Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208852.roa
File: AS208852.roa (raw, json)
Hash identifier: CeM0VwxfoGhHdBEgu/iB8aTfacv5TU3AAfT6X1/WJxE=
Subject key identifier: 29:FA:75:73:81:FD:37:93:F8:57:03:41:13:31:AA:70:B0:35:CB:63
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 499876073C0991A78717438BC04A0A8CB18FB98B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208852.roa
Signing time: Thu 09 Jul 2026 11:08:50 +0000
ROA not before: Thu 09 Jul 2026 11:03:50 +0000
ROA not after: Thu 08 Jul 2027 11:08:50 +0000
asID: 208852
IP address blocks: 2a0f:85c1:c39::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:98:76:07:3c:09:91:a7:87:17:43:8b:c0:4a:0a:8c:b1:8f:b9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:50 2026 GMT
Not After : Jul 8 11:08:50 2027 GMT
Subject: CN=29FA757381FD3793F85703411331AA70B035CB63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:65:c9:f1:ae:a7:9a:0c:2b:82:b2:16:1d:
17:cb:74:0e:04:c0:26:cb:40:2e:b4:e9:b7:85:2b:
43:a9:a0:7b:dc:a6:00:a8:95:33:e1:d7:dd:4a:f1:
41:bb:8d:6d:b4:c6:c8:47:6f:c9:32:8d:d3:6d:85:
3c:d5:be:b9:f6:cb:4f:e4:61:ba:bd:5a:3e:b4:a6:
ac:81:5e:73:c2:ee:b5:09:0c:e7:73:02:fc:8d:52:
f6:e2:25:91:f3:90:9d:e1:78:cf:86:24:9d:8a:1a:
1e:e9:f3:77:e9:ca:42:b0:6a:d7:ac:4d:de:ba:52:
0e:ea:92:99:1c:66:b0:40:cf:06:e5:34:9f:03:8d:
6f:e5:e4:23:d3:2d:e1:d6:7e:96:3c:c8:c9:71:71:
a0:1c:d6:c0:eb:6e:11:ff:59:87:cb:c3:c9:e7:ef:
1e:ea:4c:e8:9e:92:95:2d:df:06:a7:e0:62:9d:d9:
1b:de:43:ab:eb:54:09:32:81:71:06:b8:68:32:51:
77:3d:a2:84:82:d5:49:5e:15:8f:00:62:a8:99:2d:
65:0b:fb:34:41:f7:8d:b8:3e:35:20:72:cf:69:e9:
70:4f:36:15:9b:0e:e4:b7:a0:42:8e:12:9f:fa:d8:
37:c7:42:61:21:d0:a3:9e:4f:9a:de:ad:ac:86:71:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FA:75:73:81:FD:37:93:F8:57:03:41:13:31:AA:70:B0:35:CB:63
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c39::/48
Signature Algorithm: sha256WithRSAEncryption
69:80:53:56:ed:f5:69:0b:bb:d3:d2:d3:75:2d:29:a3:22:7e:
be:49:13:44:6a:97:40:0b:e1:04:7d:d8:d2:87:3b:b0:6c:2c:
d0:de:7d:69:8d:7b:6d:c6:5d:1b:3e:dc:cb:ae:d4:48:47:1c:
40:ea:52:02:20:3e:ed:6a:7c:42:e5:10:4e:30:40:b0:63:05:
a6:ad:74:72:7c:ab:b8:ba:49:1f:06:c1:9e:9d:fd:08:4e:11:
4c:b4:13:15:31:ff:72:f8:4f:15:dc:06:9a:10:7b:02:6d:f3:
e7:c5:66:d6:0d:95:cc:40:cc:f2:f6:f3:65:51:2c:a4:f3:9b:
69:f2:c9:e9:74:3e:54:4c:0e:2a:bd:fe:be:21:6d:05:de:13:
44:10:46:8d:69:13:38:ed:07:32:d8:1a:d5:06:dc:d7:a6:e7:
37:06:6d:73:e3:ac:34:90:68:fc:91:aa:e3:dc:49:d1:3b:29:
5a:d6:d7:e9:bd:b6:26:1e:c5:a0:14:97:a2:9a:28:dd:1e:53:
7f:56:5a:20:13:b3:61:c0:73:55:70:09:c9:44:0d:fd:fa:23:
fd:b6:99:12:01:63:a8:50:39:2f:0c:c5:03:95:1e:16:58:c4:
5c:c6:b5:1a:34:a1:7f:df:f8:86:49:1f:70:75:c9:2d:02:ba:
16:c8:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:44 2026 by rpki-client