Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208824.roa
File: AS208824.roa (raw, json)
Hash identifier: e+wnwc5SEeyox9sya9P7cJj7emfPbDNxSsmeVFVk+gc=
Subject key identifier: 67:88:25:31:A7:2F:A8:B9:C4:EC:2C:92:68:9A:76:B0:8B:4D:AC:72
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 31D6B63284DFD2C51546D3E4E3CCDB93EBBC0F2B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208824.roa
Signing time: Mon 20 Jul 2026 21:08:53 +0000
ROA not before: Mon 20 Jul 2026 21:03:53 +0000
ROA not after: Mon 19 Jul 2027 21:08:53 +0000
asID: 208824
IP address blocks: 2a0f:85c1:c34::/48 maxlen: 48
2a0f:85c1:cee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d6:b6:32:84:df:d2:c5:15:46:d3:e4:e3:cc:db:93:eb:bc:0f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:53 2026 GMT
Not After : Jul 19 21:08:53 2027 GMT
Subject: CN=67882531A72FA8B9C4EC2C92689A76B08B4DAC72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:3b:db:a9:27:82:ab:9d:7d:e6:0b:4d:4c:
7f:36:ee:1f:f3:21:cf:40:99:8f:e9:af:1f:3b:4b:
b2:85:84:8a:0c:37:0b:47:97:aa:8d:98:10:67:e5:
be:97:f9:21:2b:17:18:e1:9b:2b:f7:df:61:9b:9c:
aa:5b:a3:17:28:05:95:f9:19:71:98:de:e9:c4:5a:
19:2a:b2:a9:89:33:0c:f4:97:d3:17:50:ef:ca:ef:
73:74:14:0b:22:af:cc:1f:ea:fe:f8:78:53:f4:f1:
86:d8:16:60:7e:e9:9e:d6:61:23:2b:af:53:2e:0a:
6e:b1:2d:ee:f6:d0:fa:d9:9e:8c:16:c5:5f:75:55:
4a:07:e6:8c:17:ee:1f:71:ee:f4:f3:17:64:bb:0a:
3d:17:ba:42:8d:f2:cb:56:1a:46:2f:45:76:8e:c5:
08:1e:0d:ba:3a:97:9d:ca:02:be:4c:c3:25:a1:d6:
99:5d:53:14:fc:39:70:7a:ce:2b:cb:3b:56:b7:14:
1a:f0:78:46:37:cf:88:1d:50:14:44:41:2d:71:d9:
de:29:c7:88:e2:ad:45:8c:fc:36:d9:50:1a:11:1a:
f8:f3:00:02:4a:d0:3b:e9:ff:e8:d0:1b:1d:b9:77:
7f:55:af:f8:a1:21:09:67:83:db:ad:22:f7:76:63:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:88:25:31:A7:2F:A8:B9:C4:EC:2C:92:68:9A:76:B0:8B:4D:AC:72
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208824.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c34::/48
2a0f:85c1:cee::/48
Signature Algorithm: sha256WithRSAEncryption
1c:4a:a0:08:a7:f4:3d:ab:00:76:9b:39:66:c0:3d:ac:ad:47:
e6:6c:12:ea:6a:09:be:22:68:bb:19:53:6f:69:30:c8:85:78:
90:a8:6e:63:e7:a8:17:10:3b:61:ea:4e:30:35:08:f1:3e:92:
42:3a:ec:1c:60:49:be:2a:f9:0b:08:8e:ee:41:25:0a:e0:c2:
98:81:fd:d5:c8:8c:9e:ab:15:88:ea:85:73:38:a5:a0:f8:7b:
cc:89:fb:94:cb:f7:ff:35:5a:5b:ef:eb:3c:0a:19:a5:2e:81:
e5:34:46:c0:a9:f6:c4:35:6e:18:58:61:19:63:97:dd:1a:3c:
d3:54:ad:68:77:d7:21:1f:13:f7:67:0e:d6:91:0e:83:5f:79:
34:36:c8:0b:dd:c6:7e:4d:6b:85:2c:e4:51:ba:21:c0:71:15:
6a:9a:ae:30:03:03:4b:98:7b:dd:4b:6b:e0:ef:85:0a:cc:cf:
d4:72:cf:41:bb:31:70:60:3b:ac:f8:8b:57:0e:20:94:c9:46:
bf:29:c5:67:a5:ef:e2:ab:04:51:0d:4e:7d:36:06:29:92:21:
f7:56:bb:99:e0:ab:24:8e:26:2f:27:41:ba:3c:23:cb:a7:46:
6d:60:be:70:48:16:1f:4b:40:46:20:85:ce:2b:dd:f0:bf:b5:
60:f5:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:43 2026 by rpki-client