cd:63:36:62:5d:a2:3b:41:
da:f7:ba:b9:04:c0:86:6f:f2:d6:64:ca:37:f3:6c:
02:75:3e:27:06:5f:3c:83:ec:57:c0:72:1f:e5:a7:
ac:b0:d9:8b:d2:a5:14:e9:09:47:dc:61:ae:c8:6f:
30:e3:70:df:3e:13:46:dd:91:78:c5:cd:71:89:10:
37:5b:d5:8e:23:0a:0d:2f:0a:52:fb:b2:ff:cb:54:
ae:00:96:9f:da:48:74:cd:a4:04:ae:33:8a:5f:aa:
9e:86:78:82:b7:b2:60:88:44:54:fd:8b:ea:3b:df:
2f:5a:72:ea:d8:bd:05:c1:80:1d:00:c3:48:dc:ab:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B0:79:E8:C0:A7:3A:9E:51:E4:52:5C:57:4B:86:CC:5F:63:1D:E4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ad:9e:ed:6b:64:47:ec:c5:cd:a9:b2:7b:9b:89:75:0d:d0:
03:52:39:31:be:bf:5b:a0:46:71:3f:38:da:07:5c:64:3c:7d:
1c:ae:ad:9c:42:21:47:6e:5a:84:af:6f:48:2d:62:f5:b1:b8:
d1:46:30:b7:a1:70:be:1a:cc:f8:a6:92:3e:55:42:f1:cf:90:
6b:42:af:c7:be:14:56:00:c5:76:54:3d:d3:da:c8:95:e0:b0:
ab:43:d6:e8:88:92:9b:7e:e9:01:d9:88:af:6c:07:72:32:fd:
f9:65:2c:5b:59:56:99:f8:3f:7f:1c:d8:dd:e0:1d:3c:4f:e5:
82:69:90:ec:69:f3:a0:b9:ca:be:ba:eb:84:aa:2d:d6:08:5e:
24:db:be:14:ae:5b:0a:3f:60:68:e5:73:5c:c3:37:50:48:0e:
aa:08:65:4d:bd:1c:91:90:d3:fd:c2:77:2d:1f:6a:93:86:1d:
21:33:97:4f:47:5b:84:13:35:4d:17:c8:4d:f9:ff:8b:31:73:
8b:1b:57:9f:9f:e7:dc:f5:2b:c4:8b:bf:71:ee:d0:a5:bf:d5:
e9:ce:14:df:a9:47:6e:07:4b:60:3b:3a:98:6a:10:25:10:87:
fc:6a:36:36:ba:50:ac:c8:c8:31:fb:7f:9f:ae:01:e2:80:94:
3d:1b:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:49:15 2025 by rpki-client