Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS208545.roa
File: AS208545.roa (raw, json)
Hash identifier: EXsxDT665iD+A3CM8pHZF0iPzZmKCcnLPW/HZGIm+WY=
Subject key identifier: 54:80:5A:B3:5D:04:BD:2A:41:C4:F5:96:DF:32:CF:72:16:C1:BF:96
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 15734F5794CA05B32036B864EF10FAF081DD0EA6
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS208545.roa
Signing time: Tue 01 Sep 2026 10:49:30 +0000
ROA not before: Tue 01 Sep 2026 10:44:30 +0000
ROA not after: Tue 31 Aug 2027 10:49:30 +0000
asID: 208545
IP address blocks: 2a01:170:1050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:73:4f:57:94:ca:05:b3:20:36:b8:64:ef:10:fa:f0:81:dd:0e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 1 10:44:30 2026 GMT
Not After : Aug 31 10:49:30 2027 GMT
Subject: CN=54805AB35D04BD2A41C4F596DF32CF7216C1BF96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a4:3f:a3:6a:1c:93:6f:35:58:b3:7b:62:73:
06:8c:69:12:29:38:e1:eb:41:c8:87:41:e3:23:df:
4c:b8:77:71:b0:c1:c1:2e:2c:64:28:69:b6:bf:c1:
fa:bf:35:1e:46:00:ff:46:cb:8f:66:5d:0e:f4:c1:
ec:b9:6f:6c:24:3b:42:78:e0:71:71:44:87:72:30:
d0:a6:ed:0a:02:f3:4f:93:5f:16:df:b1:c2:80:ee:
38:9c:90:f2:4d:f4:0a:f1:d3:83:31:cf:ce:9f:92:
ad:e8:96:8c:ca:4b:6f:2a:25:60:85:ca:93:40:91:
29:eb:4a:d0:bf:42:e8:57:1e:6b:56:de:4a:ec:8e:
ca:bb:ce:60:4a:31:c0:f7:4c:0d:f8:ae:eb:48:95:
35:6f:62:b1:bd:53:98:3e:1d:ba:df:c8:60:e9:4f:
73:a4:34:97:d5:49:f9:09:b5:35:bd:9d:5e:b9:81:
8b:ed:8e:56:9d:76:69:aa:7c:be:58:ad:7a:51:f0:
d3:0e:31:7a:75:99:fb:7c:a8:08:e5:ee:0d:14:0a:
e9:43:48:fe:ef:d5:19:9a:b0:7f:8b:a2:3b:a7:40:
77:12:b8:f0:2a:33:8e:5d:79:6a:59:8b:3b:3f:c9:
84:06:50:ad:b7:a9:96:4a:ba:f1:0d:de:84:2d:76:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:80:5A:B3:5D:04:BD:2A:41:C4:F5:96:DF:32:CF:72:16:C1:BF:96
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS208545.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:170:1050::/48
Signature Algorithm: sha256WithRSAEncryption
6b:45:48:bd:8a:16:ed:4b:e2:5e:6b:c9:2e:2d:2f:b1:b4:2a:
bf:68:84:6d:05:89:f6:d6:91:70:8d:5c:f6:4b:ea:15:68:4b:
d1:54:c5:04:d0:8c:06:a0:2d:87:49:95:09:a8:4a:ad:fb:8c:
41:14:f2:f2:67:91:c3:e8:92:97:23:28:8c:ec:ee:de:2d:b5:
06:22:98:a8:38:52:25:fd:57:d7:4c:64:3a:41:d4:41:5e:70:
fd:90:07:92:3e:2d:3e:78:85:d6:72:fd:53:12:7d:fd:de:f7:
c9:99:1d:a1:b7:29:7c:7e:a4:7b:43:5b:27:4e:8d:99:83:dd:
ca:09:a1:b0:6e:74:71:72:2b:cd:40:54:d2:12:5b:29:d0:88:
06:fb:07:ac:ef:cb:cf:78:7d:69:6c:e0:e4:15:0c:72:5a:e8:
4f:44:66:fe:e1:a8:f8:23:ee:9a:96:47:3e:ef:ee:18:49:4d:
7d:cd:28:39:d6:ce:ae:1f:f7:4a:e6:d4:c7:aa:61:75:38:fc:
7f:be:54:88:93:dd:db:d1:9f:25:21:b4:42:bf:87:5b:d7:9d:
c7:39:6b:65:9b:03:46:5d:b3:cd:c9:5b:c4:5b:6c:ae:f5:a5:
d7:0f:96:0b:63:7c:c0:24:ce:72:7f:50:6e:fc:a7:7b:49:2e:
7e:2e:94:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:53 2026 by rpki-client