Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208690.roa
File: AS208690.roa (raw, json)
Hash identifier: E60oBBB2aY8qP4+aZqgcUdZTPIQnCQNW8Kn0NabY89U=
Subject key identifier: DD:84:41:6C:49:EC:47:54:57:E9:1F:C9:B8:62:92:69:67:E4:66:02
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4F0585739C5ADC6FCDD987E6C8C3FE6482E75BE9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208690.roa
Signing time: Tue 14 Jul 2026 13:01:54 +0000
ROA not before: Tue 14 Jul 2026 12:56:54 +0000
ROA not after: Tue 13 Jul 2027 13:01:54 +0000
asID: 208690
IP address blocks: 2a13:9500:1a6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:05:85:73:9c:5a:dc:6f:cd:d9:87:e6:c8:c3:fe:64:82:e7:5b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 14 12:56:54 2026 GMT
Not After : Jul 13 13:01:54 2027 GMT
Subject: CN=DD84416C49EC475457E91FC9B862926967E46602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:e8:6f:28:c6:d4:8e:42:6b:1d:6d:89:8c:
5e:4e:28:4c:e9:95:46:86:a6:8f:a1:ef:a2:39:a0:
11:1b:cc:22:92:f5:11:e5:a2:7b:eb:32:e7:eb:13:
83:36:9a:67:c9:00:02:f2:11:1f:b5:f5:6d:73:a7:
98:8c:e0:46:85:23:bb:2b:27:29:ad:50:fb:c0:e3:
77:ae:e3:88:35:80:2c:ad:3d:2d:93:6d:b2:57:f0:
5b:41:2b:44:ad:43:0b:28:5a:21:3d:21:dd:aa:bd:
e9:28:b8:d1:39:bd:d9:36:3a:8b:15:cd:8a:c5:6b:
31:58:03:58:ef:c5:1a:38:50:0c:79:ed:c9:41:8b:
4c:62:a4:a3:04:26:e7:26:da:63:25:8a:5f:bc:40:
51:64:4f:40:76:a2:bd:12:79:4a:27:93:35:8f:28:
5a:b5:b1:aa:e9:a3:99:86:b1:6d:78:6c:c0:7b:37:
7f:19:b9:39:ef:6b:a2:24:b7:c7:4e:4e:d6:f1:03:
58:35:76:eb:f0:a8:49:60:09:be:e0:46:f0:0e:91:
64:86:ea:96:c5:76:58:be:12:b5:30:a0:55:79:8e:
3b:45:62:2f:dc:3e:35:77:c8:b1:d0:5c:89:8f:58:
2b:b7:d8:77:b3:00:40:43:7d:83:c8:f0:1b:9a:66:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:84:41:6C:49:EC:47:54:57:E9:1F:C9:B8:62:92:69:67:E4:66:02
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1a6::/48
Signature Algorithm: sha256WithRSAEncryption
31:c4:b5:73:54:7b:6a:5d:25:00:0f:e1:26:fd:1c:44:e4:e5:
0a:85:d8:fb:f9:4d:e5:87:32:c3:c3:41:77:a2:19:8a:46:05:
d9:ae:28:54:1b:82:21:12:e8:24:d1:f6:a3:c3:40:4c:eb:c0:
74:75:fc:a1:fc:2b:9f:5d:90:b9:84:64:8a:61:8f:51:fd:3d:
a4:0f:3d:e6:ad:db:5f:fb:e2:03:ff:ac:fb:c9:36:90:e5:26:
e8:95:b0:cb:0f:40:bf:77:9b:cc:26:88:21:77:9b:2f:4d:02:
68:c9:6b:ff:af:7a:37:9c:b1:88:a6:4f:ea:c2:ff:6b:0d:c0:
15:f8:52:77:ee:91:3b:17:3b:00:38:66:2d:29:26:d0:e8:d1:
b9:ba:de:25:40:ef:52:36:77:f3:31:2a:8f:1f:27:7a:b1:94:
9f:d3:df:d9:41:f8:db:75:ce:b2:3b:0f:aa:20:e1:ed:6b:83:
6a:c1:fa:45:0b:8c:38:83:0b:97:61:41:9d:c8:be:9f:5d:ea:
3e:09:7b:71:e6:7b:23:a9:37:d6:76:78:72:66:ff:f3:8b:85:
e4:02:32:a6:68:01:56:f5:25:25:40:34:6e:01:9e:7f:98:2b:
c5:c5:fa:9b:e5:96:32:86:f2:d8:97:89:04:0b:f7:7a:6b:9f:
c9:34:81:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:54 2026 by rpki-client