Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208723.roa
File: AS208723.roa (raw, json)
Hash identifier: TgFz81lKkLOv1h8NcpPrYya0DLSZsLdayiycsd7NwFA=
Subject key identifier: FA:67:5F:7F:F3:A5:96:DA:35:F9:4B:B6:F8:5B:14:5B:61:8E:8B:87
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0DC4159EE53E90CF7FBD4BB971610B907662CAFC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208723.roa
Signing time: Thu 24 Sep 2026 15:53:17 +0000
ROA not before: Thu 24 Sep 2026 15:48:17 +0000
ROA not after: Thu 23 Sep 2027 15:53:17 +0000
asID: 208723
IP address blocks: 143.14.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c4:15:9e:e5:3e:90:cf:7f:bd:4b:b9:71:61:0b:90:76:62:ca:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 24 15:48:17 2026 GMT
Not After : Sep 23 15:53:17 2027 GMT
Subject: CN=FA675F7FF3A596DA35F94BB6F85B145B618E8B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:c4:f3:6f:d2:34:e2:8a:11:13:03:fe:d6:
f0:22:ca:5b:f3:7e:75:c8:da:62:cd:c2:48:d2:72:
69:c0:ac:4f:26:72:5f:2f:9e:48:41:43:64:0f:a4:
61:68:e9:c5:8f:04:a3:1d:75:3e:e4:c4:f4:6d:2b:
9d:6b:03:bf:3c:af:8b:69:8c:21:5f:c8:e0:92:55:
6d:2b:46:2d:a5:61:e5:d3:a9:ee:99:b3:b2:09:01:
73:4e:9b:43:a5:c8:45:ba:62:90:cd:20:f8:0a:ad:
ca:33:1f:f8:fd:44:e6:34:df:1b:e4:33:f4:ba:23:
34:24:4b:39:5b:79:09:d9:1c:06:e1:db:d6:b5:99:
fa:d4:f6:fd:5b:1c:24:39:38:69:df:32:4e:7d:61:
fb:02:5f:72:22:55:80:13:b9:62:dc:fc:59:61:f6:
fa:e3:4c:52:ad:73:2f:23:82:36:93:0e:3a:ae:41:
50:9c:64:77:21:c7:f5:fd:d7:ec:bb:0d:4e:c8:66:
31:c6:ed:66:fb:c3:94:d7:90:16:d5:34:df:d0:b9:
90:36:66:0f:53:48:b7:17:97:8b:d3:e3:7d:4b:65:
4d:04:38:bc:5f:d0:28:63:92:f9:86:9e:1d:28:f4:
9a:60:22:cb:c1:64:7e:88:f3:4a:52:88:b8:1b:c7:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:67:5F:7F:F3:A5:96:DA:35:F9:4B:B6:F8:5B:14:5B:61:8E:8B:87
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208723.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.12.0/24
Signature Algorithm: sha256WithRSAEncryption
11:13:45:94:94:c3:3e:47:61:80:fc:3b:99:7d:45:78:7c:de:
0b:c6:92:17:de:70:43:d3:71:c3:b8:be:e6:86:ad:85:64:c0:
8b:53:25:62:a2:da:b1:b9:a3:97:af:47:c8:41:62:c9:b8:22:
5e:d0:f6:15:8a:e0:1d:f4:d0:3a:9e:ca:52:1c:8e:bb:4c:8e:
62:9e:56:a0:59:44:94:f1:0d:70:71:29:81:d0:7f:65:13:7b:
99:fa:e4:1d:76:49:a2:f7:73:d1:fc:b7:e1:9a:93:dd:b9:de:
b5:8a:7e:f4:b4:b9:aa:5e:36:37:95:fc:b3:90:dc:8b:44:92:
9c:69:bc:73:24:cc:80:a3:fa:73:43:d6:9f:8b:c1:39:88:b1:
4b:19:75:3f:d6:0c:80:55:fa:a7:b6:96:db:81:e9:eb:96:31:
1f:1d:7d:31:63:b5:0d:87:b0:94:ab:d2:2d:61:21:e0:05:4d:
29:a3:f0:65:a8:e2:9a:fd:70:ab:58:cb:e8:64:63:4a:39:b1:
e7:12:38:cc:c8:e7:c3:b3:13:08:0e:83:6d:5e:8d:33:ed:55:
25:2d:32:9f:32:6f:c1:3e:9d:dd:94:57:1c:80:ee:90:37:a9:
0b:45:47:50:36:98:01:a2:4d:8e:66:94:b0:ff:25:a0:f5:48:
ec:5b:61:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:59:30 2026 by rpki-client