Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208824.roa
File: AS208824.roa (raw, json)
Hash identifier: UeGhOA/CekBtpDzmr2wpQYc0TQVzbOUQJuE0YblM3vc=
Subject key identifier: CA:CF:FB:48:02:F3:8F:A5:10:1D:CB:D2:3C:8F:B1:F2:54:48:5A:79
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1EFE102DF4990CD3D7BF3206F312F144269056FC
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208824.roa
Signing time: Thu 23 Apr 2026 15:35:07 +0000
ROA not before: Thu 23 Apr 2026 15:30:07 +0000
ROA not after: Thu 22 Apr 2027 15:35:07 +0000
asID: 208824
IP address blocks: 2a14:7585:7000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:fe:10:2d:f4:99:0c:d3:d7:bf:32:06:f3:12:f1:44:26:90:56:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 23 15:30:07 2026 GMT
Not After : Apr 22 15:35:07 2027 GMT
Subject: CN=CACFFB4802F38FA5101DCBD23C8FB1F254485A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:70:87:f8:54:71:5c:e5:35:07:0e:af:f2:
59:04:20:c6:37:74:bd:09:e8:a8:27:99:be:4d:c4:
e7:38:7a:af:60:29:15:13:d5:00:88:eb:82:39:05:
7e:92:91:4d:5c:92:69:7e:5c:71:ce:59:3e:01:b8:
19:67:6b:fe:c8:a0:8b:8b:ef:62:e2:22:c1:d7:23:
13:8c:bf:b6:05:7d:08:bc:30:6c:ea:30:f2:f5:4c:
2a:d3:f1:18:7f:6a:14:b6:85:b3:c5:0b:3f:f8:d8:
61:52:c5:eb:36:f0:16:dd:de:50:6a:44:37:5a:89:
2c:cb:da:9c:0e:54:17:b7:96:e0:01:d2:26:47:53:
40:00:53:cb:e6:f6:d9:7c:89:0f:bc:83:a5:0e:23:
4e:35:5e:fe:db:07:f6:0d:b3:8a:83:80:07:d8:92:
5b:de:b0:21:99:7f:56:15:89:df:06:bb:d6:2b:8f:
78:93:50:72:01:d5:3c:0f:b8:61:cb:fc:97:d1:2a:
a1:9a:c1:27:7c:ab:6f:d8:a8:87:f1:c4:42:7d:43:
fa:c0:36:4b:63:85:b7:20:78:d2:2e:db:35:12:fc:
bc:4e:35:cd:5e:d8:86:84:10:6f:11:d0:dc:ba:ed:
59:5a:54:cc:a2:cb:3e:46:b0:f4:fe:2b:dc:dc:e5:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CF:FB:48:02:F3:8F:A5:10:1D:CB:D2:3C:8F:B1:F2:54:48:5A:79
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208824.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7585:7000::/48
Signature Algorithm: sha256WithRSAEncryption
52:58:51:df:73:f4:d0:da:43:9f:7b:9d:56:d2:36:60:85:38:
a4:1b:39:17:c4:5d:fc:58:6d:35:59:85:9c:41:21:21:01:fb:
30:c7:de:7c:ed:7f:b0:58:fb:dc:93:1a:5c:2a:8b:2a:5f:22:
b3:4e:a1:e4:cb:1d:a1:9a:39:5b:1b:02:1f:f9:26:0f:2e:ef:
8a:d1:86:55:ae:4f:99:63:9c:db:6f:1d:ff:34:a6:fd:0c:47:
f2:f3:f8:b5:c4:7c:ab:00:18:8e:ea:08:63:e8:24:37:63:d1:
b6:6d:4c:65:af:c2:de:c8:30:f7:f9:ca:de:85:12:ac:a4:e9:
db:17:2f:f6:c9:96:55:0e:47:06:e6:ea:04:3a:da:94:ba:ca:
8b:aa:21:83:23:a6:b8:b6:86:76:cb:ec:4b:d4:06:64:bc:75:
74:b4:b1:8b:e4:7f:b7:93:01:94:76:45:df:48:d8:29:aa:0c:
4f:24:fa:dd:a2:a1:cc:86:33:02:a9:2c:f0:69:89:a9:53:45:
2f:b1:3c:d2:06:d8:6a:84:6b:23:77:3c:46:f7:46:16:e4:83:
5b:9e:f6:19:01:87:5b:35:ee:d5:4c:ff:24:17:b5:42:68:89:
ad:4f:4e:8d:3a:dc:0a:99:ae:90:da:93:1a:fd:cf:06:31:5a:
09:35:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:45 2026 by rpki-client