Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208112.roa
File: AS208112.roa (raw, json)
Hash identifier: kzYXbToDG70vIcYXaJ2I297asmbXJSmiV1lHKqiFkjk=
Subject key identifier: 96:A4:1F:96:47:F8:BD:D6:8A:E4:E8:A0:AC:68:9A:84:73:99:62:0C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3EAFC7221F758B7514A4C320810015D7908C2EE8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208112.roa
Signing time: Fri 24 Jul 2026 06:39:49 +0000
ROA not before: Fri 24 Jul 2026 06:34:49 +0000
ROA not after: Fri 23 Jul 2027 06:39:49 +0000
asID: 208112
IP address blocks: 82.22.82.0/24 maxlen: 24
2a13:9500:1a7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:af:c7:22:1f:75:8b:75:14:a4:c3:20:81:00:15:d7:90:8c:2e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 24 06:34:49 2026 GMT
Not After : Jul 23 06:39:49 2027 GMT
Subject: CN=96A41F9647F8BDD68AE4E8A0AC689A847399620C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:78:57:86:58:69:da:1a:fd:1a:54:85:79:
1b:fa:89:11:aa:cb:be:65:98:0c:5e:2b:80:ed:a5:
02:4d:ef:e3:2b:46:f5:36:f5:c3:e5:8e:82:0e:68:
b5:40:55:f2:07:ef:67:48:80:f9:ab:cb:cf:a6:e1:
c2:18:f7:f9:85:bf:91:f2:04:91:a1:c2:03:20:80:
fd:8c:a1:e7:50:c7:ab:2c:19:aa:c4:56:70:a3:47:
4d:79:80:d5:34:58:3b:bc:89:19:bd:c7:65:4e:c9:
c3:ea:88:64:d9:06:ba:92:2e:83:de:11:52:48:23:
04:4e:00:a6:24:c2:42:eb:ef:a4:f7:96:15:c9:a1:
7a:59:82:22:d1:c9:68:99:a3:59:6c:68:02:0a:06:
50:f6:78:7a:b7:2d:4e:bb:01:2b:b8:f6:ce:1e:95:
36:53:0f:7a:ed:f8:9e:3e:d6:8e:73:65:56:87:bb:
91:2b:78:cf:a8:6e:41:4b:c0:fb:ad:b1:19:70:bc:
ce:2d:41:95:4d:6f:3b:16:d6:2e:99:65:00:c2:8b:
59:25:3b:b1:c1:56:39:d1:72:fb:f8:e4:97:11:c7:
46:67:2f:24:e2:4c:7b:58:f4:e6:a8:77:f7:38:a2:
40:db:c0:66:77:0c:4f:97:88:51:fb:f2:6c:65:fc:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A4:1F:96:47:F8:BD:D6:8A:E4:E8:A0:AC:68:9A:84:73:99:62:0C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208112.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.82.0/24
IPv6:
2a13:9500:1a7::/48
Signature Algorithm: sha256WithRSAEncryption
a7:18:1a:da:1b:eb:31:87:51:86:ce:4c:b9:ae:b5:ce:40:ab:
80:ad:03:86:32:18:77:1a:53:f0:b0:ac:0e:46:77:c9:9f:b5:
b3:f1:9c:fe:bf:4d:9a:48:20:29:d9:db:36:90:d5:7a:b1:9e:
2f:7d:a7:f1:47:62:e6:42:15:ee:15:a6:53:52:a9:1f:76:aa:
aa:5e:50:e8:9d:93:bf:53:7c:05:31:8c:1c:7d:0e:58:18:20:
a3:80:52:47:aa:39:48:a7:c8:9f:53:50:d3:4d:f5:5c:42:71:
5c:70:70:1c:28:cb:f4:4c:b0:be:8f:a1:91:2b:55:e3:84:41:
cf:fd:de:2d:3b:2d:12:77:74:8b:d0:11:3a:c0:35:cf:7f:9d:
1f:21:f3:72:a7:9f:a5:33:e3:39:b7:3f:b8:07:c3:bb:b9:b2:
b5:b6:03:af:a4:78:2c:5d:d0:cf:97:8d:85:2f:ae:6a:92:d1:
40:07:6b:1a:99:87:48:4b:87:4c:46:57:ef:fc:57:33:e9:77:
27:34:3e:05:ce:38:c4:b1:13:9e:0d:e5:b2:bb:24:c8:15:8b:
e4:e9:70:2c:37:27:1c:6e:e8:0d:44:db:2a:b5:13:4b:db:3c:
ca:8f:e0:e0:8e:7b:e4:41:b6:7d:b1:d3:ac:d7:59:78:f7:0a:
9d:88:fa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:24:19 2026 by rpki-client