Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS208226.roa
File: AS208226.roa (raw, json)
Hash identifier: jp4VzLlZklndZt35Zy7DsvGlMQLQxxn2s9RemFBZhYU=
Subject key identifier: 0F:E8:65:93:6E:01:36:20:34:99:AC:F0:02:09:99:B4:A8:44:45:EB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2D65DC2137C1D334FF1F8DAFBB708FE21760239C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS208226.roa
Signing time: Tue 01 Sep 2026 16:49:31 +0000
ROA not before: Tue 01 Sep 2026 16:44:31 +0000
ROA not after: Tue 31 Aug 2027 16:49:31 +0000
asID: 208226
IP address blocks: 141.11.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:65:dc:21:37:c1:d3:34:ff:1f:8d:af:bb:70:8f:e2:17:60:23:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 1 16:44:31 2026 GMT
Not After : Aug 31 16:49:31 2027 GMT
Subject: CN=0FE865936E0136203499ACF0020999B4A84445EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:be:30:61:2c:33:ee:5a:fa:05:b9:fe:89:
ba:9e:47:f4:d4:f3:66:db:7d:65:59:ce:a4:a5:c4:
29:41:49:80:e3:c1:54:18:8a:8b:d3:84:cd:3c:93:
15:9c:92:2c:16:17:2e:6d:f6:d1:6b:0a:61:3c:ee:
56:06:02:8f:64:e0:c6:a6:72:6b:9b:0e:e0:17:f8:
b4:78:1f:3e:d0:67:dc:b8:34:a9:69:b9:19:ce:fe:
05:b0:ac:df:0c:b0:38:e1:81:18:b0:95:30:b8:5c:
28:a1:ea:dd:7e:20:39:bc:e0:18:cb:ca:01:cb:42:
89:df:a9:e5:cb:13:94:38:eb:9a:c1:03:9f:3d:b7:
05:1f:19:c3:c5:12:79:03:ae:12:30:e9:f4:e7:1e:
22:50:66:12:ed:bb:f8:b3:39:73:ca:51:b0:b4:0c:
7b:92:b0:6c:73:82:dd:dd:1d:b5:87:1d:a2:5f:5a:
d2:37:77:2c:86:a2:d5:25:1d:fb:2a:e1:1a:c1:52:
16:81:e9:17:13:f8:87:66:46:71:1e:ac:d1:aa:5e:
17:0f:8c:6b:68:3b:61:cc:ff:9e:d4:5a:97:63:21:
51:94:10:42:fc:ac:b2:07:ad:d6:7d:fd:d1:9c:e3:
78:b1:cb:03:d3:8f:e5:7d:2f:1d:5a:de:66:5a:2c:
9e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E8:65:93:6E:01:36:20:34:99:AC:F0:02:09:99:B4:A8:44:45:EB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS208226.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:99:bb:bb:db:83:8f:ba:0a:bc:99:e2:a7:35:96:b3:9b:a0:
7d:01:60:93:a8:2e:d2:3a:9e:30:bc:2c:ae:33:65:ae:27:08:
27:65:76:02:0b:25:52:54:22:eb:9c:bc:7b:35:08:c3:2f:6f:
30:27:4f:b9:9f:00:06:70:b2:89:c8:d0:7e:c3:44:27:f7:ef:
57:bf:9c:15:bb:6f:5d:ac:59:f1:bb:da:5f:a6:69:4a:82:8e:
06:60:8e:1a:f7:2d:0d:0f:3c:81:cc:8c:0b:48:98:81:6c:e4:
38:af:1b:c1:fc:8e:26:0e:df:f9:d7:d6:af:7c:eb:67:ba:81:
62:c5:9d:15:40:cf:27:06:0c:bd:79:37:e2:d9:74:1c:d9:e8:
66:bd:7a:32:9e:1f:90:92:6c:04:9c:bb:bd:0f:35:88:14:5b:
2c:10:5e:1d:a5:23:4d:ff:cd:6e:27:f4:43:95:23:b6:e1:f1:
f5:a1:70:63:38:da:1f:ca:90:7f:7e:27:28:e8:6a:f5:47:cc:
5a:96:15:cc:16:d5:9e:85:5a:89:e0:05:20:f1:00:fc:60:f9:
4b:b2:ca:3b:59:32:25:a0:e5:cd:90:8d:88:c8:c4:e8:55:44:
4e:81:c9:05:62:3c:49:73:6f:bf:c4:3a:f4:c1:f3:0d:ea:40:
41:28:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:20:25 2026 by rpki-client