Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208504.roa
File: AS208504.roa (raw, json)
Hash identifier: 9FAFYDGeDDeq0E+CDgCAJHWHfHekh2hgKdYnRHBB2uE=
Subject key identifier: 5B:4D:CF:7A:A5:AB:CA:D3:D4:C8:74:DF:79:0A:21:71:5F:20:26:75
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 49447177835C73E071421D014C7E16297E6BEDFF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208504.roa
Signing time: Tue 21 Apr 2026 17:04:34 +0000
ROA not before: Tue 21 Apr 2026 16:59:34 +0000
ROA not after: Tue 20 Apr 2027 17:04:34 +0000
asID: 208504
IP address blocks: 82.38.95.0/24 maxlen: 24
178.83.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:44:71:77:83:5c:73:e0:71:42:1d:01:4c:7e:16:29:7e:6b:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 21 16:59:34 2026 GMT
Not After : Apr 20 17:04:34 2027 GMT
Subject: CN=5B4DCF7AA5ABCAD3D4C874DF790A21715F202675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:83:93:db:d3:a9:ee:fc:bd:95:42:fc:da:
89:7e:87:35:f8:b9:82:44:48:36:1d:cc:58:c1:d8:
2a:06:3c:f4:43:ae:47:0f:bf:b6:ee:bb:39:5b:d7:
aa:a0:6a:d1:64:d2:ca:9a:d3:bd:9f:b5:e4:ea:7e:
14:92:89:79:cc:39:41:6f:94:15:d5:c6:1e:76:2e:
f3:2d:77:24:85:0c:d3:01:a2:77:74:42:96:8d:26:
5b:45:88:27:ec:f0:19:f8:79:80:26:3d:b2:e5:a0:
aa:61:04:e9:5a:d0:2a:32:08:41:8d:df:34:1f:05:
96:bb:e8:ae:c3:e3:d0:ae:a4:9b:83:44:8f:45:a1:
74:fc:39:d5:57:c7:8f:33:dd:36:c4:e6:1b:17:0a:
f1:b3:72:ba:25:f5:62:a4:2d:c9:b8:1b:4f:6d:ac:
bb:ac:5e:e8:29:7c:84:74:b2:b6:73:91:93:41:6e:
e1:4b:3b:a9:ef:e3:6b:3a:72:1b:58:83:e4:8b:97:
9c:7f:ee:54:be:da:36:5e:5e:fb:fa:dc:56:63:1f:
49:f3:19:4a:87:b4:bf:34:d9:fa:67:e1:27:19:7b:
18:d8:57:27:82:8d:12:6c:13:29:b2:f8:8d:02:4e:
a1:43:b2:05:0e:88:04:08:10:13:01:cf:3b:b1:67:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4D:CF:7A:A5:AB:CA:D3:D4:C8:74:DF:79:0A:21:71:5F:20:26:75
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208504.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.95.0/24
178.83.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:8f:b7:77:5a:59:d2:02:2f:20:f9:57:bb:86:e2:47:e0:af:
93:9f:c4:ee:e8:51:bf:e5:37:6f:91:b2:19:06:a7:04:ee:ec:
f2:e6:82:e3:53:53:c4:90:96:12:9a:af:bf:52:d9:84:0f:86:
d4:66:24:9f:3e:18:42:83:d1:f1:0e:6f:03:1b:80:5a:68:b7:
d5:88:c4:a9:e9:21:0e:10:5a:f4:18:18:ca:97:e8:93:38:b3:
f7:b1:9a:c4:13:60:ac:b9:79:e0:bc:67:92:ba:52:80:75:78:
8e:4f:c2:49:9e:aa:3f:31:bf:c9:1d:1f:5c:ac:57:31:7f:01:
15:67:f3:cd:e0:70:db:27:55:44:62:6c:f8:cd:cd:5d:83:30:
b9:ee:8e:3d:1a:c1:94:01:4c:4b:c7:33:27:cd:90:8c:c7:7c:
65:e0:6d:a4:63:77:1e:27:4a:de:aa:ca:ad:86:96:e0:de:df:
6e:9a:b4:70:70:a8:39:e9:68:19:a2:2a:b3:fd:ef:3d:2f:33:
16:5c:5e:cd:94:42:b5:a1:9f:cc:22:b7:f9:01:0f:2d:9b:1d:
03:b1:10:f3:26:db:24:cb:f2:6a:10:41:12:3f:88:a1:eb:1d:
f0:73:14:9c:37:53:f6:10:aa:72:d6:e6:18:2e:3c:10:cc:eb:
0a:2f:18:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:51:35 2026 by rpki-client