Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208755.roa
File: AS208755.roa (raw, json)
Hash identifier: /ZuD8VLM1/dyxx8RAD8F5v/nY5r29Q4eAF5JoW7C7ds=
Subject key identifier: 6F:AD:05:65:A0:4D:55:15:CF:12:D8:44:83:36:E2:A2:C8:8A:7E:AE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7615DD159139B4E6402AE2616474833087117D1B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208755.roa
Signing time: Thu 15 May 2025 00:58:42 +0000
ROA not before: Thu 15 May 2025 00:53:42 +0000
ROA not after: Thu 14 May 2026 00:58:42 +0000
asID: 208755
IP address blocks: 2a0f:85c1:c3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:15:dd:15:91:39:b4:e6:40:2a:e2:61:64:74:83:30:87:11:7d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 15 00:53:42 2025 GMT
Not After : May 14 00:58:42 2026 GMT
Subject: CN=6FAD0565A04D5515CF12D8448336E2A2C88A7EAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9d:8b:0a:09:ac:c3:70:31:f1:51:a3:6e:dc:
5b:1e:51:7d:b6:13:19:03:a0:1c:0b:c8:69:61:06:
73:0f:0b:f1:47:d5:ec:31:9a:29:85:78:c9:84:8c:
94:17:64:9f:f0:ee:85:d1:3f:85:89:22:79:82:9d:
19:6b:3c:2a:b3:88:b6:25:eb:82:98:55:b7:66:6d:
e0:7a:c9:b6:13:95:e7:b5:fb:1a:de:6c:38:33:06:
d6:1e:9e:bc:bc:7b:2a:70:e1:40:d0:11:ce:05:55:
8b:ab:95:42:1d:5f:99:84:6e:5b:25:8c:84:5d:5e:
a2:ba:7f:2b:e7:6d:a9:57:dc:34:d0:a1:3a:57:85:
38:50:d8:40:91:7c:66:29:90:a3:f3:4a:7b:cb:3c:
02:6d:9e:a6:87:03:6e:3b:81:4c:8d:ba:6b:49:c0:
8f:e7:d2:67:c0:f1:bd:fd:a5:7f:16:55:a2:c9:ce:
d0:96:b0:44:b5:d5:5c:95:2f:d0:71:28:64:d7:61:
fd:fe:1e:d4:87:50:ec:d5:e2:6a:7e:00:77:d8:50:
16:7e:f2:e3:77:08:db:be:33:76:6d:c6:0a:78:5d:
5e:00:68:29:93:ac:ea:a6:0e:3f:f0:33:19:f7:85:
b2:9b:98:e3:1b:34:17:33:02:85:88:f5:5e:8e:c4:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AD:05:65:A0:4D:55:15:CF:12:D8:44:83:36:E2:A2:C8:8A:7E:AE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208755.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c3c::/48
Signature Algorithm: sha256WithRSAEncryption
37:bd:4c:ac:db:f0:0e:9b:44:1e:bf:be:6f:24:7b:7a:97:24:
0c:67:dd:c1:27:62:3f:ba:6a:f7:44:0a:82:48:e3:0a:a4:10:
2b:77:51:9b:0c:cc:1e:93:1f:d7:fc:34:a7:9d:ec:06:29:bd:
f8:2d:2e:ea:be:3f:56:9f:27:f5:92:4b:ed:83:ab:aa:92:ca:
af:f1:70:73:fc:79:75:aa:fc:88:c1:8f:ea:1b:69:d6:53:d1:
31:21:b6:b7:83:fe:01:b5:a4:56:1d:7b:19:62:84:92:16:d4:
04:ee:ce:38:c1:b3:61:54:05:65:e5:1d:99:b6:1a:68:10:7d:
6f:42:86:c6:cb:8f:dc:3c:1b:7e:26:c7:81:c9:be:74:66:ed:
ff:37:8c:6e:c9:3d:57:84:a5:67:6e:95:a4:4a:51:80:7a:39:
07:de:49:79:3b:48:0b:bd:da:d6:e1:ed:12:eb:7f:c7:9e:43:
ae:6c:2b:51:e6:c8:f8:81:7a:87:c7:ee:7e:51:c3:5e:6d:b2:
53:a8:1e:cc:92:89:a7:e1:a7:76:be:19:71:f7:e7:42:89:0e:
90:e6:cf:46:cd:d6:c8:f0:94:c7:9a:00:fb:33:52:9d:60:79:
d9:ef:9b:5d:99:56:62:23:c2:6b:23:95:f8:d5:8e:96:49:4d:
f9:00:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:20:27 2025 by rpki-client