Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS208972.roa
File: AS208972.roa (raw, json)
Hash identifier: 81ys1H3Wh8+eGT7Kr5Amz5DejlzvTCN7lor8ursNctU=
Subject key identifier: A0:A3:5E:FA:1F:25:EA:E7:21:81:AE:9D:94:C2:30:78:6C:48:65:B6
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 21624EA83BCC22812A106B6CB132BBB92BE21B64
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS208972.roa
Signing time: Sat 20 Jun 2026 11:16:36 +0000
ROA not before: Sat 20 Jun 2026 11:11:36 +0000
ROA not after: Sat 19 Jun 2027 11:16:36 +0000
asID: 208972
IP address blocks: 31.40.205.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
212.87.196.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:62:4e:a8:3b:cc:22:81:2a:10:6b:6c:b1:32:bb:b9:2b:e2:1b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jun 20 11:11:36 2026 GMT
Not After : Jun 19 11:16:36 2027 GMT
Subject: CN=A0A35EFA1F25EAE72181AE9D94C230786C4865B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:5f:fd:7a:a2:5b:df:94:7b:e9:2a:3f:b4:
5f:11:13:03:da:ba:79:43:1a:78:e4:31:88:bc:cf:
b5:ad:eb:c3:d5:e4:01:2c:fd:12:ca:c7:5f:e9:69:
da:5c:57:cc:f5:84:c2:4c:67:d1:27:ec:ef:61:27:
54:26:18:5a:b4:ef:59:6c:af:a8:45:e4:3f:b1:a3:
98:9d:c2:27:8b:be:60:45:c2:45:51:4a:ff:5b:4e:
a2:9d:9c:f9:1b:63:f0:56:db:a1:83:86:72:d6:70:
df:99:6a:bf:a3:bc:79:02:ed:26:da:25:aa:24:2f:
57:38:23:5e:a3:de:41:4e:ea:5d:b9:93:e9:2c:13:
72:70:56:77:7a:d0:ae:aa:e7:0d:91:d3:7c:0c:b7:
c6:66:99:a1:67:b5:94:91:f9:2c:60:b5:bb:7e:20:
7d:4b:42:af:41:fa:e9:84:21:3e:8f:6b:c9:a4:e6:
cb:fc:d7:5b:7b:da:f3:88:f2:1c:19:4e:62:f2:36:
1c:b5:e7:7b:96:57:b6:88:a8:01:e0:63:bd:1a:bc:
a1:0e:f0:01:fb:25:b3:9f:2a:09:3d:22:19:a7:67:
93:c7:7d:a9:53:31:cd:e9:00:c9:c2:3d:2e:b2:ac:
58:f8:50:dd:bf:a0:c9:e7:1c:68:9b:85:5e:8a:66:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:5E:FA:1F:25:EA:E7:21:81:AE:9D:94:C2:30:78:6C:48:65:B6
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS208972.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.205.0/24
85.235.73.0-85.235.74.255
176.96.128.0/24
193.111.79.0/24
212.87.196.0/24
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
35:07:8b:10:84:81:4e:5f:21:4f:96:58:ee:f5:f0:b3:fe:d1:
2f:ab:a4:ee:cd:54:69:51:6d:e5:58:da:e7:b9:37:bd:ea:13:
a7:b2:e4:9c:3d:cf:e6:96:eb:d1:74:72:5c:d7:cd:da:bb:75:
ce:a0:ae:bc:d1:af:fc:a2:9d:26:b3:55:05:90:57:27:39:67:
47:a7:b5:3c:a3:60:5b:75:bf:c3:61:07:10:e5:ca:f3:d8:aa:
04:e4:b3:64:49:f9:82:0a:a0:63:d8:e5:bf:fa:4d:f8:db:82:
00:73:07:a1:9b:e3:64:94:f3:87:64:e0:fb:8a:2d:4d:43:56:
2e:fa:17:49:c7:a1:78:7e:27:12:26:5c:d6:9e:bb:c1:d1:2d:
06:df:10:ce:64:12:1e:2e:f5:88:9a:7a:21:16:08:9e:7c:df:
35:0f:59:52:04:6a:1d:d8:8a:aa:92:8c:e0:9e:85:f2:c0:59:
09:32:eb:2d:78:65:9e:b6:bc:d1:9e:f0:07:25:f0:7e:55:1c:
da:45:49:a3:2b:01:85:b8:4e:01:98:51:c2:94:b9:46:2b:43:
53:bc:2e:87:da:5b:cf:07:27:a7:f3:17:e0:cc:8d:20:c0:4f:
60:65:b7:a6:c8:9b:aa:1d:4b:49:aa:ff:69:b8:98:b6:b0:24:
52:f9:4f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:59:11 2026 by rpki-client