Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208711.roa
File: AS208711.roa (raw, json)
Hash identifier: dorKPiDVBoLEd/NHvk2jYpY/hLFYNZHaTxip9qHZPdE=
Subject key identifier: B2:2A:F5:6C:1E:88:B2:7A:A0:5A:68:88:EE:84:7C:05:8F:36:E6:76
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 344D18A0E8484609227B3AF9FDC84A293F8C9C16
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208711.roa
Signing time: Fri 24 Apr 2026 21:08:33 +0000
ROA not before: Fri 24 Apr 2026 21:03:33 +0000
ROA not after: Fri 23 Apr 2027 21:08:33 +0000
asID: 208711
IP address blocks: 2a0f:85c1:c3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4d:18:a0:e8:48:46:09:22:7b:3a:f9:fd:c8:4a:29:3f:8c:9c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 24 21:03:33 2026 GMT
Not After : Apr 23 21:08:33 2027 GMT
Subject: CN=B22AF56C1E88B27AA05A6888EE847C058F36E676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:e5:e6:2e:bd:06:9e:62:8d:97:ab:38:cb:
20:7a:3c:18:91:8a:93:34:50:e5:d6:fc:d0:a7:1b:
d4:9c:cf:76:3e:8a:fd:be:81:27:38:80:fc:88:9e:
62:ec:9c:d8:95:1e:f5:f5:b5:60:6e:c8:12:b4:69:
ae:09:5d:33:bf:f7:1e:4d:e6:1e:a7:5d:0a:82:bc:
f7:e1:09:82:0d:0c:5c:6b:0c:03:a2:dc:f7:d7:7b:
30:c2:13:ee:e6:6a:4a:3b:63:f6:a9:6d:1c:89:30:
5e:a9:90:bd:71:af:0d:aa:f7:25:c8:5a:9e:17:22:
f0:d6:9b:b3:bf:3c:d0:23:9b:4a:0a:76:9a:f8:0a:
cb:b2:f0:0d:e0:d6:e6:af:89:ca:47:02:5d:d1:63:
05:76:74:66:ba:3d:2d:1f:7c:ad:7d:e0:ae:3d:06:
8e:10:b4:a7:dc:74:5d:9e:76:09:26:5d:45:75:96:
19:07:83:81:64:39:ca:07:39:e6:32:dc:80:67:70:
ed:d0:1c:99:4f:67:87:e4:85:7c:76:9c:58:fd:5a:
91:42:af:03:ee:75:c3:c0:95:04:25:1e:f8:d5:74:
f0:ce:9e:e3:80:76:fd:37:c3:c8:eb:18:5e:93:84:
c8:05:0f:b9:18:a3:29:5a:47:8f:93:f7:05:17:83:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:F5:6C:1E:88:B2:7A:A0:5A:68:88:EE:84:7C:05:8F:36:E6:76
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c3a::/48
Signature Algorithm: sha256WithRSAEncryption
32:19:c7:de:60:cd:5f:29:2e:0e:06:2f:82:59:62:d5:64:e7:
81:7d:19:ac:c0:a3:ba:98:74:f9:30:e5:14:86:36:8b:87:27:
9a:c4:da:bc:bd:81:af:04:74:fd:93:a0:fc:7f:08:21:b5:d1:
07:c2:d9:31:17:58:26:52:26:cd:f5:17:dc:48:cd:29:44:f1:
db:18:44:d2:29:d0:1e:52:9b:89:81:6a:76:56:42:8a:87:7c:
d8:24:89:59:7e:5a:92:25:c5:f9:00:03:94:d3:b3:5e:6d:9c:
12:06:0c:a8:eb:10:05:5e:ce:07:b0:7f:19:3f:31:00:4a:78:
a5:ce:2b:23:5c:f4:cd:44:6b:ec:ce:86:35:f5:67:6c:2f:2f:
37:54:7a:b6:db:2d:90:c4:ac:1f:1a:97:68:28:47:38:57:1d:
a7:46:2c:45:e2:56:b4:bb:aa:6a:a0:24:e5:ef:9a:5c:40:96:
a4:8f:58:89:01:3d:b4:3f:b8:d6:89:06:35:db:82:3d:c0:06:
eb:93:96:33:d1:c4:7d:68:46:3f:ad:31:db:cb:1b:d0:a7:89:
38:0d:02:6b:9a:a2:8b:14:66:ac:29:e8:05:7e:ab:bd:81:9f:
6a:4a:b9:ad:76:fa:bd:d0:55:af:94:00:fd:89:2b:22:f6:44:
5c:91:8b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:24:39 2026 by rpki-client