Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208259.roa
File: AS208259.roa (raw, json)
Hash identifier: v60gB56YEk6gxEmNKOFJiz+5+0VJi1/XSJh0KE4GrzQ=
Subject key identifier: A1:6B:06:B8:71:AB:5D:43:C1:40:57:B2:AE:40:78:8C:34:24:99:12
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 46CAA49E09CBA89276BAB2C9CE1C72E8F26A6D7D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208259.roa
Signing time: Wed 01 Jul 2026 06:48:52 +0000
ROA not before: Wed 01 Jul 2026 06:43:52 +0000
ROA not after: Wed 30 Jun 2027 06:48:52 +0000
asID: 208259
IP address blocks: 167.148.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ca:a4:9e:09:cb:a8:92:76:ba:b2:c9:ce:1c:72:e8:f2:6a:6d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 1 06:43:52 2026 GMT
Not After : Jun 30 06:48:52 2027 GMT
Subject: CN=A16B06B871AB5D43C14057B2AE40788C34249912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bc:78:bb:02:c1:1f:c2:28:0f:33:24:d8:7d:
7e:c3:32:53:f1:4b:29:2e:9a:06:77:2a:9e:c0:46:
31:9e:eb:eb:0b:8b:f2:00:0b:db:93:78:65:80:ce:
21:3c:e4:fa:32:76:66:a1:6e:b1:40:d7:39:c7:fa:
2c:5b:48:f8:56:72:74:53:37:e2:ed:27:f4:b7:19:
af:90:16:fa:02:47:cc:1f:a7:ad:32:06:54:d3:9b:
65:d2:1f:12:93:4f:58:81:d9:76:d1:e2:65:75:2e:
59:de:6d:f8:e0:68:8c:40:eb:ef:03:f8:22:cf:e0:
06:eb:8d:95:37:01:a6:41:f4:f3:99:51:42:8d:a0:
96:6c:a8:3d:18:99:44:4b:ab:e9:1e:ca:b0:2b:e9:
2b:3e:dc:15:68:89:13:36:92:a9:ba:2d:8d:e0:f4:
42:d0:59:08:c4:2a:a3:60:65:10:93:ca:b6:6e:8b:
02:49:f3:4a:15:4b:28:68:71:25:cc:d5:d3:f4:d6:
fe:98:0a:ea:05:af:c5:2f:67:d0:8e:f7:91:16:7d:
bf:15:15:24:f3:71:5b:58:12:6c:31:75:e3:47:43:
e6:1d:bb:bd:cc:fd:d9:f8:7f:ff:7e:1e:23:a8:2b:
f8:8d:f8:2c:7e:2c:7e:1d:4b:38:9f:bd:67:43:79:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6B:06:B8:71:AB:5D:43:C1:40:57:B2:AE:40:78:8C:34:24:99:12
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208259.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.213.0/24
Signature Algorithm: sha256WithRSAEncryption
91:86:24:d6:73:06:75:8e:1e:fe:43:0b:55:ea:1a:7d:fe:1b:
3f:22:10:9e:b9:e4:5f:c5:f3:81:c3:e1:8a:df:90:7a:83:c5:
e5:4e:85:b4:5d:76:36:75:d8:85:35:66:42:10:10:c2:4a:d4:
f7:b6:d9:0c:c9:4e:2f:95:73:14:8f:a9:30:13:26:ff:40:60:
cd:2c:dd:77:d9:ab:03:2a:aa:da:3e:5b:80:6c:db:34:0c:3e:
7d:b4:67:ef:6d:17:6c:25:e5:e1:31:40:6e:5e:f5:81:63:29:
12:c5:ab:df:f4:e4:5a:2e:d0:55:f4:88:e5:b6:c8:2a:41:cc:
dc:26:57:e6:a8:9e:1b:76:6e:dd:cc:11:f8:56:52:f0:d1:ae:
de:a4:76:59:b8:bd:46:d9:5b:ab:2b:a0:b0:31:4a:66:2b:d0:
24:6c:3e:d3:eb:ac:6e:9a:81:ce:40:5d:2b:fb:81:53:0d:55:
f1:24:83:cd:c4:17:ee:d0:a9:bd:6a:39:3d:3a:61:ff:b4:7e:
44:ab:0e:96:fc:34:ce:9c:73:a4:6d:a8:87:4b:5d:c8:3e:04:
ad:21:48:33:3b:6a:0a:67:f6:d3:9b:51:f7:20:12:bf:5f:eb:
50:33:f3:41:80:c9:34:f2:29:76:46:35:12:eb:97:50:46:8a:
ac:d7:f2:ac
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIURsqkngnLqJJ2urLJzhxy6PJqbX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MDEwNjQzNTJaFw0yNzA2MzAwNjQ4NTJaMDMxMTAvBgNV
BAMTKEExNkIwNkI4NzFBQjVENDNDMTQwNTdCMkFFNDA3ODhDMzQyNDk5MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxvHi7AsEfwigPMyTYfX7DMlPx
SykumgZ3Kp7ARjGe6+sLi/IAC9uTeGWAziE85PoydmahbrFA1znH+ixbSPhWcnRT
N+LtJ/S3Ga+QFvoCR8wfp60yBlTTm2XSHxKTT1iB2XbR4mV1LlnebfjgaIxA6+8D
+CLP4AbrjZU3AaZB9POZUUKNoJZsqD0YmURLq+keyrAr6Ss+3BVoiRM2kqm6LY3g
9ELQWQjEKqNgZRCTyrZuiwJJ80oVSyhocSXM1dP01v6YCuoFr8UvZ9CO95EWfb8V
FSTzcVtYEmwxdeNHQ+Ydu73M/dn4f/9+HiOoK/iN+Cx+LH4dSzifvWdDeeodAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUoWsGuHGrXUPBQFeyrkB4jDQkmRIwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA4MjU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5TV
MA0GCSqGSIb3DQEBCwUAA4IBAQCRhiTWcwZ1jh7+QwtV6hp9/hs/IhCeueRfxfOB
w+GK35B6g8XlToW0XXY2ddiFNWZCEBDCStT3ttkMyU4vlXMUj6kwEyb/QGDNLN13
2asDKqraPluAbNs0DD59tGfvbRdsJeXhMUBuXvWBYykSxavf9ORaLtBV9Ijltsgq
QczcJlfmqJ4bdm7dzBH4VlLw0a7epHZZuL1G2VurK6CwMUpmK9AkbD7T66xumoHO
QF0r+4FTDVXxJIPNxBfu0Km9ajk9OmH/tH5Eqw6W/DTOnHOkbaiHS13IPgStIUgz
O2oKZ/bTm1H3IBK/X+tQM/NBgMk08il2RjUS65dQRoqs1/Ks
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:11:04 2026 by rpki-client