Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208328.roa
File: AS208328.roa (raw, json)
Hash identifier: 4mzlK6e+vjo+/kDQkLk/h0VnkZA5RXfF0aUph5LujQQ=
Subject key identifier: D1:11:50:CA:FA:65:C6:3E:EC:0E:45:E9:A8:56:9F:C6:C9:0D:3C:1F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 08326DCDB36CE8F0C877117F234E935F3D8690FB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208328.roa
Signing time: Fri 13 Mar 2026 12:21:32 +0000
ROA not before: Fri 13 Mar 2026 12:16:32 +0000
ROA not after: Fri 12 Mar 2027 12:21:32 +0000
asID: 208328
IP address blocks: 2a13:9500:4b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:32:6d:cd:b3:6c:e8:f0:c8:77:11:7f:23:4e:93:5f:3d:86:90:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 13 12:16:32 2026 GMT
Not After : Mar 12 12:21:32 2027 GMT
Subject: CN=D11150CAFA65C63EEC0E45E9A8569FC6C90D3C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:dc:48:e1:4c:b4:53:99:9f:35:00:f7:46:
7f:05:41:6d:30:ff:67:e3:8d:13:4e:ab:f3:ce:06:
77:fe:7d:cd:76:c3:a3:f0:b1:b8:0b:4f:b4:f8:2e:
63:28:ec:57:e0:c2:3c:f5:f6:2e:08:b0:7f:2b:e3:
91:ed:f9:ff:3f:f0:de:23:67:56:1e:a9:3b:0c:e9:
2d:75:6c:2e:50:90:84:98:11:2c:1d:3f:83:32:9c:
b3:04:60:c5:8c:17:d7:8d:31:34:d2:c9:9b:fb:bf:
a4:a5:22:47:e6:94:98:f7:db:93:77:ed:2d:e3:c6:
05:01:57:6c:96:b6:71:b0:53:88:b4:69:91:05:65:
38:d3:9f:49:60:92:79:97:27:96:33:f1:f9:4c:ab:
a1:d2:17:d1:20:58:f1:7a:98:07:f1:36:0b:e5:7b:
2e:dc:a5:04:cc:3f:6c:c0:ca:4b:82:99:ef:b8:6f:
57:3c:71:6b:f5:43:d9:f7:4c:7d:ff:4e:0d:86:ac:
66:d5:49:a5:c8:10:00:44:f5:6a:2a:e9:69:de:8f:
52:67:99:d0:71:11:63:b2:c4:a6:31:2e:dd:be:88:
58:42:40:75:36:3d:27:db:f9:26:9b:ab:61:b7:b8:
49:81:26:f3:79:02:e4:97:5a:0c:f3:d9:27:40:99:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:50:CA:FA:65:C6:3E:EC:0E:45:E9:A8:56:9F:C6:C9:0D:3C:1F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:4b::/48
Signature Algorithm: sha256WithRSAEncryption
96:af:63:fd:d1:b9:ff:ce:4b:d3:0f:70:27:c2:20:19:eb:ae:
41:28:70:f2:d7:70:c6:d1:93:b2:eb:b1:45:03:2c:b0:95:91:
fb:c6:20:a7:c7:68:e9:9d:aa:53:99:3f:68:8f:a7:66:4d:68:
18:23:f4:36:34:60:4b:f1:76:9b:a6:7f:81:b5:14:21:c6:40:
d8:53:65:db:bd:9a:7c:fa:45:4b:d5:fb:fc:34:fd:72:b0:e7:
d4:2a:2d:2b:f4:06:02:5d:9b:ae:fe:d0:8b:fd:1e:9c:4e:f3:
23:7d:10:cf:53:56:4b:ae:26:4e:07:30:0e:a7:94:cb:9c:ba:
9f:88:d7:2e:01:0b:15:65:64:3a:ea:35:5c:93:b7:05:8b:09:
96:16:5a:3a:09:04:25:c6:4c:70:b4:0e:a2:19:03:12:a5:64:
8f:50:e7:72:6a:b9:17:9b:26:85:6a:2a:11:f7:13:c5:cd:25:
2b:28:8e:7b:0b:d7:cb:fb:af:7a:ca:3b:10:57:8c:17:3b:57:
b5:21:26:28:a5:c3:04:5b:99:87:7f:f8:1c:8a:4c:b2:fa:07:
d1:b4:ed:1c:54:d2:74:35:93:b1:2c:eb:d9:be:68:57:62:d7:
b6:46:a3:e3:fd:f0:9c:b2:de:b5:1f:6c:0c:a3:57:a6:70:a7:
c8:69:ea:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:20 2026 by rpki-client