Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208328.roa
File: AS208328.roa (raw, json)
Hash identifier: NcGxGATIyAQkUIaFFn0i4bHyA++hrA2weTt8ywpa3Ug=
Subject key identifier: 3E:CD:94:6E:11:0C:4E:77:BC:73:64:65:30:F5:B5:D1:40:61:95:94
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3F893704A4850FB36E86562D7A510985FCFAFAFF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208328.roa
Signing time: Sat 11 Oct 2025 08:39:22 +0000
ROA not before: Sat 11 Oct 2025 08:34:22 +0000
ROA not after: Sat 10 Oct 2026 08:39:22 +0000
asID: 208328
IP address blocks: 82.22.2.0/24 maxlen: 24
2a13:9500:4b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:89:37:04:a4:85:0f:b3:6e:86:56:2d:7a:51:09:85:fc:fa:fa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 11 08:34:22 2025 GMT
Not After : Oct 10 08:39:22 2026 GMT
Subject: CN=3ECD946E110C4E77BC73646530F5B5D140619594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:56:6f:ed:26:8d:39:43:a2:f3:05:c5:a2:
cf:29:84:c8:3b:e6:7e:86:07:55:2c:7e:fc:61:b2:
b2:4b:bf:c5:e6:9b:f4:df:77:ca:7f:93:29:cd:c0:
d8:70:07:48:65:e3:96:9f:71:1a:c9:fc:a1:23:d4:
ef:8a:9c:27:48:ab:6a:f4:56:8c:4b:ee:d4:34:bb:
4c:4b:3a:8f:d1:a4:1b:d6:e4:08:ae:e3:dc:33:11:
be:45:a1:de:53:cf:11:b3:98:a9:05:8f:db:e1:50:
fa:1e:7a:e2:03:ba:aa:9e:ce:2a:d9:3a:17:66:43:
b7:10:52:f5:f4:d8:5e:ec:88:72:64:07:d0:3c:bd:
7f:d9:aa:ac:22:82:4a:66:8c:79:f0:6e:4c:be:f4:
17:60:2c:56:0e:44:0c:62:21:e0:5e:9a:c9:c8:a9:
b7:b9:37:62:34:4c:40:e8:dc:4f:ab:1b:26:23:94:
18:f6:f0:15:bc:3a:8c:06:af:f6:70:db:c5:df:ac:
e2:f0:53:6f:31:9d:0a:81:d7:28:c4:62:82:3e:63:
e7:f7:50:bb:70:16:0b:7b:49:f6:fb:b7:85:62:d9:
f4:5a:0d:72:30:5a:39:81:53:3d:3d:49:a7:34:d1:
2c:d9:1e:e2:e4:6c:4f:6c:bf:f8:9a:40:49:84:21:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:94:6E:11:0C:4E:77:BC:73:64:65:30:F5:B5:D1:40:61:95:94
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.2.0/24
IPv6:
2a13:9500:4b::/48
Signature Algorithm: sha256WithRSAEncryption
00:a2:ee:aa:c5:06:50:98:1a:09:34:ef:07:ff:2c:ff:2b:91:
00:5d:a9:08:2f:5a:8b:43:f4:af:4b:64:60:52:ac:10:80:d8:
5a:b1:e9:16:e8:f0:b4:d2:e0:0c:0f:56:ca:69:5d:ae:60:14:
cf:db:c4:e6:5c:25:dd:1e:dd:65:a7:7f:12:8e:d6:76:44:89:
cf:e5:26:4b:45:8c:5f:2a:39:67:e0:ae:7e:3a:f5:7a:ef:a2:
5c:9e:e7:f8:2f:2b:3a:1c:fb:27:3e:75:ad:f6:0d:b5:bd:74:
36:25:41:4b:e0:e4:34:19:9c:d9:fd:f3:b2:7d:ae:61:c6:bd:
a6:7f:b6:49:ad:ce:f6:4d:be:9b:30:4f:b6:99:d4:4a:a2:cf:
2d:04:5a:af:bf:cc:65:ce:28:3e:27:0b:c8:42:d1:ea:36:70:
e6:01:83:ad:ae:fa:62:57:6d:cb:7e:be:ba:34:2b:af:c8:b3:
25:63:b1:dd:df:b4:34:bd:75:7a:84:20:aa:06:a5:b6:77:43:
73:c1:a0:f4:38:3d:6e:d6:32:22:fb:2e:3f:11:aa:63:f9:4f:
5b:a4:4f:08:ca:40:34:db:3b:2c:60:e5:b7:ef:95:7a:6a:e1:
b4:4b:76:77:81:2c:b6:c0:a4:9a:61:b1:e6:25:48:db:99:e2:
cd:0f:d3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:42:51 2025 by rpki-client