Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS208483.roa
File: AS208483.roa (raw, json)
Hash identifier: uJPwcosHbBfp88S/WJoMaM926XEEXZ81UX5De23ORBY=
Subject key identifier: 68:CE:DF:01:B1:BD:43:EA:35:EA:85:13:7D:23:39:7C:BD:6B:54:9D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0EBD976F1A8BD741F05AA52677FD01B34B12ACAD
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS208483.roa
Signing time: Mon 01 Jun 2026 13:47:20 +0000
ROA not before: Mon 01 Jun 2026 13:42:20 +0000
ROA not after: Mon 31 May 2027 13:47:20 +0000
asID: 208483
IP address blocks: 141.11.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:bd:97:6f:1a:8b:d7:41:f0:5a:a5:26:77:fd:01:b3:4b:12:ac:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 1 13:42:20 2026 GMT
Not After : May 31 13:47:20 2027 GMT
Subject: CN=68CEDF01B1BD43EA35EA85137D23397CBD6B549D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:7e:27:54:fd:d3:84:26:91:05:e8:01:e2:
22:56:b9:7d:09:f7:84:ca:99:3b:4c:79:80:04:3e:
b6:c5:66:ce:41:ab:91:e2:59:ba:4a:e0:72:63:50:
90:63:07:c5:5a:5b:eb:d9:44:88:66:0a:79:2c:10:
a6:54:33:10:5b:1a:b3:44:0e:2c:5b:43:dd:90:00:
1d:e3:31:17:c2:28:5b:66:b2:be:53:b3:9f:ac:a2:
8c:e7:da:0f:0b:15:6f:1c:c0:92:3c:50:0b:b4:4f:
34:8b:7e:b9:a1:15:dc:05:80:fe:00:db:9e:05:e9:
ee:25:1f:01:47:af:da:8b:d0:34:db:39:0b:58:ca:
55:7c:f8:67:33:ef:e1:05:9c:1a:8f:50:05:71:a2:
22:61:5d:15:dd:65:c9:7a:63:1b:54:75:0e:96:d7:
cc:4e:1c:05:5c:21:58:69:77:de:21:6f:4b:e9:7f:
6a:da:75:f9:1f:e0:90:96:f9:a9:d9:ca:87:ad:14:
69:82:90:24:9b:97:27:1a:63:a1:62:e1:07:15:2a:
6b:f1:03:8c:35:b1:2a:58:28:b4:6c:d0:ef:5c:fc:
84:33:a8:82:6a:8a:29:10:41:dc:b9:25:43:c0:36:
aa:9d:31:c2:a0:d1:81:40:ce:12:33:88:a8:de:39:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CE:DF:01:B1:BD:43:EA:35:EA:85:13:7D:23:39:7C:BD:6B:54:9D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS208483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.65.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:59:b0:4a:38:bc:bf:aa:fa:5c:8e:0e:d9:b9:a4:82:b2:93:
2c:a7:90:34:f5:cf:4e:69:a9:12:82:e3:ab:e8:33:27:18:2b:
4b:e9:12:39:5a:b3:65:3f:83:a7:49:44:5d:a8:5a:cd:5c:b2:
98:0c:27:9a:b2:31:94:b7:1d:3f:21:b4:24:3a:39:ed:44:4e:
83:0d:e6:d3:bc:41:82:3d:d8:4c:91:45:71:92:04:20:68:e1:
c4:12:ca:37:8a:29:28:75:5f:66:85:7b:8d:9d:10:c4:fa:6d:
2b:4c:33:fb:6a:b4:c4:06:2d:cc:49:90:52:8f:80:5d:60:20:
11:40:fc:9d:75:09:af:cc:b9:d6:b1:db:37:7e:7b:66:cf:8e:
ed:ff:05:94:70:23:11:07:2d:37:de:1c:09:33:10:d3:8e:3a:
73:58:1c:88:37:e8:53:d2:d0:93:73:4a:38:da:f5:5a:05:6c:
a6:fc:d9:71:ef:6c:cd:f4:cd:0c:32:e8:56:e5:11:b7:04:74:
31:5b:4f:5e:2a:c4:53:2f:99:e1:7b:20:4d:d9:4d:6b:46:90:
b3:0c:75:04:7b:b0:0f:e1:40:fc:be:f8:e8:b5:40:67:da:7d:
31:e7:d7:98:90:75:92:dc:a5:1b:ff:c1:da:10:0f:b7:43:52:
db:4e:45:8d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUDr2XbxqL10HwWqUmd/0Bs0sSrK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA2MDExMzQyMjBaFw0yNzA1MzExMzQ3MjBaMDMxMTAvBgNV
BAMTKDY4Q0VERjAxQjFCRDQzRUEzNUVBODUxMzdEMjMzOTdDQkQ2QjU0OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEo34nVP3ThCaRBegB4iJWuX0J
94TKmTtMeYAEPrbFZs5Bq5HiWbpK4HJjUJBjB8VaW+vZRIhmCnksEKZUMxBbGrNE
DixbQ92QAB3jMRfCKFtmsr5Ts5+soozn2g8LFW8cwJI8UAu0TzSLfrmhFdwFgP4A
254F6e4lHwFHr9qL0DTbOQtYylV8+Gcz7+EFnBqPUAVxoiJhXRXdZcl6YxtUdQ6W
18xOHAVcIVhpd94hb0vpf2radfkf4JCW+anZyoetFGmCkCSblycaY6Fi4QcVKmvx
A4w1sSpYKLRs0O9c/IQzqIJqiikQQdy5JUPANqqdMcKg0YFAzhIziKjeOa39AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUaM7fAbG9Q+o16oUTfSM5fL1rVJ0wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA4NDgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQtB
MA0GCSqGSIb3DQEBCwUAA4IBAQCeWbBKOLy/qvpcjg7ZuaSCspMsp5A09c9OaakS
guOr6DMnGCtL6RI5WrNlP4OnSURdqFrNXLKYDCeasjGUtx0/IbQkOjntRE6DDebT
vEGCPdhMkUVxkgQgaOHEEso3iikodV9mhXuNnRDE+m0rTDP7arTEBi3MSZBSj4Bd
YCARQPyddQmvzLnWsds3fntmz47t/wWUcCMRBy033hwJMxDTjjpzWByIN+hT0tCT
c0o42vVaBWym/Nlx72zN9M0MMuhW5RG3BHQxW09eKsRTL5nheyBN2U1rRpCzDHUE
e7AP4UD8vvjotUBn2n0x59eYkHWS3KUb/8HaEA+3Q1LbTkWN
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:00:17 2026 by rpki-client