Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS208972.roa
File: AS208972.roa (raw, json)
Hash identifier: vHRIODijLTnshbXk7zPEkP2tIetM5OJ8E1eB0QtgISM=
Subject key identifier: C7:A4:2C:C0:F8:46:1A:8B:E8:E7:B0:BF:86:5C:43:A8:57:A6:83:A4
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 3B2D5AFD7A93D1ED5333587E27E2E277D6443A71
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS208972.roa
Signing time: Tue 21 Apr 2026 09:48:27 +0000
ROA not before: Tue 21 Apr 2026 09:43:27 +0000
ROA not after: Tue 20 Apr 2027 09:48:27 +0000
asID: 208972
IP address blocks: 212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:2d:5a:fd:7a:93:d1:ed:53:33:58:7e:27:e2:e2:77:d6:44:3a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Apr 21 09:43:27 2026 GMT
Not After : Apr 20 09:48:27 2027 GMT
Subject: CN=C7A42CC0F8461A8BE8E7B0BF865C43A857A683A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:2a:c4:cb:fc:79:e8:0f:be:5e:ed:55:e5:
6b:24:3f:d2:a1:07:76:a4:88:ca:a2:10:a7:a7:b3:
2d:3e:b7:83:63:4b:39:80:4e:70:0b:53:a5:52:b1:
62:a5:10:f9:81:8d:b3:2b:bd:ed:87:1b:b2:60:38:
75:1d:18:f4:4c:e2:f2:87:38:56:aa:e0:ae:d6:3b:
f7:a3:af:99:7a:03:a4:81:97:f8:3b:56:26:01:43:
40:d9:fc:ab:d4:61:b3:b2:21:88:28:4a:f1:40:97:
ab:a3:a9:14:d2:5f:2f:b5:53:30:cc:7e:b5:dd:4e:
14:f5:99:96:60:45:c6:89:3d:a2:25:31:e8:92:2f:
75:99:5f:17:8b:fa:23:db:62:0b:2d:a5:e4:d6:df:
5b:c4:7a:cb:e3:b1:95:3f:d0:f0:ea:f2:d2:31:81:
18:e5:16:43:cf:6a:b9:a3:62:b7:39:d9:e0:a6:49:
2d:62:d8:f2:a9:48:13:48:13:7d:ee:68:bc:ca:dd:
3a:25:65:0d:76:60:eb:d4:04:5d:79:f9:d1:16:0a:
18:7e:a9:62:6c:7a:47:08:b2:d4:a2:c2:c5:f6:d1:
65:3b:a9:9b:13:97:f1:42:08:a8:de:83:c2:c2:7c:
c6:b2:2a:ce:de:46:a3:e6:c2:9a:d4:6a:4c:f7:d7:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:2C:C0:F8:46:1A:8B:E8:E7:B0:BF:86:5C:43:A8:57:A6:83:A4
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS208972.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0e:03:41:58:1d:6e:da:48:a8:6f:e4:3c:6f:b8:51:d5:04:
83:d9:e0:88:f4:70:c1:07:0a:26:a3:20:4d:6c:06:32:7b:e8:
66:fe:c4:66:cb:ce:f8:8b:19:13:16:e9:0f:58:98:be:7e:81:
3e:bb:e3:e6:af:45:26:5a:95:b3:b9:75:b7:e2:ba:b8:b9:69:
69:2e:24:92:a3:7e:b1:e0:3f:b6:fd:61:6a:95:35:f4:69:e1:
54:dc:91:0e:55:9a:83:68:3b:5d:a8:41:d5:b3:fb:13:a5:86:
dd:a0:c9:27:1e:da:f7:87:f2:ff:0d:61:0b:b3:d1:6f:c1:b1:
25:66:fa:3c:af:a9:50:73:71:66:0d:89:c2:03:03:0b:37:c6:
62:f7:84:1a:00:5c:5f:41:05:bf:59:63:7f:c0:af:ba:36:b0:
f2:86:db:5a:30:7a:75:06:7d:d8:fd:0f:db:98:eb:4d:04:5d:
46:95:aa:d8:0d:e4:e6:bd:72:d4:3d:27:11:cd:c8:13:f0:91:
31:61:e8:b6:94:5d:c8:8b:c9:94:b1:ad:a9:72:73:bf:9d:4b:
3a:67:10:03:db:cb:32:5f:15:ea:39:5a:2d:a9:45:50:ad:9a:
79:5e:5b:0d:b1:b5:36:a4:8a:f9:8b:63:26:60:54:25:7f:41:
93:06:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:35:03 2026 by rpki-client