Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208024.roa
File: AS208024.roa (raw, json)
Hash identifier: 5y7c1X5CCrURt7XOfBzUjKKHLbQGrSBSO/xWLMwtU6c=
Subject key identifier: 23:53:39:38:23:05:4E:94:7A:B6:B3:91:40:FF:79:60:99:66:5C:8F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 42B3D2E1F35DF6018BB780E20E3B4C87E8C2DE1B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208024.roa
Signing time: Sun 12 Jul 2026 18:49:10 +0000
ROA not before: Sun 12 Jul 2026 18:44:10 +0000
ROA not after: Sun 11 Jul 2027 18:49:10 +0000
asID: 208024
IP address blocks: 2a13:9500:c3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b3:d2:e1:f3:5d:f6:01:8b:b7:80:e2:0e:3b:4c:87:e8:c2:de:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 12 18:44:10 2026 GMT
Not After : Jul 11 18:49:10 2027 GMT
Subject: CN=2353393823054E947AB6B39140FF796099665C8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ee:3a:fa:57:15:e6:86:61:41:05:c0:1a:a9:
ad:b9:6c:97:92:3d:5a:b6:d0:b1:1e:36:af:d1:35:
46:eb:ac:2b:ef:2f:ca:54:45:76:95:79:bd:3f:38:
91:f0:bc:65:78:78:50:80:b5:15:fa:5a:40:31:5a:
93:8f:a3:ac:48:f5:52:a7:55:fa:81:9e:f5:d4:6e:
57:63:c8:db:c3:75:8d:6c:b5:78:a2:43:e9:48:a8:
a0:62:d7:27:e4:10:17:7f:c5:77:17:38:03:dd:a5:
17:93:21:6c:1a:ae:df:9d:4b:91:83:4d:51:1c:b0:
29:84:90:77:c8:b9:b2:94:db:13:27:7a:f6:6c:d4:
7a:ee:f4:45:f5:6a:d5:ce:9f:13:77:62:5d:08:8c:
bf:f5:ca:3a:5e:bc:d0:c4:02:83:1a:eb:f5:b8:61:
07:4c:44:d2:0a:94:36:93:2d:63:29:26:c6:b2:fd:
a7:20:aa:5c:fe:1a:30:21:84:11:27:b5:85:68:7f:
8e:96:90:16:b0:d8:40:9c:41:f2:e3:c4:20:d9:e0:
de:13:1e:90:54:34:89:4f:94:ec:22:af:a5:a0:9c:
ea:c9:28:80:90:9e:b9:de:fa:28:46:e8:7a:13:62:
32:86:e1:8d:8a:e1:2e:52:12:d4:22:25:e8:bc:4f:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:39:38:23:05:4E:94:7A:B6:B3:91:40:FF:79:60:99:66:5C:8F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c3::/48
Signature Algorithm: sha256WithRSAEncryption
2e:36:12:a5:c5:b4:c7:70:02:c0:ec:bd:7a:4b:a7:9a:48:73:
e4:eb:e9:6b:fc:e4:09:82:78:69:9a:9b:75:c9:08:1a:54:62:
c2:71:3d:f4:c8:13:28:3c:53:9f:f3:21:53:c6:a3:f1:0a:50:
ab:ea:26:cf:e3:fa:a7:22:b7:57:6f:22:4c:41:cd:ed:66:21:
32:18:7c:10:db:84:4d:eb:24:de:51:d2:fb:78:74:49:91:71:
84:a4:2a:e8:e8:24:bc:09:54:c7:5b:79:22:a7:bd:4a:95:bd:
a4:ad:97:db:26:0e:81:f8:37:bb:69:76:84:6f:b5:eb:9d:84:
10:a1:70:be:38:5f:64:0b:5f:d7:9a:d7:29:fd:03:9a:5b:33:
82:0e:ef:42:00:76:19:50:ed:91:83:7b:c4:22:0a:55:a8:a5:
54:69:8f:08:51:2a:9b:62:49:9a:79:46:fe:5f:7c:d2:a9:37:
98:7d:95:3b:7a:f4:41:4b:31:01:f5:10:6d:c4:26:e5:b0:c6:
ca:c8:a5:5b:1a:72:dd:f3:8f:af:fc:79:c1:68:dd:91:20:9c:
08:2d:f4:a7:a4:03:10:a3:13:f5:5b:9d:4d:e8:b4:e3:f9:31:
ba:6b:cb:15:6a:b3:3c:56:72:4b:1f:e6:6d:41:68:f0:d3:03:
78:a0:04:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:16 2026 by rpki-client