Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS208545.roa
File: AS208545.roa (raw, json)
Hash identifier: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=
Subject key identifier: FF:70:08:95:4A:7E:9C:3E:83:A4:30:28:0C:2E:55:F4:C5:65:51:00
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 681A264E00936524CA48DEF8253797E3ED62995D
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS208545.roa
Signing time: Tue 30 Sep 2025 10:03:14 +0000
ROA not before: Tue 30 Sep 2025 09:58:14 +0000
ROA not after: Tue 29 Sep 2026 10:03:14 +0000
asID: 208545
IP address blocks: 2a01:170:1050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1a:26:4e:00:93:65:24:ca:48:de:f8:25:37:97:e3:ed:62:99:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 30 09:58:14 2025 GMT
Not After : Sep 29 10:03:14 2026 GMT
Subject: CN=FF7008954A7E9C3E83A430280C2E55F4C5655100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:c4:8f:bf:32:77:a7:89:4e:df:51:eb:74:
79:fb:ac:6b:a4:a4:11:bd:51:dd:8c:79:b4:17:1c:
51:ea:95:9b:48:63:75:52:8c:f7:58:c0:50:42:d9:
b9:fd:c8:8f:f2:ea:37:6f:0e:a9:62:cb:db:b0:7a:
74:65:a0:57:77:b2:5d:0e:16:e4:84:05:74:61:17:
85:d4:cf:90:15:3a:6c:1d:18:b5:64:e4:50:11:4e:
63:91:14:b5:68:29:99:ad:3b:f2:90:63:48:99:8e:
85:b7:cc:ed:cf:01:53:d9:58:f4:14:17:d4:7e:62:
ac:a7:07:7b:34:a5:cc:1f:be:95:19:c3:0a:79:b1:
86:d5:e9:57:42:e9:e4:e8:be:91:ec:51:b5:19:79:
b3:03:db:02:77:de:77:f3:72:22:26:0f:5f:fb:6d:
6c:e5:3a:34:47:4e:99:e1:2c:13:44:a2:c2:1e:16:
b5:5b:27:ec:7e:30:0e:aa:a9:79:e6:8a:6b:0e:ee:
be:93:da:7c:1a:46:23:19:1e:8d:5f:8b:74:67:3f:
13:34:95:4b:dd:e5:f6:28:76:27:7a:b4:ae:d2:cd:
c9:77:72:07:28:30:71:cb:f0:8f:89:37:c2:9f:05:
b4:df:e7:f1:c2:9f:0f:ad:e8:9f:2e:20:59:b7:49:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:70:08:95:4A:7E:9C:3E:83:A4:30:28:0C:2E:55:F4:C5:65:51:00
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS208545.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:170:1050::/48
Signature Algorithm: sha256WithRSAEncryption
8b:f3:85:fd:2c:8f:50:03:47:21:4c:2f:c5:4f:00:f9:86:80:
f3:90:7a:ab:de:f7:68:d8:66:53:42:da:12:54:97:44:d4:5e:
24:a9:44:c6:2b:99:24:b8:1f:19:3a:34:61:02:0a:cd:d9:ca:
a9:9d:22:d5:bf:ba:aa:5b:fd:20:23:96:4a:21:cc:01:01:d3:
42:f5:48:69:d8:07:80:fb:11:79:68:ee:f1:89:fd:e1:16:c0:
ce:05:9c:7c:ba:1f:b1:6f:06:00:a9:bf:d0:16:aa:a2:6d:73:
a7:ea:97:c5:f7:a2:ed:cd:ee:e2:7b:9d:4c:4b:5e:2d:75:b8:
52:9e:aa:43:52:f1:67:27:84:2a:28:bf:52:6d:52:48:65:98:
54:a9:ff:0a:5a:f3:ec:b0:0f:d8:e2:24:ab:47:0c:3f:d3:ad:
9b:57:d1:4a:19:30:53:3c:bd:b2:df:c5:fa:d5:34:4a:ae:d2:
dd:77:20:6c:42:26:3e:39:ca:1e:cd:63:b0:06:06:fa:69:c4:
89:d3:62:e3:d0:e6:69:e6:ea:1c:a5:a0:aa:ac:8b:7d:db:21:
f7:60:0b:6c:dd:6f:08:bc:0a:02:1b:8a:3d:0a:04:e5:37:b1:
e2:fc:ce:0b:51:69:22:8f:e3:c5:5b:0c:3c:1a:70:0b:35:73:
d1:6e:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:21 2025 by rpki-client