Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS208753.roa
File: AS208753.roa (raw, json)
Hash identifier: QptpOiKruIG3EWVAyuBX3OStLkFE1QeL3DZ3USzKYtQ=
Subject key identifier: B3:75:29:5D:27:1E:2D:75:3B:7B:80:C1:A0:00:AC:1B:B5:CB:E4:EB
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 7FB6CFFCB1C33A64B53CDC631C6F15AE672E04AA
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS208753.roa
Signing time: Thu 12 Nov 2026 08:25:09 +0000
ROA not before: Thu 12 Nov 2026 08:20:09 +0000
ROA not after: Thu 11 Nov 2027 08:25:09 +0000
asID: 208753
IP address blocks: 2a0f:1cc5:60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 06:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b6:cf:fc:b1:c3:3a:64:b5:3c:dc:63:1c:6f:15:ae:67:2e:04:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 12 08:20:09 2026 GMT
Not After : Nov 11 08:25:09 2027 GMT
Subject: CN=B375295D271E2D753B7B80C1A000AC1BB5CBE4EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:2e:4f:2d:12:9f:5c:32:e3:1f:f2:ef:d5:
10:45:5c:e4:92:99:32:2b:9a:e4:55:1d:5c:0e:65:
29:48:cc:59:50:e2:11:19:a0:f0:76:21:30:3b:e7:
3a:e1:22:19:10:4f:f1:79:7e:03:99:77:b8:0d:59:
be:bb:32:87:08:47:3b:19:6b:0a:5a:55:e9:22:36:
93:2a:55:e7:cc:8a:4e:eb:a6:47:17:27:8c:ca:c7:
43:f0:ee:c2:18:0b:6c:f2:d1:c3:83:cd:0b:bc:d3:
a4:04:28:f0:55:43:9d:71:51:35:f4:c5:d6:5f:5d:
48:8d:57:81:d4:f8:2c:38:30:1d:c2:05:73:dd:e0:
86:d5:57:47:ae:da:1b:d4:91:5f:fb:68:1c:ac:f0:
df:e8:48:db:15:59:9c:c6:fc:93:db:a3:c8:3d:94:
17:68:58:87:c4:cd:9b:31:62:78:6e:93:7c:64:83:
f5:df:76:5a:b6:3f:73:e8:4c:f8:6d:e8:e7:8d:78:
11:e0:7a:b1:64:41:f3:4b:10:3c:98:b5:c5:88:b1:
5a:05:02:af:73:27:98:84:b5:5f:95:18:ab:00:00:
fa:5d:9b:c3:e8:dd:c5:5b:f0:f5:bd:7d:1d:18:5c:
4f:c5:5f:0c:b2:a4:07:95:1c:f1:e9:e8:f1:ab:d8:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:29:5D:27:1E:2D:75:3B:7B:80:C1:A0:00:AC:1B:B5:CB:E4:EB
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS208753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:60::/44
Signature Algorithm: sha256WithRSAEncryption
5a:ad:35:d6:0b:55:6b:72:de:62:a0:b8:f0:eb:76:f8:78:f6:
e3:f7:78:8f:9e:e3:ce:32:ac:ac:23:0b:db:24:50:0d:a5:63:
a7:d8:7f:b9:57:1c:48:87:8e:2c:23:3a:a3:6f:bd:d8:c4:c2:
7e:fb:9d:85:24:65:9c:5e:93:08:fa:32:74:17:ec:92:ee:77:
f5:c2:c1:34:a7:fe:fd:92:b5:ab:47:70:67:98:2f:4e:54:54:
3c:50:85:2c:e6:10:17:f5:c3:bf:55:64:90:d5:4e:36:27:87:
bc:c8:55:c5:f5:59:6c:61:db:12:f0:95:92:1c:0c:ef:00:e3:
56:91:5e:ab:0b:a8:6d:07:f7:6e:34:bd:a7:9e:c3:be:3e:9f:
1f:83:5c:ba:f0:86:e2:ca:0e:e8:00:10:bb:d3:21:ba:cb:3f:
c1:7c:62:fb:eb:a0:da:bd:2b:64:26:cb:09:24:29:f4:c1:b1:
cf:8f:b4:55:d0:80:da:90:4a:14:ee:1c:d6:8f:f1:53:c2:6c:
41:08:c8:bb:99:89:70:ea:2a:93:00:e1:55:c4:57:5f:92:de:
8a:0f:5e:fe:69:c3:16:a3:65:b1:19:3e:79:d5:7e:a2:3a:f7:
31:b7:da:6c:71:d5:c9:a1:1e:14:dd:55:7c:63:45:8c:e3:a9:
f3:0f:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:01:24 2026 by rpki-client