Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208685.roa
File: AS208685.roa (raw, json)
Hash identifier: zxSRoY0TdlPoQYcM6bf8UJYtLwBdYTlyIoHOJ26o6xs=
Subject key identifier: 4C:FB:3F:FB:41:1F:A0:DB:5A:BF:75:52:45:2C:E4:86:4D:19:C9:30
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3A09B97F65BCCAC2AD69196B0D92181AAA3E0F2F
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208685.roa
Signing time: Thu 03 Sep 2026 14:49:32 +0000
ROA not before: Thu 03 Sep 2026 14:44:32 +0000
ROA not after: Thu 02 Sep 2027 14:49:32 +0000
asID: 208685
IP address blocks: 45.148.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:09:b9:7f:65:bc:ca:c2:ad:69:19:6b:0d:92:18:1a:aa:3e:0f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 3 14:44:32 2026 GMT
Not After : Sep 2 14:49:32 2027 GMT
Subject: CN=4CFB3FFB411FA0DB5ABF7552452CE4864D19C930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:6f:d4:88:2d:a0:c5:37:09:c9:a4:50:08:
85:df:6f:b2:aa:10:69:70:29:e3:b5:85:f7:c1:23:
9c:60:92:8f:51:56:f7:41:7f:8c:75:e5:e6:f8:c1:
78:87:07:18:89:bc:1b:1a:76:73:ac:b5:f4:53:58:
7e:ec:f6:1c:fc:96:71:a9:de:a9:7e:33:fd:e8:72:
4c:f6:60:e6:2f:2e:db:95:21:de:3c:c5:28:43:f3:
c0:6b:e9:35:c7:e1:40:07:e2:4a:0f:76:89:9a:8c:
80:bb:df:05:ee:bf:cc:5d:d7:d5:78:c8:1c:a1:92:
da:a7:b2:0f:a1:aa:bb:33:53:8a:ad:2b:22:c1:ab:
4e:f1:85:65:3a:df:83:93:d2:fb:98:03:0b:4b:cf:
73:26:0f:b1:f0:6e:58:8e:07:dc:3a:af:d4:02:ea:
29:b0:ee:8c:61:58:bf:4f:99:59:6d:39:af:85:4f:
41:45:3f:24:3b:df:3d:b4:a8:b4:7d:16:57:c0:6a:
a3:7d:1e:ee:d0:73:ae:2c:17:38:0b:83:1a:82:cc:
cb:eb:81:b9:6e:6a:dd:57:6f:5e:d6:65:b6:65:4b:
42:2e:0e:b1:9e:42:d7:6b:07:17:ec:8d:4c:27:d3:
32:b5:c0:80:8b:f4:8d:04:42:bf:6e:c7:88:ad:62:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FB:3F:FB:41:1F:A0:DB:5A:BF:75:52:45:2C:E4:86:4D:19:C9:30
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.36.0/22
Signature Algorithm: sha256WithRSAEncryption
81:b0:38:10:aa:d2:b7:0a:e2:cb:77:a5:0a:b0:9c:b6:cb:a4:
06:69:c2:37:4b:53:44:da:d0:7c:cc:d7:d7:1a:1f:1a:1d:37:
61:2c:e4:dc:8c:40:30:10:6c:4d:0e:50:09:db:be:55:3b:00:
dc:eb:33:39:8a:e3:ba:1a:8e:a9:bc:9e:e9:79:88:11:87:8f:
1f:d7:d1:7b:ae:b2:18:46:ce:d7:cf:cb:70:bb:24:9e:0b:56:
62:26:97:96:37:82:e6:58:85:67:cc:a3:83:3e:ce:3a:4c:95:
35:79:b4:95:41:6f:e4:05:78:3f:05:f6:32:79:4b:de:5c:78:
f7:16:d0:a8:a8:93:b9:0c:3e:37:b8:cf:69:3c:68:b9:1d:11:
f4:36:17:ac:c9:a8:e5:6a:84:e3:87:16:a5:4e:3d:0d:12:54:
62:d7:c0:8d:c4:3b:09:b2:0c:29:c6:9b:2e:3b:fb:0f:e2:c6:
77:02:bd:2e:1b:8c:41:fe:49:06:64:4a:18:38:4a:17:7a:d9:
33:cc:18:24:29:08:01:93:6e:2a:d5:98:35:3d:2c:f4:40:70:
20:0f:99:89:be:f8:39:f0:92:19:13:2f:e2:6d:4c:af:9c:f0:
94:77:01:ad:28:e6:d3:65:f2:5e:ed:97:a2:32:9c:e8:bd:65:
31:b3:91:5a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUOgm5f2W8ysKtaRlrDZIYGqo+Dy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA5MDMxNDQ0MzJaFw0yNzA5MDIxNDQ5MzJaMDMxMTAvBgNV
BAMTKDRDRkIzRkZCNDExRkEwREI1QUJGNzU1MjQ1MkNFNDg2NEQxOUM5MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaI2/UiC2gxTcJyaRQCIXfb7Kq
EGlwKeO1hffBI5xgko9RVvdBf4x15eb4wXiHBxiJvBsadnOstfRTWH7s9hz8lnGp
3ql+M/3ockz2YOYvLtuVId48xShD88Br6TXH4UAH4koPdomajIC73wXuv8xd19V4
yByhktqnsg+hqrszU4qtKyLBq07xhWU634OT0vuYAwtLz3MmD7HwbliOB9w6r9QC
6imw7oxhWL9PmVltOa+FT0FFPyQ73z20qLR9FlfAaqN9Hu7Qc64sFzgLgxqCzMvr
gbluat1Xb17WZbZlS0IuDrGeQtdrBxfsjUwn0zK1wICL9I0EQr9ux4itYgyXAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUTPs/+0EfoNtav3VSRSzkhk0ZyTAwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjA4Njg1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZQk
MA0GCSqGSIb3DQEBCwUAA4IBAQCBsDgQqtK3CuLLd6UKsJy2y6QGacI3S1NE2tB8
zNfXGh8aHTdhLOTcjEAwEGxNDlAJ275VOwDc6zM5iuO6Go6pvJ7peYgRh48f19F7
rrIYRs7Xz8twuySeC1ZiJpeWN4LmWIVnzKODPs46TJU1ebSVQW/kBXg/BfYyeUve
XHj3FtCoqJO5DD43uM9pPGi5HRH0NhesyajlaoTjhxalTj0NElRi18CNxDsJsgwp
xpsuO/sP4sZ3Ar0uG4xB/kkGZEoYOEoXetkzzBgkKQgBk24q1Zg1PSz0QHAgD5mJ
vvg58JIZEy/ibUyvnPCUdwGtKObTZfJe7ZeiMpzovWUxs5Fa
-----END CERTIFICATE-----
Generated at Fri Sep 4 15:21:33 2026 by rpki-client