Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208191.roa
File: AS208191.roa (raw, json)
Hash identifier: 5s69YCkRz0Ud7CarWWMTIA7im5rlfzrXK/6w2+yGrf0=
Subject key identifier: E8:7D:82:A1:EA:84:7F:35:C1:8E:92:EE:09:84:BC:BF:45:61:5D:D0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 48B595F1B75D74904A59420B01D826C0F81363D3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208191.roa
Signing time: Tue 05 Aug 2025 10:51:55 +0000
ROA not before: Tue 05 Aug 2025 10:46:55 +0000
ROA not after: Tue 04 Aug 2026 10:51:55 +0000
asID: 208191
IP address blocks: 96.62.190.0/24 maxlen: 24
155.117.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b5:95:f1:b7:5d:74:90:4a:59:42:0b:01:d8:26:c0:f8:13:63:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 5 10:46:55 2025 GMT
Not After : Aug 4 10:51:55 2026 GMT
Subject: CN=E87D82A1EA847F35C18E92EE0984BCBF45615DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:20:e6:83:da:a6:15:b2:2d:b1:a5:91:ba:
f6:b9:1e:dd:d0:8f:fa:9f:41:16:ea:ac:bd:ec:02:
e7:35:0c:53:98:d9:94:68:23:0e:90:cd:3f:69:6f:
1b:25:32:a1:ee:8e:46:6d:5d:ae:15:f2:a5:ed:1e:
99:f3:64:0b:ab:20:47:2b:d8:6c:d4:8e:ac:54:b8:
a9:e6:cf:4c:a9:b4:f0:cd:da:b9:0b:3b:8b:59:10:
e1:43:ab:2b:4d:e9:ed:0e:9f:02:2c:92:66:9a:bc:
a0:65:27:78:92:a8:fa:9c:cd:e5:ac:a4:1d:27:70:
bb:fe:94:cc:7c:26:98:18:a3:54:1a:4c:f6:7a:84:
b5:29:d5:ea:f9:ab:67:93:39:a5:d9:c7:39:4e:03:
98:47:9f:2c:48:f2:19:bd:10:43:e0:72:db:ea:38:
13:31:c2:cb:26:cf:ce:e0:ef:44:12:f5:78:94:26:
60:02:02:31:c5:96:56:28:78:e8:bf:63:da:88:90:
9d:f3:cc:ec:86:01:ba:07:d4:95:5f:4d:45:87:fc:
fc:cc:6b:9a:e0:ea:d1:bc:ec:25:b1:f2:d3:f3:59:
c7:15:1c:17:41:72:b0:88:d7:44:23:03:97:d8:31:
15:b4:cf:61:4e:f2:96:97:98:56:a3:33:45:15:1a:
2c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:82:A1:EA:84:7F:35:C1:8E:92:EE:09:84:BC:BF:45:61:5D:D0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208191.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.190.0/24
155.117.237.0/24
Signature Algorithm: sha256WithRSAEncryption
68:18:fe:b1:20:92:1a:5e:b3:9a:31:a3:8a:3c:63:cc:c4:08:
9f:2a:fc:0d:33:b0:7d:25:d3:47:8b:20:10:48:0a:a7:08:8a:
c5:bd:54:7e:71:79:bc:85:38:fa:b8:72:34:94:77:d3:a5:ae:
e3:65:c8:23:65:40:5f:80:94:48:7f:e8:7e:21:1f:2f:b0:6f:
df:ee:38:56:d7:89:39:da:d9:f4:b3:eb:b5:f8:a5:6c:8c:52:
22:07:0c:c3:cf:49:03:b2:42:92:ee:b0:da:5e:76:c3:22:9b:
d6:9a:6a:67:5d:cb:ee:b2:aa:69:97:69:78:f9:ba:f8:51:54:
78:68:04:b2:59:30:ef:87:f3:08:95:59:2c:d9:da:5e:f2:47:
c8:5b:52:80:7c:54:03:f8:4e:8a:3c:7a:76:b6:d7:82:46:cc:
76:33:96:19:d9:6f:38:75:ac:57:1a:d9:e1:44:f8:23:c6:86:
aa:13:1e:db:92:62:ab:99:7a:41:3b:99:fa:73:29:b7:a6:b0:
a5:1f:73:5f:f8:3d:f9:aa:bb:d4:05:ff:84:a0:b1:84:aa:10:
74:a8:41:4e:87:84:7b:8c:8a:f3:7f:f2:02:76:e1:03:6c:ce:
11:6d:35:33:97:74:b3:4a:97:f6:8f:a4:7e:d2:98:dc:34:fd:
20:35:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:05 2025 by rpki-client