Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208024.roa
File: AS208024.roa (raw, json)
Hash identifier: /dwtuSGDRfX0a9a4kV6GOQBrflgdVoyeWuHsArYodnQ=
Subject key identifier: E1:86:84:9A:6A:2C:37:85:2D:FE:C3:A9:C3:C6:33:DA:A4:73:FC:64
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 60CE88070BE2DC2E5574DD9A040C48ED99B9B07D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208024.roa
Signing time: Sun 10 Aug 2025 18:02:46 +0000
ROA not before: Sun 10 Aug 2025 17:57:46 +0000
ROA not after: Sun 09 Aug 2026 18:02:46 +0000
asID: 208024
IP address blocks: 2a13:9500:c3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ce:88:07:0b:e2:dc:2e:55:74:dd:9a:04:0c:48:ed:99:b9:b0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 10 17:57:46 2025 GMT
Not After : Aug 9 18:02:46 2026 GMT
Subject: CN=E186849A6A2C37852DFEC3A9C3C633DAA473FC64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:3f:7d:ff:3a:52:77:69:0f:8d:a2:07:4f:
7a:61:69:11:72:41:10:68:bc:e8:3f:79:37:eb:67:
41:a0:3b:70:36:b6:0c:0b:a5:20:63:17:2b:4a:3f:
1b:95:19:c7:31:5e:b7:9e:5d:bd:3f:3b:bc:22:37:
67:92:49:7b:e1:4d:f0:ae:a5:31:c4:62:18:bf:b0:
1c:b1:61:ee:9e:4b:0f:66:4c:55:f6:e4:7f:f5:20:
a7:28:9f:4c:75:b4:cd:31:37:28:be:91:75:58:39:
b2:63:68:e1:41:05:dc:b9:db:84:5d:0c:fb:99:5c:
92:fd:e5:fa:5e:a5:74:16:da:3a:7e:bf:8b:8a:9c:
83:fc:18:a9:f7:44:9d:e1:36:33:39:ee:b9:1d:47:
5e:df:29:53:5a:f9:0f:2e:08:24:59:63:39:1e:67:
74:53:03:c6:17:56:e4:76:b0:85:c5:d8:60:92:cb:
20:51:01:b9:39:7d:00:93:62:63:f9:5e:a9:37:91:
4b:18:5f:7b:b2:00:0d:4d:0f:b4:63:b0:dd:91:ca:
ef:fe:ee:23:3d:18:20:9a:db:0f:7f:b9:59:b5:d3:
e8:8a:4d:4d:b4:c6:1e:90:f5:fb:ec:83:2e:a8:b8:
df:05:78:4a:93:82:29:16:59:df:b7:cb:e7:67:c1:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:84:9A:6A:2C:37:85:2D:FE:C3:A9:C3:C6:33:DA:A4:73:FC:64
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c3::/48
Signature Algorithm: sha256WithRSAEncryption
06:ab:9b:14:d0:1f:dc:e4:da:c7:03:f3:ea:cd:1b:06:8f:bc:
6f:a3:0f:8e:8e:bd:e9:3d:2c:83:af:ad:2a:17:f3:02:66:d1:
28:9f:b6:74:50:09:f5:28:67:5b:0b:30:e5:e7:91:fd:d4:96:
ff:6b:20:93:d5:fd:94:60:1d:27:71:d3:a8:97:34:a9:58:e4:
9e:dd:82:b8:e7:7d:2e:1f:9e:c7:0c:3b:ab:a6:47:5a:a7:80:
cf:54:25:3b:b7:de:19:16:a9:2b:b0:a3:9c:ac:e8:3b:5c:59:
f6:33:ce:08:af:d0:14:04:8c:09:6d:49:a7:e4:3d:be:d0:94:
07:36:23:5a:ad:b5:84:67:d0:0f:ff:06:47:58:c6:76:7b:a6:
a8:58:59:9d:86:a0:7c:9c:3e:9b:19:0f:94:d9:08:c8:30:14:
6a:0c:24:f3:cc:ce:ef:a8:24:02:ae:64:2a:9f:74:11:5b:1b:
77:41:26:8c:d9:22:4f:d8:dd:42:e0:0a:5d:cc:87:97:49:24:
ec:a7:4a:c0:af:98:cd:de:b0:a1:d2:b4:25:5e:41:ea:c4:7e:
f5:48:77:92:11:30:a9:2f:c2:5a:e5:c8:74:e5:a5:7a:0f:af:
3c:fb:e6:d8:2f:90:0f:20:16:d4:07:55:92:ae:21:cd:4d:1a:
3c:80:cf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:07:39 2025 by rpki-client