Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208453.roa
File: AS208453.roa (raw, json)
Hash identifier: 5B59uNktzdNeITF49lasyeze9Hy/AF3cH2iu1UjfURI=
Subject key identifier: 50:4C:0A:ED:1D:90:94:02:30:89:0E:CE:BB:22:37:C9:8D:08:63:9E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 618620E193BDC1A38E9A718C044FF3424CE032FB
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208453.roa
Signing time: Fri 10 Jul 2026 15:13:08 +0000
ROA not before: Fri 10 Jul 2026 15:08:08 +0000
ROA not after: Fri 09 Jul 2027 15:13:08 +0000
asID: 208453
IP address blocks: 193.142.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 04:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:86:20:e1:93:bd:c1:a3:8e:9a:71:8c:04:4f:f3:42:4c:e0:32:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 10 15:08:08 2026 GMT
Not After : Jul 9 15:13:08 2027 GMT
Subject: CN=504C0AED1D90940230890ECEBB2237C98D08639E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:af:47:39:a0:b6:68:b2:a2:b9:0d:65:6d:
db:29:b6:a5:ed:b6:0c:94:25:c4:cd:52:0c:ed:22:
a1:81:7c:f2:5a:f5:95:31:3e:d9:cf:f3:14:a5:34:
06:27:67:e3:04:21:97:8b:2f:1d:3e:8f:3a:b0:dd:
25:c5:d9:45:e6:c8:24:26:6c:58:81:6e:98:57:48:
8e:f3:1f:a5:81:a6:d5:9d:58:51:94:95:8e:86:2d:
52:cc:34:7e:10:0f:62:17:b4:7d:d6:66:ab:79:ea:
c9:9d:e7:f4:6c:66:65:2a:0a:29:9f:04:10:22:78:
d6:20:b5:77:76:37:16:70:cf:21:24:44:0b:e3:8c:
e2:8e:22:73:81:ad:2d:64:54:5a:e9:a0:0d:d8:f6:
85:7f:2d:d3:ce:19:cf:b8:5f:d4:a5:d1:f5:5d:14:
a7:70:55:2c:01:d2:b4:dc:13:2a:7a:52:15:36:1e:
0a:17:56:db:37:5b:9f:cc:50:d9:de:e9:14:73:75:
f1:e1:16:dd:49:10:4d:64:22:9d:3c:fb:9e:e0:8a:
4a:9a:91:0d:3c:50:8f:43:d6:56:32:b3:ae:81:05:
70:f4:59:cd:a4:b5:9c:60:a2:70:43:fd:b1:c0:be:
f7:d1:ac:24:33:d7:31:61:3f:d9:34:95:de:f1:24:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4C:0A:ED:1D:90:94:02:30:89:0E:CE:BB:22:37:C9:8D:08:63:9E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208453.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.4.0/24
Signature Algorithm: sha256WithRSAEncryption
52:11:f3:75:0c:8d:4c:51:00:04:7f:9e:91:a0:a8:24:76:8e:
04:7f:f4:e5:11:cc:66:df:f7:6e:5e:d6:52:a1:a8:94:69:0b:
0e:d6:c5:ca:79:66:cb:ae:80:b2:a6:41:d9:21:a7:66:2f:e3:
00:c3:31:39:09:d8:5e:79:b1:44:8a:9b:68:9e:ed:dc:8c:a6:
a6:b8:35:90:13:a6:ef:5e:bc:79:d0:67:06:a3:f4:68:b6:b1:
82:17:72:ac:81:19:cc:e1:e7:b5:f7:7a:68:58:7b:e8:da:e3:
a4:07:3c:69:c3:92:9b:5b:94:8b:3e:bd:bd:d6:41:27:65:51:
fb:1c:79:ff:b9:ea:18:b3:bb:45:dd:69:cb:1a:74:d4:98:94:
8c:eb:2a:a1:5e:dc:af:e8:f7:25:0c:91:f8:75:60:c0:c7:a8:
dc:0e:04:c4:17:81:a1:ce:28:44:40:bf:11:57:33:15:c2:75:
2b:7a:28:1b:00:2c:65:cb:7e:7d:b1:8e:8d:c4:25:37:01:e4:
8e:df:e8:6a:22:05:94:8e:6f:6c:c8:5c:c9:4d:b7:66:d0:25:
62:aa:2c:86:74:17:8c:f0:fc:5c:41:92:dd:9a:81:14:8d:c0:
38:27:28:7e:d1:a5:28:62:bc:95:ef:3d:d5:df:57:22:00:55:
27:9d:cc:c9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUYYYg4ZO9waOOmnGMBE/zQkzgMvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA3MTAxNTA4MDhaFw0yNzA3MDkxNTEzMDhaMDMxMTAvBgNV
BAMTKDUwNEMwQUVEMUQ5MDk0MDIzMDg5MEVDRUJCMjIzN0M5OEQwODYzOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ha9HOaC2aLKiuQ1lbdsptqXt
tgyUJcTNUgztIqGBfPJa9ZUxPtnP8xSlNAYnZ+MEIZeLLx0+jzqw3SXF2UXmyCQm
bFiBbphXSI7zH6WBptWdWFGUlY6GLVLMNH4QD2IXtH3WZqt56smd5/RsZmUqCimf
BBAieNYgtXd2NxZwzyEkRAvjjOKOInOBrS1kVFrpoA3Y9oV/LdPOGc+4X9Sl0fVd
FKdwVSwB0rTcEyp6UhU2HgoXVts3W5/MUNne6RRzdfHhFt1JEE1kIp08+57gikqa
kQ08UI9D1lYys66BBXD0Wc2ktZxgonBD/bHAvvfRrCQz1zFhP9k0ld7xJIolAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUUEwK7R2QlAIwiQ7OuyI3yY0IY54wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjA4NDUzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY4E
MA0GCSqGSIb3DQEBCwUAA4IBAQBSEfN1DI1MUQAEf56RoKgkdo4Ef/TlEcxm3/du
XtZSoaiUaQsO1sXKeWbLroCypkHZIadmL+MAwzE5CdheebFEiptonu3cjKamuDWQ
E6bvXrx50GcGo/RotrGCF3KsgRnM4ee193poWHvo2uOkBzxpw5KbW5SLPr291kEn
ZVH7HHn/ueoYs7tF3WnLGnTUmJSM6yqhXtyv6PclDJH4dWDAx6jcDgTEF4GhzihE
QL8RVzMVwnUreigbACxly359sY6NxCU3AeSO3+hqIgWUjm9syFzJTbdm0CViqiyG
dBeM8PxcQZLdmoEUjcA4Jyh+0aUoYryV7z3V31ciAFUnnczJ
-----END CERTIFICATE-----
Generated at Mon Jul 13 13:04:52 2026 by rpki-client