Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208259.roa
File: AS208259.roa (raw, json)
Hash identifier: DKuu0OgkLUxKrQuTYmnwNRXGEgq2QDUugr2y9Ap7IpI=
Subject key identifier: 3F:C2:E1:8C:5C:D2:65:ED:07:90:1D:24:E4:53:7B:B2:E7:A0:F3:FF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2C7990C2A45C2115514EBE21220C768B76BDB5B6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208259.roa
Signing time: Wed 30 Jul 2025 06:39:23 +0000
ROA not before: Wed 30 Jul 2025 06:34:23 +0000
ROA not after: Wed 29 Jul 2026 06:39:23 +0000
asID: 208259
IP address blocks: 167.148.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:79:90:c2:a4:5c:21:15:51:4e:be:21:22:0c:76:8b:76:bd:b5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 30 06:34:23 2025 GMT
Not After : Jul 29 06:39:23 2026 GMT
Subject: CN=3FC2E18C5CD265ED07901D24E4537BB2E7A0F3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:78:65:e2:7e:7d:3b:91:33:12:22:ca:22:
ce:fb:6e:77:f4:36:cb:5f:3f:99:4e:be:5d:f9:cf:
0c:4e:48:68:63:90:bd:40:2f:a3:6c:b6:56:4a:e9:
0e:2a:64:f4:7c:a9:b3:3a:67:82:3c:54:ee:36:8a:
97:a8:64:aa:bb:b0:2d:8b:7a:c8:0d:6d:6d:4a:80:
31:62:3f:5d:b4:94:48:31:99:c6:eb:e7:df:29:9e:
75:3e:da:1f:e0:bf:ce:5a:17:97:96:4d:04:58:23:
45:50:e0:8b:6e:99:36:ba:46:f3:e8:9e:49:e0:9d:
b2:a4:0a:e4:c5:14:50:fc:21:b1:97:3e:f3:66:43:
91:3e:c2:a8:7b:be:86:cd:b0:33:63:35:2b:92:ad:
13:80:3b:05:dd:e4:04:72:4a:cd:b0:b9:aa:bf:9c:
1f:dc:a0:7e:04:05:8f:88:e6:62:d4:86:64:d7:35:
de:de:7d:fb:af:0d:8e:e9:eb:51:bf:37:61:54:46:
5e:28:4b:bc:d8:c2:81:29:1c:93:d6:23:76:7d:0e:
bc:a4:58:d7:81:cf:61:25:2d:b5:9c:5a:17:27:0b:
32:d8:eb:7a:2b:ff:15:39:4f:61:b3:40:65:94:1f:
a8:cf:02:5a:a7:cd:cf:18:54:b6:83:04:09:03:b1:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:E1:8C:5C:D2:65:ED:07:90:1D:24:E4:53:7B:B2:E7:A0:F3:FF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS208259.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.213.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6d:ca:79:78:99:23:be:85:06:8a:6d:ff:97:4b:88:dd:39:
93:41:0d:02:62:cf:b1:c8:e3:5a:1d:c1:65:c4:1a:b8:2d:e9:
d1:e0:7e:6f:bd:7a:cc:98:47:f5:ca:52:ec:fb:f3:58:d4:28:
37:e7:f2:e1:e0:82:a6:b2:2e:f9:ef:84:06:bc:7d:43:61:e8:
63:f6:c3:0a:3c:cb:5e:61:bb:99:ae:e2:43:a7:47:7f:fa:ce:
c6:5e:cc:19:6f:0d:f5:13:10:30:10:98:66:f3:5e:8f:d2:72:
32:ae:2b:95:bd:4d:29:14:38:bb:39:77:0e:68:92:97:64:a0:
c1:a4:92:ed:41:be:2d:4a:89:b6:05:b7:11:07:98:83:7d:4f:
5d:f6:2c:49:03:f8:ff:d5:88:69:82:95:3e:36:49:4b:c7:cb:
0e:b0:ae:09:b4:f0:f2:92:40:78:2d:2e:ab:f0:e0:e3:26:ee:
e0:50:d4:73:cb:c8:1b:ff:a7:e8:5c:fc:21:53:c5:b2:35:d8:
c3:d1:e3:b6:89:ef:64:7a:97:78:50:60:36:12:34:d6:a6:f5:
6d:0c:ad:2c:cb:65:f3:e0:cc:1e:d8:f4:f6:86:3e:9c:f1:04:
49:50:09:b1:ad:ef:ac:a1:06:5d:96:09:45:41:60:5b:bb:fe:
cc:59:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:32 2025 by rpki-client