Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS208905.roa
File: AS208905.roa (raw, json)
Hash identifier: WgnCwzYbuspQDAouOie2zLhpVS8ZrcTsc7par8P5kTI=
Subject key identifier: 3D:70:E1:F9:F9:8E:C9:9B:47:F4:76:D0:BC:E5:86:C2:8E:70:FB:56
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 1999EAE91B926FEC93D16C2469E6822F30722E74
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS208905.roa
Signing time: Mon 05 Oct 2026 09:00:26 +0000
ROA not before: Mon 05 Oct 2026 08:55:26 +0000
ROA not after: Mon 04 Oct 2027 09:00:26 +0000
asID: 208905
IP address blocks: 85.130.240.0/22 maxlen: 24
85.130.244.0/23 maxlen: 24
85.130.248.0/21 maxlen: 24
109.67.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:99:ea:e9:1b:92:6f:ec:93:d1:6c:24:69:e6:82:2f:30:72:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:55:26 2026 GMT
Not After : Oct 4 09:00:26 2027 GMT
Subject: CN=3D70E1F9F98EC99B47F476D0BCE586C28E70FB56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:75:ea:0b:7e:be:33:4d:d9:75:3f:18:f0:
46:41:f6:bc:d1:32:a3:6b:e2:6d:67:02:93:4e:26:
fe:55:61:14:d8:49:e7:1e:cc:73:85:1e:99:24:be:
1f:32:b4:bd:98:ab:f6:d4:2a:e0:5c:dc:32:93:f9:
7b:ef:98:23:dd:cd:95:80:dd:36:00:24:2c:1b:19:
a8:2a:fe:92:a0:ce:f6:91:69:05:92:3d:b9:b7:01:
8b:56:e9:4c:67:63:08:24:54:83:fa:4f:1b:0e:8d:
c1:34:4b:ae:fe:3d:e1:e3:7d:8d:20:48:2d:0b:42:
d7:ab:e4:c0:5f:a4:e3:a6:26:75:c7:f1:8f:6d:41:
86:86:9d:49:f4:1c:c4:72:fe:92:6b:be:9c:4c:8e:
fe:dd:0d:59:47:66:82:19:b9:0a:06:bb:50:70:c5:
12:8b:6b:17:9d:2c:ea:b9:2c:94:d0:fd:7c:46:82:
b0:d2:9d:02:7c:0b:97:58:be:40:a5:0d:fd:d3:b7:
d3:72:01:34:42:a3:f6:e3:dd:42:dc:c2:80:66:eb:
6f:67:74:60:a7:24:37:1e:17:8d:2d:da:35:c6:33:
0a:21:d9:4d:8e:4a:29:3f:4b:88:a4:40:5c:9e:68:
83:36:df:77:b8:f7:cd:96:cf:ba:20:bb:6a:8f:3b:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:E1:F9:F9:8E:C9:9B:47:F4:76:D0:BC:E5:86:C2:8E:70:FB:56
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS208905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.130.240.0-85.130.245.255
85.130.248.0/21
109.67.184.0/21
Signature Algorithm: sha256WithRSAEncryption
07:c4:36:ee:17:56:92:96:4e:db:26:ea:bf:bd:a1:05:e5:41:
28:16:62:92:38:76:1c:97:ad:1f:f1:72:e7:e2:eb:e1:7d:a1:
d4:6c:bf:24:f7:35:82:16:6d:6f:49:97:b0:32:f7:67:48:01:
d4:35:e2:cc:ee:7b:fe:7c:54:8f:91:7c:b2:4b:0e:3c:09:df:
f8:52:4e:58:10:c2:27:32:7c:9b:f6:46:1e:c0:42:c1:f6:44:
4d:f8:97:2a:4c:2a:ee:6e:4f:02:59:c8:62:30:d7:cd:c3:72:
e5:f7:84:c6:6b:91:73:54:de:04:61:49:c2:bb:85:14:cd:16:
31:a1:53:fd:29:a2:0f:93:2f:9f:13:0c:cb:24:ef:66:ae:f1:
35:78:44:57:d2:5f:62:a9:ff:d8:63:42:28:68:ca:ee:de:10:
a1:31:16:c5:5c:2a:c5:95:85:06:c4:59:ab:bc:f2:22:5f:5b:
7a:2d:70:78:f3:dd:5b:c6:32:94:68:bd:85:98:5d:13:26:1d:
35:97:2c:52:97:21:28:18:74:67:76:70:33:e4:02:fa:3c:bc:
58:27:7c:ab:1c:39:8d:ba:de:b8:5a:6d:04:9c:ce:55:7f:bb:
ab:44:82:4c:75:d5:8d:9b:7e:56:6d:2d:9c:1e:50:9d:3f:84:
60:b0:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:32 2026 by rpki-client