
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS208226.roa
File: AS208226.roa (raw, json)
Hash identifier: 0r/7P75kdzcTBEd2u1ek2LZtbJcXXfnOrqZ8IkJiKs0=
Subject key identifier: 52:8B:C4:67:0F:91:46:07:B3:0C:65:ED:99:A3:AB:39:86:5A:BC:ED
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5BD7D6C7478B2D2B5EB6507FCF490DBEAE09C48D
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS208226.roa
Signing time: Tue 30 Sep 2025 15:55:07 +0000
ROA not before: Tue 30 Sep 2025 15:50:07 +0000
ROA not after: Tue 29 Sep 2026 15:55:07 +0000
asID: 208226
IP address blocks: 141.11.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d7:d6:c7:47:8b:2d:2b:5e:b6:50:7f:cf:49:0d:be:ae:09:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 30 15:50:07 2025 GMT
Not After : Sep 29 15:55:07 2026 GMT
Subject: CN=528BC4670F914607B30C65ED99A3AB39865ABCED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:3f:49:f6:d3:9c:a4:a3:6f:89:19:89:29:
4e:6d:8b:2a:5f:0f:ae:19:aa:e7:a2:2d:3f:7e:e0:
43:5e:80:c2:31:18:1b:cc:3c:f8:23:0e:f6:0b:b2:
11:c0:d4:eb:fc:2d:c2:0d:68:65:99:5f:b1:5b:eb:
12:e1:1a:96:ca:22:36:eb:b1:1a:98:2c:c8:f9:c6:
30:67:71:6e:33:43:67:62:f9:e4:be:d3:7e:9b:80:
af:d8:32:7b:1a:81:c4:26:94:db:d6:6e:53:a8:24:
c6:21:92:7f:fb:8b:ae:0e:b3:47:00:bb:57:17:5b:
f1:97:86:19:47:77:54:b6:04:50:f9:4e:67:9e:d6:
84:90:74:e5:e7:2c:81:ff:55:11:a9:03:68:d5:e4:
5c:36:12:a9:46:90:ae:23:87:7a:45:96:2d:93:f1:
a7:a2:3a:2a:d8:0d:c0:01:71:9b:3c:66:7a:91:f3:
09:7c:48:6c:66:b1:17:db:e4:e2:ed:c0:02:08:77:
d3:06:30:f6:4c:be:22:32:5a:e4:e7:91:26:0f:fb:
e6:5c:30:c1:c5:e3:a9:0b:a6:90:cd:37:fd:eb:f9:
a2:22:46:4c:c7:7b:78:7b:f0:6e:92:4e:18:18:c8:
90:80:73:bf:53:3b:cc:fc:76:bb:8b:f5:3e:c0:43:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8B:C4:67:0F:91:46:07:B3:0C:65:ED:99:A3:AB:39:86:5A:BC:ED
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS208226.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.185.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1a:f8:73:2a:81:5a:a8:c8:af:43:bb:ef:59:a8:e9:67:e6:
1d:2e:ca:41:5d:87:4a:6d:16:47:d7:af:e4:e0:f6:92:03:15:
81:c4:4a:1e:46:0b:89:e3:e0:9e:95:2c:98:e4:f1:ca:14:14:
0a:ac:8f:00:f2:3b:fb:30:ee:1f:6c:4d:8f:ba:78:e8:55:65:
94:9e:08:54:2f:c5:60:34:21:13:ca:7b:e4:8a:ac:42:fc:c0:
36:ec:25:60:6f:89:ce:2c:21:36:e6:68:7c:fa:82:8e:20:85:
94:58:25:92:82:96:cc:83:b0:a3:2a:62:e1:c8:fd:10:94:01:
bf:7d:9f:b9:87:4d:c8:b8:c1:3e:dd:06:e2:41:96:60:22:3b:
08:a1:75:51:c1:fb:60:90:89:7c:cd:a9:59:3b:26:23:76:6b:
90:ee:5c:76:85:ee:d5:c8:1c:26:e7:23:f2:8b:df:dc:52:92:
6f:52:b4:f1:f8:a2:6d:20:aa:72:99:e6:9b:dd:2c:d4:d1:ca:
21:c7:1c:2a:f5:a1:df:13:a7:98:82:d5:9b:fc:df:ac:91:dd:
b9:f3:8c:fb:08:8c:c0:fa:9c:1f:e3:cb:1c:ef:6d:04:78:85:
eb:04:bb:32:47:26:b8:f9:94:50:31:45:82:76:52:08:6e:4e:
3a:6c:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:50 2025 by rpki-client