Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208711.roa
File: AS208711.roa (raw, json)
Hash identifier: JeNRTuYUuQsZaQWstuKNVLqD6UypDunLUwtdGBjnoWQ=
Subject key identifier: B3:53:CD:A6:44:3A:D0:03:B2:91:C0:98:96:5E:39:F1:67:9D:D0:52
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 19C30EA76584A8AF49D8B34AAB86EFEF0530047B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208711.roa
Signing time: Fri 23 May 2025 21:07:26 +0000
ROA not before: Fri 23 May 2025 21:02:26 +0000
ROA not after: Fri 22 May 2026 21:07:26 +0000
asID: 208711
IP address blocks: 2a0f:85c1:c3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c3:0e:a7:65:84:a8:af:49:d8:b3:4a:ab:86:ef:ef:05:30:04:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 23 21:02:26 2025 GMT
Not After : May 22 21:07:26 2026 GMT
Subject: CN=B353CDA6443AD003B291C098965E39F1679DD052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5f:03:bb:8c:98:10:de:cc:bc:4a:f9:50:2d:
27:12:ba:59:2a:8c:b7:09:f1:3b:7c:f0:98:78:25:
c3:8d:3a:b0:5b:c1:63:33:27:a2:9e:e8:4b:1d:dd:
a8:13:ca:ef:2a:b7:25:4f:d7:75:9c:5f:35:8b:77:
11:fb:06:84:bf:99:e4:05:b4:79:76:e7:2b:3a:63:
7e:3e:a8:79:ac:e3:bf:3a:9d:10:86:9c:5e:13:ff:
a6:94:a9:27:e2:29:1f:b4:c4:5f:7e:37:81:41:e5:
7d:1d:dd:4e:54:97:5f:c2:3b:d2:59:6e:4b:7a:c1:
d9:6c:3d:8b:7e:34:88:c9:53:05:96:fd:ad:78:ca:
45:69:ec:70:64:d9:d8:2c:c1:6d:a0:b3:38:70:86:
bb:f8:d8:9c:76:7f:f7:5b:8e:3e:05:95:58:d6:79:
ab:da:98:3c:f6:c8:d7:31:d3:88:d2:cd:66:5d:b5:
68:e6:21:9c:a3:7c:9c:0d:e4:6b:88:ac:06:60:9b:
6c:74:8e:4a:f0:7e:5d:1f:ad:3a:40:5d:8c:48:cd:
42:8f:13:40:c9:44:0d:bc:33:53:6d:58:69:8f:01:
a2:55:9a:2a:2b:33:dc:e0:a2:b5:07:b4:37:33:0c:
82:28:28:de:81:bc:2a:dc:98:24:e4:2d:b2:dc:16:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:CD:A6:44:3A:D0:03:B2:91:C0:98:96:5E:39:F1:67:9D:D0:52
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c3a::/48
Signature Algorithm: sha256WithRSAEncryption
a2:66:c8:0a:36:ca:16:8f:83:7b:d6:f9:6f:9a:13:3d:a8:69:
05:0b:62:ba:5e:70:1f:f1:59:35:44:34:56:4b:6e:7b:4d:55:
1e:79:e3:69:90:5b:a9:0e:a3:5a:90:8e:50:bc:58:79:0b:bf:
cb:6a:b5:d6:af:c9:9e:bf:fe:af:15:9c:8a:6b:67:b5:7e:20:
91:7f:c0:5f:ea:76:7a:33:00:78:17:16:b8:31:c6:df:c5:59:
6c:d4:4a:31:cc:65:e5:f9:04:83:d6:78:cc:d2:bc:38:dd:79:
27:a2:3a:f2:60:5c:b4:1b:cc:02:a1:fe:4b:26:84:04:19:27:
74:f8:1f:84:73:dc:a2:d4:80:0b:27:fc:49:19:36:c9:56:39:
6a:8d:57:e7:ae:d8:8b:1f:bd:bd:0f:07:bc:de:c3:cf:e6:2f:
89:be:6a:c8:64:0b:0d:47:32:fd:10:e1:f4:85:64:5c:ac:e5:
32:d5:4c:d9:c4:50:c1:b8:c0:d9:b0:a6:cb:2d:14:5f:50:0a:
ef:4e:7a:05:5e:39:92:7b:6f:6f:13:4b:f8:25:bb:a7:0d:d2:
57:d3:61:e2:d4:98:48:63:a6:ca:60:f7:02:7c:af:ba:f1:09:
72:3d:d3:5d:1e:2b:4a:5e:a9:86:ed:29:97:a3:e5:db:34:6f:
45:ee:74:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUGcMOp2WEqK9J2LNKq4bv7wUwBHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA1MjMyMTAyMjZaFw0yNjA1MjIyMTA3MjZaMDMxMTAvBgNV
BAMTKEIzNTNDREE2NDQzQUQwMDNCMjkxQzA5ODk2NUUzOUYxNjc5REQwNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdXwO7jJgQ3sy8SvlQLScSulkq
jLcJ8Tt88Jh4JcONOrBbwWMzJ6Ke6Esd3agTyu8qtyVP13WcXzWLdxH7BoS/meQF
tHl25ys6Y34+qHms4786nRCGnF4T/6aUqSfiKR+0xF9+N4FB5X0d3U5Ul1/CO9JZ
bkt6wdlsPYt+NIjJUwWW/a14ykVp7HBk2dgswW2gszhwhrv42Jx2f/dbjj4FlVjW
eavamDz2yNcx04jSzWZdtWjmIZyjfJwN5GuIrAZgm2x0jkrwfl0frTpAXYxIzUKP
E0DJRA28M1NtWGmPAaJVmiorM9zgorUHtDczDIIoKN6BvCrcmCTkLbLcFrzVAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUs1PNpkQ60AOykcCYll458Wed0FIwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA4NzExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQw6MA0GCSqGSIb3DQEBCwUAA4IBAQCiZsgKNsoWj4N71vlvmhM9qGkFC2K6XnAf
8Vk1RDRWS257TVUeeeNpkFupDqNakI5QvFh5C7/LarXWr8mev/6vFZyKa2e1fiCR
f8Bf6nZ6MwB4Fxa4McbfxVls1EoxzGXl+QSD1njM0rw43XknojryYFy0G8wCof5L
JoQEGSd0+B+Ec9yi1IALJ/xJGTbJVjlqjVfnrtiLH729Dwe83sPP5i+JvmrIZAsN
RzL9EOH0hWRcrOUy1UzZxFDBuMDZsKbLLRRfUArvTnoFXjmSe29vE0v4JbunDdJX
02Hi1JhIY6bKYPcCfK+68QlyPdNdHitKXqmG7SmXo+XbNG9F7nQy
-----END CERTIFICATE-----
Generated at Tue Jun 3 10:14:30 2025 by rpki-client