Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208790.roa
File: AS208790.roa (raw, json)
Hash identifier: GfKk5hDkjYMljXcruXLNiqu2+28tck23ngB/rbO7I+A=
Subject key identifier: 41:39:3F:73:03:0E:70:EA:0F:DA:2E:19:2C:C3:06:F4:7B:2A:49:5B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7A6331FA793116A7235BA24FB44930233642F684
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208790.roa
Signing time: Mon 20 Jul 2026 21:08:53 +0000
ROA not before: Mon 20 Jul 2026 21:03:53 +0000
ROA not after: Mon 19 Jul 2027 21:08:53 +0000
asID: 208790
IP address blocks: 2a0f:85c1:c1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:63:31:fa:79:31:16:a7:23:5b:a2:4f:b4:49:30:23:36:42:f6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:53 2026 GMT
Not After : Jul 19 21:08:53 2027 GMT
Subject: CN=41393F73030E70EA0FDA2E192CC306F47B2A495B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:89:3c:00:3f:63:2f:08:eb:71:73:e4:f9:
15:df:1b:73:9b:86:67:74:b7:84:dc:ce:96:d2:e0:
55:93:50:c5:fa:60:b8:e6:21:da:69:54:99:c1:55:
e8:75:65:85:52:4b:4e:0a:71:2b:88:6d:70:92:29:
09:50:60:70:c3:7a:8f:c5:f6:6b:62:d6:dd:7a:ea:
2f:52:ca:d7:8c:8e:bd:2c:91:bc:dd:ed:c9:42:a2:
65:84:ef:b9:b9:e8:2d:4e:0f:ca:f7:39:09:cc:ae:
2f:b8:aa:d2:eb:e2:9d:34:aa:5c:29:db:dc:44:a4:
ae:f4:89:08:9f:12:e4:da:ab:f6:cf:f5:87:40:fe:
b1:f0:49:73:54:f7:1f:49:92:e5:a3:3b:65:70:33:
07:f6:ae:85:28:86:26:56:91:0b:49:ed:9a:95:b3:
e4:83:f4:46:c5:db:86:4c:33:45:41:f7:df:d7:e8:
4c:17:aa:42:db:59:52:88:80:80:9e:c5:aa:6e:ca:
41:3d:c3:d9:d3:22:7c:ca:28:06:77:8f:f2:0c:92:
be:8d:9e:68:a5:62:0c:a7:7d:bf:c9:a4:a9:45:a8:
13:a7:84:33:9f:93:52:6f:66:0b:48:3b:69:7b:40:
e0:da:80:8d:55:62:31:60:b2:f1:4e:63:05:28:1f:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:39:3F:73:03:0E:70:EA:0F:DA:2E:19:2C:C3:06:F4:7B:2A:49:5B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208790.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c1a::/48
Signature Algorithm: sha256WithRSAEncryption
9d:c9:c9:e1:be:32:65:8b:c7:17:c4:c4:50:5d:32:bf:0d:f6:
f8:26:46:a6:f0:b8:22:59:72:98:d6:6a:2d:26:3e:1b:09:a8:
62:3e:03:e5:5c:68:43:2a:27:60:3b:9f:84:30:5f:42:57:44:
68:a7:8a:42:20:17:9c:35:fb:f1:47:74:7d:fd:4c:e1:0c:46:
58:3d:02:a7:d7:92:1b:ec:56:f3:5f:06:60:86:2f:87:a8:08:
72:10:af:01:e0:af:fe:8d:94:5c:29:e8:04:ab:2c:4f:33:59:
56:fd:c8:7e:a9:32:05:96:f1:ca:7e:8c:6b:c1:6b:b8:e5:07:
41:45:ba:53:7c:00:75:16:59:a3:3a:6f:77:6d:5d:6e:6c:a4:
cb:27:dd:b4:da:b5:a0:45:b1:10:4b:4e:dd:82:c7:d7:fb:97:
09:ba:78:bc:23:a8:e9:ba:0e:e4:1a:13:58:a8:07:c9:3a:34:
c2:dd:7f:8c:bf:99:75:3a:7a:09:b2:4f:18:39:03:af:30:8f:
62:19:cd:fc:95:80:9b:5c:bc:1e:08:2f:9a:d3:19:d1:db:25:
6c:da:e5:91:51:24:07:a9:52:c6:25:d3:26:91:cf:ff:b4:85:
f5:04:09:0a:e3:ec:b7:7c:cc:9b:1f:b5:c7:c6:d2:26:a8:44:
f0:40:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:03 2026 by rpki-client