Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS208765.roa
File: AS208765.roa (raw, json)
Hash identifier: QcISfBXMsrINXaYv3jTGBYGk/1WqXefe1K5rulo0WU4=
Subject key identifier: EC:FA:5A:D9:F5:C7:BA:B8:0B:06:12:6C:05:FE:F7:A4:82:FC:40:CA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 44DB9597BEE89F9733A64C1073AD228A0DC444F8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS208765.roa
Signing time: Mon 10 Nov 2025 16:49:58 +0000
ROA not before: Mon 10 Nov 2025 16:44:58 +0000
ROA not after: Mon 09 Nov 2026 16:49:58 +0000
asID: 208765
IP address blocks: 178.95.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:db:95:97:be:e8:9f:97:33:a6:4c:10:73:ad:22:8a:0d:c4:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 10 16:44:58 2025 GMT
Not After : Nov 9 16:49:58 2026 GMT
Subject: CN=ECFA5AD9F5C7BAB80B06126C05FEF7A482FC40CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:31:49:c3:23:00:f5:db:b8:7f:a3:5b:7e:
0b:f6:5c:ff:06:49:db:40:b6:8a:2f:3d:d7:8a:d6:
3b:72:0b:6d:da:04:4d:da:2a:c8:59:85:47:51:17:
d1:21:3b:c7:0f:77:8a:45:ad:e6:89:0a:44:b7:33:
79:d7:b0:86:1d:ca:4a:db:a3:d2:6f:87:76:bd:2d:
54:3c:31:a0:57:11:a6:38:4f:4b:ac:bd:7c:bc:51:
1a:d4:42:95:c9:59:25:66:cc:32:a3:93:27:2d:0f:
7f:ce:bf:c3:d5:91:cb:41:b0:fb:3a:ce:76:e7:74:
b7:13:47:80:3f:70:11:51:f5:6f:ac:c2:f9:81:73:
c6:92:38:20:85:15:90:c2:d7:93:95:25:96:1b:9e:
f3:41:b8:a7:76:05:58:41:bf:8d:59:e3:9f:fe:00:
62:ba:50:81:fd:0a:17:9e:12:39:fc:1b:e9:6c:0e:
44:45:3a:4d:29:ef:b8:0a:65:41:6b:fc:2c:de:87:
00:45:3d:9b:71:7b:59:e5:e1:e2:4c:5a:4a:97:c8:
1f:94:04:44:6b:25:c2:b9:61:2f:47:74:f7:f9:71:
7d:fc:88:7e:00:00:c8:13:14:59:3a:d3:7a:41:95:
85:21:e4:e2:ee:c2:e0:05:c9:a2:4c:4a:2d:39:d4:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FA:5A:D9:F5:C7:BA:B8:0B:06:12:6C:05:FE:F7:A4:82:FC:40:CA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS208765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.162.0/24
Signature Algorithm: sha256WithRSAEncryption
73:99:8e:60:c2:5a:c7:cb:68:c2:5f:2a:04:ee:6a:af:fd:36:
c2:5c:4d:2c:18:7d:7b:98:91:a5:bf:19:3c:35:fd:9d:ad:b5:
7f:09:13:60:e4:6c:e2:bb:79:40:0f:61:5c:17:ce:90:e7:01:
2d:32:3f:c8:4b:b3:4f:ac:98:8c:aa:a7:89:63:6f:ba:51:22:
94:5d:db:ea:af:b0:1f:12:f2:e7:7d:04:ac:fc:62:9b:ae:46:
1c:f5:c3:5c:bb:9a:9c:66:59:db:20:87:a0:eb:8e:7d:4c:80:
f8:b7:31:33:75:83:52:33:f7:f1:e0:9c:ca:85:bd:dd:ec:f8:
43:be:de:ae:e3:6f:a5:b5:2e:32:d5:f4:3e:9d:d6:ba:ca:12:
20:ad:1e:ea:12:de:0a:67:98:7a:fc:01:27:d6:bc:3c:8d:42:
5d:47:eb:61:19:27:25:22:a8:92:b1:c1:0d:fe:b6:50:1d:b7:
e2:df:a1:00:72:a7:ee:93:29:f9:83:ab:34:43:9a:e0:11:66:
15:5c:d6:ca:c2:5a:5c:8b:9f:14:cc:ae:5c:e3:fa:f5:15:4a:
ae:42:f5:d3:63:ac:01:03:1c:25:16:85:36:d8:29:b0:2f:92:
4a:16:55:a9:1c:44:4a:ff:0c:bd:d2:ef:86:c2:6d:3c:74:4d:
0b:8a:dc:8a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIURNuVl77on5czpkwQc60iig3ERPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTExMTAxNjQ0NThaFw0yNjExMDkxNjQ5NThaMDMxMTAvBgNV
BAMTKEVDRkE1QUQ5RjVDN0JBQjgwQjA2MTI2QzA1RkVGN0E0ODJGQzQwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvDFJwyMA9du4f6Nbfgv2XP8G
SdtAtoovPdeK1jtyC23aBE3aKshZhUdRF9EhO8cPd4pFreaJCkS3M3nXsIYdykrb
o9Jvh3a9LVQ8MaBXEaY4T0usvXy8URrUQpXJWSVmzDKjkyctD3/Ov8PVkctBsPs6
znbndLcTR4A/cBFR9W+swvmBc8aSOCCFFZDC15OVJZYbnvNBuKd2BVhBv41Z45/+
AGK6UIH9CheeEjn8G+lsDkRFOk0p77gKZUFr/CzehwBFPZtxe1nl4eJMWkqXyB+U
BERrJcK5YS9HdPf5cX38iH4AAMgTFFk603pBlYUh5OLuwuAFyaJMSi051NT1AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU7Ppa2fXHurgLBhJsBf73pIL8QMowHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA4NzY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsl+i
MA0GCSqGSIb3DQEBCwUAA4IBAQBzmY5gwlrHy2jCXyoE7mqv/TbCXE0sGH17mJGl
vxk8Nf2drbV/CRNg5Gziu3lAD2FcF86Q5wEtMj/IS7NPrJiMqqeJY2+6USKUXdvq
r7AfEvLnfQSs/GKbrkYc9cNcu5qcZlnbIIeg6459TID4tzEzdYNSM/fx4JzKhb3d
7PhDvt6u42+ltS4y1fQ+nda6yhIgrR7qEt4KZ5h6/AEn1rw8jUJdR+thGSclIqiS
scEN/rZQHbfi36EAcqfukyn5g6s0Q5rgEWYVXNbKwlpci58UzK5c4/r1FUquQvXT
Y6wBAxwlFoU22CmwL5JKFlWpHERK/wy90u+Gwm08dE0LityK
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:29:35 2025 by rpki-client