Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208905.roa
File: AS208905.roa (raw, json)
Hash identifier: jc5fAS7TJjt0r46daqsrC6cSNwN2yUfPum7IPXepBnc=
Subject key identifier: 59:58:45:AF:DC:50:E3:7A:18:83:58:98:C8:FC:77:1A:DE:83:77:80
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2D019A97373FECE36EA1B5B9E908C4E2F971D9E9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208905.roa
Signing time: Fri 27 Jun 2025 10:03:31 +0000
ROA not before: Fri 27 Jun 2025 09:58:31 +0000
ROA not after: Fri 26 Jun 2026 10:03:31 +0000
asID: 208905
IP address blocks: 181.214.197.0/24 maxlen: 24
181.215.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:01:9a:97:37:3f:ec:e3:6e:a1:b5:b9:e9:08:c4:e2:f9:71:d9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 27 09:58:31 2025 GMT
Not After : Jun 26 10:03:31 2026 GMT
Subject: CN=595845AFDC50E37A18835898C8FC771ADE837780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:a0:26:ad:36:f1:fe:6e:ad:b7:aa:fe:3d:
a1:54:c9:af:80:0e:3d:6e:d8:e2:db:3f:f6:bc:d3:
b3:ac:08:3f:51:2b:91:53:c7:8b:58:e4:23:5b:4c:
d4:84:0c:90:bb:98:66:98:1d:b3:f4:24:0b:c3:1d:
91:40:43:f1:68:8b:83:11:b7:33:75:4b:f6:9d:05:
a2:35:e7:17:01:ed:3e:a2:b5:9a:5b:33:f0:fb:26:
d5:56:a2:a9:b4:ab:aa:90:87:1d:4c:88:6c:e2:e9:
c7:00:4d:90:3c:84:1d:61:13:a8:f6:52:b8:ea:7f:
0e:18:7b:fb:fb:00:a0:58:74:c9:18:29:a1:02:9e:
f3:3a:42:fa:ee:f7:38:c9:1f:19:d5:25:58:49:42:
17:ba:15:32:e0:e3:21:71:bd:84:c0:85:46:83:9b:
93:32:21:bc:43:16:52:d1:92:ea:ff:af:93:6b:9e:
03:dd:70:67:54:3b:bc:7b:2b:1f:64:fc:4e:4d:76:
55:2c:aa:d8:a4:6f:c0:49:46:1a:33:22:72:d7:e9:
db:cf:05:ef:78:7a:1c:cb:42:bc:4a:39:bc:c2:98:
0c:92:ba:58:52:f5:ba:31:2d:e5:af:b5:6f:20:4c:
58:76:fe:1d:b4:f3:3e:b7:12:46:e2:17:7b:8f:e1:
3d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:58:45:AF:DC:50:E3:7A:18:83:58:98:C8:FC:77:1A:DE:83:77:80
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.197.0/24
181.215.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8c:8f:6b:0a:29:fd:3d:82:6e:b3:66:2f:4e:45:71:45:93:
40:0b:01:80:5d:a3:b7:3c:73:f3:47:c6:04:86:9d:85:64:ef:
7f:b8:84:ae:b0:e3:a8:55:de:dc:1a:b4:6f:2a:66:4e:d9:be:
f6:65:e4:a7:e4:f2:21:e5:26:a1:c2:72:99:86:61:f2:5a:2a:
22:f6:84:89:70:4b:f6:4c:55:3e:43:61:c2:ab:ce:9d:09:ca:
bb:54:84:6b:e0:41:d6:08:e7:f7:89:ea:16:37:54:bd:9a:ce:
0c:91:89:95:74:1e:e6:83:ed:3d:dc:5a:80:06:50:c5:d9:dd:
00:e1:bc:8d:9f:ab:b8:fc:be:10:c0:92:55:03:68:3a:28:5e:
75:fc:9e:ce:75:18:f5:47:2e:ca:de:e0:da:c9:55:f2:b7:c3:
d2:7f:52:57:ab:53:ec:f5:e7:d1:69:c7:31:8d:1a:3f:2d:21:
35:87:b0:72:fe:e8:32:c1:fd:5d:b5:f0:28:45:c0:10:4c:ba:
78:35:ae:4b:0e:99:6b:73:2a:c9:64:8d:c0:4c:ef:53:61:f0:
5f:0e:41:cb:f4:ab:72:16:e9:20:72:ab:ec:44:8d:7d:65:f8:
c4:f6:57:2c:18:30:2d:8e:03:60:bf:5d:b1:c9:e1:c2:f7:8c:
21:91:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:06 2025 by rpki-client