Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208301.roa
File: AS208301.roa (raw, json)
Hash identifier: yZitRmNg/HJUT+2K4Qc86yD2/9q/vNUPNlGTGL3cP6c=
Subject key identifier: 98:62:6F:C1:34:9A:3C:2E:EA:6E:EA:2D:D7:C4:9C:28:46:46:A6:E9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3430AC3F29D03A20AABCFCE700896E118266AC69
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208301.roa
Signing time: Thu 09 Jul 2026 11:08:49 +0000
ROA not before: Thu 09 Jul 2026 11:03:49 +0000
ROA not after: Thu 08 Jul 2027 11:08:49 +0000
asID: 208301
IP address blocks: 2a0f:85c1:c46::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:30:ac:3f:29:d0:3a:20:aa:bc:fc:e7:00:89:6e:11:82:66:ac:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:49 2026 GMT
Not After : Jul 8 11:08:49 2027 GMT
Subject: CN=98626FC1349A3C2EEA6EEA2DD7C49C284646A6E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:5d:b2:b7:8c:af:f6:cb:27:db:89:ec:93:
37:ec:94:7e:33:2c:70:1e:2e:37:00:1b:f8:85:72:
9a:e8:41:5b:91:24:81:ee:a2:4f:55:5a:2b:fd:05:
a3:50:3f:c5:82:15:a3:19:a3:9c:ff:ba:bc:02:60:
24:7e:0e:77:0a:f3:3a:3b:38:70:aa:a4:35:41:48:
bf:f2:77:c7:5f:66:b4:ea:0f:aa:08:48:a8:0a:be:
e6:eb:72:58:90:3a:43:23:98:80:4c:62:81:94:e3:
d4:c2:35:8d:8d:bf:cb:5b:05:31:83:f3:03:72:63:
9c:cc:fc:a6:f1:86:cf:c7:28:f8:1d:8a:48:4b:ec:
7f:9d:f9:91:8d:6c:3d:71:58:76:fd:e1:b4:7f:89:
04:37:d4:56:08:89:f3:53:1c:19:6d:4e:59:71:a9:
0a:ea:4b:27:6d:89:29:f5:0a:dd:7a:00:f0:a4:79:
ad:48:ac:03:9c:ad:3b:f3:95:30:47:d3:57:20:3a:
11:0a:8d:cc:1b:f6:57:b8:b0:1e:23:7b:c8:97:73:
aa:68:4a:86:ee:b2:0d:df:ff:a9:c9:ff:81:a2:1a:
96:1f:1e:2b:b7:d5:e0:6c:03:2c:6e:23:a4:9d:2c:
aa:7a:e6:66:b4:df:18:55:4a:bc:4d:71:fc:69:88:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:62:6F:C1:34:9A:3C:2E:EA:6E:EA:2D:D7:C4:9C:28:46:46:A6:E9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208301.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c46::/48
Signature Algorithm: sha256WithRSAEncryption
db:3e:b8:52:8e:c0:2d:de:c6:a3:9a:6a:5e:fc:d1:a6:d1:4c:
dd:6a:82:e5:a7:46:96:4a:52:bd:68:bf:ef:17:8a:06:ed:f6:
26:8b:69:be:70:de:64:54:95:b3:1a:53:5e:cf:65:2b:d3:93:
11:60:ec:e6:a2:d6:5f:97:78:da:e9:c2:92:de:bf:3a:30:48:
71:e6:95:27:4a:58:3d:ed:2a:59:04:e5:aa:c2:49:23:98:b4:
3e:50:bf:a8:99:1c:0d:f6:0f:ba:97:ec:b4:be:76:1a:41:15:
2f:69:af:c5:13:5b:55:6e:8f:52:a3:2d:77:00:b4:15:22:65:
a5:0e:3c:a4:a2:a5:8b:2f:1a:af:b5:f9:99:ae:f7:87:4e:c5:
3f:04:4d:2f:bc:04:d8:55:30:66:40:dc:29:7a:1d:c4:68:c4:
99:a3:85:22:5c:cc:ef:9e:0f:c2:4f:89:5a:5b:f0:15:21:6b:
1d:1b:71:4e:93:f3:36:26:63:d5:47:88:38:e4:02:9f:33:ce:
8e:c6:00:57:b5:f5:e1:ca:15:e5:60:fd:b2:06:2f:3d:2a:17:
38:91:03:46:26:6c:fa:fa:27:f4:68:e0:54:f2:e9:b2:94:30:
fe:cc:f4:26:91:64:d1:5c:5f:9b:1d:ca:20:98:8c:79:7a:f3:
44:b2:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:09 2026 by rpki-client