Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208437.roa
File: AS208437.roa (raw, json)
Hash identifier: k98MGkFeVpaBK28iOCjwY0lceJD+H7MCMA9ghnvw1RA=
Subject key identifier: B3:EE:20:F8:D3:40:AA:F1:44:14:65:AA:CD:71:2E:67:6F:3D:03:5F
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 76121A5909CA51E651D51714C10DEEB975F64E1F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208437.roa
Signing time: Wed 30 Sep 2026 13:14:51 +0000
ROA not before: Wed 30 Sep 2026 13:09:51 +0000
ROA not after: Wed 29 Sep 2027 13:14:51 +0000
asID: 208437
IP address blocks: 2a14:7586:f000::/36 maxlen: 36
2a14:7586:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:12:1a:59:09:ca:51:e6:51:d5:17:14:c1:0d:ee:b9:75:f6:4e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 30 13:09:51 2026 GMT
Not After : Sep 29 13:14:51 2027 GMT
Subject: CN=B3EE20F8D340AAF1441465AACD712E676F3D035F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:18:4b:28:d2:45:b3:aa:2e:c7:ec:53:be:
ae:ca:c1:91:83:ab:bb:f0:5f:d4:f4:fc:51:41:06:
b0:ce:65:cc:85:11:2e:9e:45:8d:00:95:4c:19:63:
b1:3e:47:f4:f7:22:f0:1f:cf:b8:a1:66:9a:97:5d:
35:dd:57:ad:b6:f2:20:ab:d6:77:53:30:1d:b0:e0:
fe:a9:a2:f5:cf:4a:1f:2f:52:56:84:bc:d0:66:69:
5d:ce:cd:7a:12:c2:db:2f:22:1d:2f:a9:5f:d8:bf:
b2:86:4c:e7:a4:62:ba:fe:3a:fb:b6:0a:6f:f1:3e:
10:dc:a0:c6:f7:af:95:cb:fc:69:08:51:79:0a:1c:
b3:06:88:af:ca:db:e9:c9:59:ba:f7:ec:d4:5f:b9:
b6:50:78:0e:1e:9e:18:9d:a4:57:a4:19:3d:d5:2b:
06:59:31:b6:69:55:58:ce:aa:73:50:69:37:c1:ca:
04:b7:97:cb:33:60:dd:bf:a5:e3:aa:dc:4a:21:93:
c3:12:73:84:f3:fa:c1:af:28:5a:de:74:b8:15:34:
be:27:26:3e:89:b4:7a:a6:29:c4:c9:47:6f:bf:90:
f0:d0:ff:ed:0d:74:87:0b:73:06:69:fe:33:95:5a:
66:6e:f1:f1:dc:4d:a3:4b:93:60:99:51:3a:ff:00:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EE:20:F8:D3:40:AA:F1:44:14:65:AA:CD:71:2E:67:6F:3D:03:5F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7586:f000::/36
Signature Algorithm: sha256WithRSAEncryption
10:86:7f:f0:79:1a:45:8f:d3:d2:c0:77:f3:af:c9:a5:51:99:
b1:4a:16:fa:0b:b6:15:c8:64:8a:96:cf:48:aa:d4:87:94:b6:
ad:47:4f:32:0b:15:e3:25:b2:ef:c3:34:46:8e:e9:90:f9:6d:
59:83:e6:7f:e3:d1:4a:bc:2e:05:20:f7:b0:42:93:62:fb:44:
c9:83:50:a4:b4:65:33:96:51:c5:78:98:fd:22:9b:52:66:6f:
6f:97:03:c2:a7:50:63:5e:35:7e:07:30:c9:c2:2a:bf:69:33:
f1:ed:64:61:f0:78:5d:b7:27:8a:25:39:b4:16:2c:3c:b7:22:
0d:b0:3e:b5:49:b3:94:c9:d9:81:42:94:a0:e3:cf:8d:f1:73:
b7:27:4e:7b:ff:d4:b8:f5:b8:c7:1d:e2:44:15:3a:79:66:84:
eb:f1:c1:17:22:15:3d:9d:78:4b:b9:b7:69:79:86:9e:21:bf:
45:53:01:06:96:07:05:b3:0c:df:73:6a:3b:88:8d:2a:90:5e:
9d:cb:a8:62:92:a9:3a:59:32:3c:7d:3b:c3:7d:2d:2a:66:27:
ce:c9:27:ed:2c:11:4f:2f:ad:39:46:e7:ac:73:88:67:d5:d2:
43:0a:22:00:8a:e2:79:20:3d:f6:00:94:08:74:48:31:dd:c7:
02:2a:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:09:46 2026 by rpki-client