Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208063.roa
File: AS208063.roa (raw, json)
Hash identifier: 0ipTDe0dZLJHJxGRXQI7ZxRzIefdbaWxGp6R0oyfOMQ=
Subject key identifier: 62:F5:03:3C:A0:ED:FD:B9:DE:BF:40:ED:DC:AD:06:1B:50:75:0A:D2
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1E63B5FD9A68A4E03171A352CEE63B87C9F820B9
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208063.roa
Signing time: Sat 25 Oct 2025 01:51:27 +0000
ROA not before: Sat 25 Oct 2025 01:46:27 +0000
ROA not after: Sat 24 Oct 2026 01:51:27 +0000
asID: 208063
IP address blocks: 193.111.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:63:b5:fd:9a:68:a4:e0:31:71:a3:52:ce:e6:3b:87:c9:f8:20:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 25 01:46:27 2025 GMT
Not After : Oct 24 01:51:27 2026 GMT
Subject: CN=62F5033CA0EDFDB9DEBF40EDDCAD061B50750AD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:ad:dd:5f:4a:84:af:c6:39:fb:44:2c:1e:
e6:49:f1:6b:50:4d:b2:dc:47:13:87:f3:c4:04:f7:
f2:aa:5f:f5:4a:5f:df:ba:e4:6d:81:24:dc:ac:a1:
8c:b9:ca:65:53:49:13:82:e8:90:ab:f1:0f:31:b8:
48:54:23:35:cd:90:be:e0:3c:c2:85:e1:2f:c8:0d:
95:0d:fd:66:ec:d4:63:52:68:d4:bf:c6:ce:74:7a:
3f:60:9b:00:02:f7:3f:f9:46:c9:f0:ed:7e:a0:18:
a6:8d:70:70:07:55:49:06:ed:db:2a:5e:8e:5a:18:
7a:f2:b8:e3:c4:80:77:04:05:5b:96:77:41:e5:da:
ca:29:c5:ab:25:b7:c5:15:54:91:42:36:de:5d:3a:
12:84:96:a3:64:f6:3d:ad:8f:50:49:73:56:56:71:
89:81:76:c7:03:3b:f0:1f:81:09:f6:c4:59:0d:3e:
4b:90:72:3d:96:84:43:7b:56:2e:ba:f3:3b:df:3f:
25:7f:3a:b4:20:f6:44:20:7d:5d:c3:a2:93:5f:64:
e3:57:39:13:cc:bd:d8:4f:86:6e:10:7d:d9:de:7f:
43:bd:44:de:e1:1c:8d:35:8f:89:ed:0e:e1:0c:4f:
97:79:23:6e:d2:9e:f5:f5:4a:69:5c:40:89:a0:2f:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F5:03:3C:A0:ED:FD:B9:DE:BF:40:ED:DC:AD:06:1B:50:75:0A:D2
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208063.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.124.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ba:dc:83:57:7d:cf:c3:c4:eb:71:6c:4c:34:5f:22:cd:7f:
24:e2:88:df:59:e4:f2:3b:3f:16:8c:42:69:90:64:85:bb:e8:
ec:5d:a5:fe:a3:d8:66:4d:5e:6d:2e:ad:ac:fd:3d:4e:70:89:
d0:31:13:ad:02:a8:68:42:22:60:95:b7:b7:00:d2:4f:22:d5:
16:99:8c:e7:8b:0b:99:1c:ba:83:34:31:73:a2:f0:ed:dd:59:
fc:aa:c6:a7:16:ba:50:63:fc:a4:9a:15:22:b9:b2:91:7a:8f:
d0:cc:61:fc:70:ed:ac:47:17:c5:92:7b:94:6b:a8:e4:57:ae:
9a:4c:91:ae:5c:ad:df:8f:bb:09:47:bc:8a:45:33:2b:02:fc:
c0:49:08:f0:0b:af:05:80:c0:84:4b:f0:8d:f0:c8:bf:a9:70:
b5:26:b8:e6:40:4d:ae:9c:a6:07:9a:4d:69:f5:3c:66:95:51:
82:eb:ff:7e:53:79:97:9e:d7:6d:81:39:95:99:dd:7e:f4:c0:
62:4e:f7:f5:05:f2:e7:cc:1a:e3:a4:b1:cb:94:51:de:47:3b:
8c:8c:ed:75:1b:dd:70:a4:1d:8d:d3:5d:51:7e:c6:7e:b6:be:
84:50:09:5e:ed:2f:e6:f8:ca:61:41:a7:2c:b6:a4:8f:c1:3e:
48:8c:d6:b6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHmO1/ZpopOAxcaNSzuY7h8n4ILkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTEwMjUwMTQ2MjdaFw0yNjEwMjQwMTUxMjdaMDMxMTAvBgNV
BAMTKDYyRjUwMzNDQTBFREZEQjlERUJGNDBFRERDQUQwNjFCNTA3NTBBRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5g63dX0qEr8Y5+0QsHuZJ8WtQ
TbLcRxOH88QE9/KqX/VKX9+65G2BJNysoYy5ymVTSROC6JCr8Q8xuEhUIzXNkL7g
PMKF4S/IDZUN/Wbs1GNSaNS/xs50ej9gmwAC9z/5Rsnw7X6gGKaNcHAHVUkG7dsq
Xo5aGHryuOPEgHcEBVuWd0Hl2sopxaslt8UVVJFCNt5dOhKElqNk9j2tj1BJc1ZW
cYmBdscDO/AfgQn2xFkNPkuQcj2WhEN7Vi668zvfPyV/OrQg9kQgfV3DopNfZONX
ORPMvdhPhm4Qfdnef0O9RN7hHI01j4ntDuEMT5d5I27SnvX1SmlcQImgL9iNAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUYvUDPKDt/bnev0Dt3K0GG1B1CtIwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjA4MDYzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW98
MA0GCSqGSIb3DQEBCwUAA4IBAQBputyDV33Pw8TrcWxMNF8izX8k4ojfWeTyOz8W
jEJpkGSFu+jsXaX+o9hmTV5tLq2s/T1OcInQMROtAqhoQiJglbe3ANJPItUWmYzn
iwuZHLqDNDFzovDt3Vn8qsanFrpQY/ykmhUiubKReo/QzGH8cO2sRxfFknuUa6jk
V66aTJGuXK3fj7sJR7yKRTMrAvzASQjwC68FgMCES/CN8Mi/qXC1JrjmQE2unKYH
mk1p9TxmlVGC6/9+U3mXntdtgTmVmd1+9MBiTvf1BfLnzBrjpLHLlFHeRzuMjO11
G91wpB2N011RfsZ+tr6EUAle7S/m+MphQacstqSPwT5IjNa2
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:32:29 2025 by rpki-client