Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208024.roa
File: AS208024.roa (raw, json)
Hash identifier: jEio/7YHlDs9N8z0IacLF1xlEogxTf0CoR/jRFm6VbM=
Subject key identifier: 81:0F:D9:AE:5A:B5:9E:0E:F8:F5:82:08:E7:52:2F:8E:17:C7:FB:17
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 343FABFF33027E349E04078D561143BE5195F542
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208024.roa
Signing time: Wed 15 Oct 2025 16:28:12 +0000
ROA not before: Wed 15 Oct 2025 16:23:12 +0000
ROA not after: Wed 14 Oct 2026 16:28:12 +0000
asID: 208024
IP address blocks: 45.152.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3f:ab:ff:33:02:7e:34:9e:04:07:8d:56:11:43:be:51:95:f5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 15 16:23:12 2025 GMT
Not After : Oct 14 16:28:12 2026 GMT
Subject: CN=810FD9AE5AB59E0EF8F58208E7522F8E17C7FB17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:11:6b:78:74:79:e0:bc:e1:64:ad:46:cf:
f0:e4:9f:35:ec:d0:b9:f0:18:c1:42:ac:8a:88:28:
f9:82:53:e3:86:35:2e:a5:5b:a3:41:96:6a:b5:d3:
a7:4f:e2:51:51:d9:2b:57:66:9b:64:a3:22:fe:f3:
97:08:41:e1:d8:9a:d7:85:7d:7c:0e:b2:c4:a8:d1:
91:64:cc:2f:39:8f:6f:44:13:4e:7e:f3:d4:8e:bc:
9c:fb:f9:e5:f7:e7:bf:3f:bc:e4:b7:4e:05:27:ed:
d6:35:88:9a:27:07:f7:23:da:05:41:a0:21:40:3f:
63:cc:b0:4c:2d:83:69:d9:ae:ae:ec:b3:bf:19:30:
82:00:d4:9c:e6:b5:21:6b:0f:56:11:7b:39:81:3c:
81:b1:59:a8:c2:85:89:65:ef:95:f4:7a:fa:e4:6f:
23:ea:6f:50:ae:ca:4c:aa:10:10:14:10:47:3b:71:
97:62:46:df:34:0f:e1:1b:d2:65:a1:8a:d8:70:d5:
1a:e9:0e:f5:d4:93:4d:f1:50:e2:47:24:cc:02:12:
ce:8a:ea:a9:d1:1e:0f:c5:32:2a:75:1b:ac:02:a4:
98:08:72:f4:e9:37:55:02:38:d3:62:ad:57:cf:ff:
b9:a2:f8:29:ed:ec:aa:5a:49:8b:c5:a8:76:ac:3f:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0F:D9:AE:5A:B5:9E:0E:F8:F5:82:08:E7:52:2F:8E:17:C7:FB:17
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.241.0/24
Signature Algorithm: sha256WithRSAEncryption
71:bf:cd:8f:ea:15:d6:6e:ad:a0:28:c0:6f:17:4d:55:dd:95:
87:5f:46:1a:e8:80:d9:6e:fa:fd:53:b7:33:16:e7:22:05:6a:
7d:f8:af:bd:af:9f:d6:94:aa:5d:b8:d8:2f:89:8c:ab:b8:06:
7f:09:b2:1c:05:08:04:5f:91:8e:e7:e5:86:97:70:86:75:74:
18:aa:79:26:de:b6:6b:d7:cf:b3:77:29:c1:52:e1:9b:8b:69:
df:0e:44:2f:d3:cd:d2:27:30:18:79:1a:d3:39:87:d6:55:4c:
48:4b:29:ed:eb:be:1a:d7:25:75:8e:24:13:08:7c:43:89:60:
6e:58:9d:c8:b0:b7:3f:ab:b6:6f:82:42:ca:0d:09:55:cb:d5:
91:e0:fc:73:df:f2:ec:9f:b0:25:aa:d8:fd:0c:73:55:06:62:
eb:c7:fb:54:c6:8d:7e:cf:c7:ae:da:f9:72:64:b8:27:b2:c5:
95:47:ad:0a:6b:ea:f9:da:d2:70:92:fd:ee:1d:0c:79:5d:93:
3f:14:7b:c9:1d:39:f7:6a:b8:a3:ec:03:85:dc:ea:b0:58:fe:
58:2c:4f:16:26:3a:8b:d8:1b:4a:da:8b:da:72:e8:98:9f:fe:
90:8c:56:ca:9f:30:8d:35:5f:94:9a:6a:f6:73:b8:9e:f6:fa:
61:46:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:52:56 2025 by rpki-client