Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208453.roa
File: AS208453.roa (raw, json)
Hash identifier: E7Uzmpn5JUw6R9knKpT7Poxa44KphCzuAiqCAMIVp1k=
Subject key identifier: 5E:F9:79:33:02:19:57:B9:CC:1C:5C:86:CA:D3:79:5A:67:9C:70:18
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2928C907C498867AA6309343343D6167458B7332
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208453.roa
Signing time: Tue 16 Jun 2026 18:53:14 +0000
ROA not before: Tue 16 Jun 2026 18:48:14 +0000
ROA not after: Tue 15 Jun 2027 18:53:14 +0000
asID: 208453
IP address blocks: 2a14:7583:5900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:28:c9:07:c4:98:86:7a:a6:30:93:43:34:3d:61:67:45:8b:73:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 16 18:48:14 2026 GMT
Not After : Jun 15 18:53:14 2027 GMT
Subject: CN=5EF97933021957B9CC1C5C86CAD3795A679C7018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:c9:eb:4b:73:6d:26:62:7e:1b:de:49:1c:
4b:b4:f1:ee:be:7f:e8:14:86:08:90:2d:58:25:21:
cf:2f:b5:2f:e6:32:db:4d:0c:8b:61:c5:62:30:c6:
ee:11:f6:e7:df:6d:fe:90:4c:d0:6d:f9:b3:5c:3c:
60:db:61:a1:80:24:8b:5f:e7:a2:37:ef:b5:92:10:
95:9a:2e:d9:04:ef:10:7a:78:42:f0:f8:37:79:40:
1f:cd:e7:09:0b:86:ea:6b:73:05:7a:67:e8:9c:df:
ca:3a:54:4a:0c:88:fb:7f:e9:94:c2:32:df:28:e0:
37:2f:ea:8d:43:27:1d:c4:a3:53:9c:ad:cd:b9:b2:
5b:63:ac:e3:3d:16:22:34:e2:1c:31:a5:9b:5d:0a:
19:1d:29:79:39:2c:76:b3:a0:13:d8:67:1a:23:69:
03:f2:29:0c:2d:bd:46:44:ef:aa:f2:9c:9e:f1:60:
04:76:2e:9b:60:d4:5d:26:05:4a:65:16:8c:75:68:
f8:4d:c1:ea:e9:a0:f9:05:7a:ac:df:4a:7a:b5:f2:
67:d4:50:d3:39:89:54:d6:3a:b1:a1:8c:36:13:bb:
bc:be:c4:7c:b0:19:31:b9:41:ee:79:f5:ec:d3:71:
9a:cb:94:67:ca:a3:9d:4c:9d:0a:94:af:43:3c:3e:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F9:79:33:02:19:57:B9:CC:1C:5C:86:CA:D3:79:5A:67:9C:70:18
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208453.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:5900::/40
Signature Algorithm: sha256WithRSAEncryption
11:25:d3:bf:f1:fe:19:d6:a1:2c:c1:c7:20:ed:0a:6a:b2:9c:
37:c3:30:81:dc:52:80:8c:6e:5c:ce:d0:bb:80:dd:75:c8:cb:
54:cf:98:98:69:23:42:14:e4:ec:f4:28:d3:53:b2:02:de:39:
1c:5c:78:48:f9:ec:ac:45:be:c1:fe:49:73:85:2d:9c:8b:f9:
c9:f1:eb:91:45:95:d7:11:f4:7e:95:71:4d:6c:a9:93:3b:7d:
48:b3:01:fd:85:52:17:cf:1e:20:8a:63:5f:84:fa:de:eb:d7:
89:e4:f7:83:0f:ec:00:49:7c:08:b9:ff:a9:ca:88:8a:67:1b:
c8:68:6c:ca:c3:cf:97:73:6f:7d:eb:ff:bd:4f:61:b6:5c:55:
97:c5:dc:bc:1b:1e:1f:a8:95:c6:5f:f0:1c:0d:9c:86:1c:4e:
d0:b8:94:29:1f:b8:99:33:c3:33:43:3b:4d:d3:d7:28:66:01:
54:3d:3b:bc:b0:be:a2:9d:39:20:00:8b:a7:a9:02:e2:df:1d:
48:79:55:96:ac:d5:74:22:01:92:70:18:9a:da:85:c2:f4:2d:
27:ce:d3:8d:0c:b1:ce:93:ee:8e:5a:a7:04:20:81:d7:aa:64:
40:1f:94:9d:dc:4b:b9:0b:9e:80:49:e4:48:d2:f9:6f:32:e5:
d8:76:fc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:05:15 2026 by rpki-client