Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208437.roa
File: AS208437.roa (raw, json)
Hash identifier: xLzlRTCqs5cdFVgN5Tfsvh0xQn2wFkwJwm1LESdYtq4=
Subject key identifier: AC:76:73:58:8D:BF:7F:98:A1:40:55:CC:23:A1:C7:F0:26:8A:1C:36
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 265EBF18FAC29AEEA83281BC67045515D47731ED
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208437.roa
Signing time: Mon 03 Aug 2026 18:49:18 +0000
ROA not before: Mon 03 Aug 2026 18:44:18 +0000
ROA not after: Mon 02 Aug 2027 18:49:18 +0000
asID: 208437
IP address blocks: 140.233.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:5e:bf:18:fa:c2:9a:ee:a8:32:81:bc:67:04:55:15:d4:77:31:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 3 18:44:18 2026 GMT
Not After : Aug 2 18:49:18 2027 GMT
Subject: CN=AC7673588DBF7F98A14055CC23A1C7F0268A1C36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:8e:9c:01:dd:64:51:7b:22:f1:9c:6b:3d:
83:24:95:38:64:18:a3:28:73:74:bb:34:4a:91:09:
18:5c:03:5c:4b:db:77:6b:a8:90:c5:e7:7b:28:c6:
db:6a:49:f4:37:dd:67:95:43:e6:ff:22:38:a0:d1:
23:51:72:98:8f:7e:db:cc:53:6a:30:b2:45:4c:d5:
de:38:96:f1:c2:69:76:5b:81:31:2b:3d:f1:12:8d:
81:08:74:81:5a:e9:6e:9f:2f:d8:d0:ec:28:ef:90:
33:15:b5:52:18:f3:e1:04:8e:ac:fb:99:88:f8:e8:
3d:89:5f:ef:c0:98:94:29:7c:df:7d:28:3d:a1:c9:
6b:55:a1:64:ed:51:6f:44:69:cc:32:12:63:ab:22:
da:b1:31:a8:4b:c0:ef:7d:9f:02:61:ec:3e:81:d2:
cd:8f:de:eb:e1:36:ac:ba:f8:04:5c:ad:07:bf:e8:
33:f5:f3:ec:20:19:a1:07:8f:0c:6d:17:a4:82:ae:
94:c0:5c:ef:be:ff:dd:ff:91:f5:02:0f:5a:79:11:
40:b1:4f:68:3d:60:2b:20:87:1a:27:69:43:ce:11:
3a:65:fe:7c:0b:36:6d:c1:32:d9:23:3f:11:a2:30:
9c:ed:32:01:47:02:c7:a9:4c:b8:09:56:60:47:45:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:76:73:58:8D:BF:7F:98:A1:40:55:CC:23:A1:C7:F0:26:8A:1C:36
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.176.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:21:88:8c:da:44:c9:a6:fb:c6:f7:5a:85:ee:3c:96:0d:6f:
e4:de:af:eb:fa:20:7c:8d:13:cf:a4:8d:fc:e0:af:a6:38:d7:
c1:e3:79:f2:fb:a5:d9:ba:d5:e3:59:0a:74:06:2a:96:32:24:
db:20:32:c7:11:45:29:5b:9e:05:05:5b:50:3a:98:0a:ec:8a:
e8:68:c7:59:d6:18:96:44:1d:2a:31:75:40:2b:e5:c2:42:77:
c4:66:f0:c7:51:e7:eb:4f:ec:f0:41:69:6b:4a:f2:d5:8c:dc:
6b:a7:d4:c8:07:d0:da:a5:6f:97:1a:59:65:0d:0f:66:85:a2:
6e:4c:b6:e1:1d:9f:de:22:0a:f1:d4:65:62:4e:12:0c:5c:e0:
d4:bc:9f:75:d1:65:14:fa:95:8c:15:f2:a6:6b:65:28:be:43:
df:c3:29:8d:8e:ea:be:cd:94:db:e3:4a:0f:c4:b4:36:9a:4a:
a5:de:27:f3:3d:a3:3d:24:32:a9:00:a1:24:1d:db:64:a4:9a:
cf:4d:93:ad:2f:b4:4f:7c:9a:33:20:44:40:1d:10:8f:4f:27:
7d:77:e3:59:b3:fb:c6:ce:91:2d:bd:2c:4c:f1:dd:95:f6:89:
6f:76:27:10:4c:5e:01:d7:66:c1:9a:9c:db:b7:72:4b:07:f0:
9c:a6:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:28:37 2026 by rpki-client