Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS208972.roa
File: AS208972.roa (raw, json)
Hash identifier: 1eeYFI96mIE78WGZyLtP+uZgpMHZeS0GixgqR3gGRZ0=
Subject key identifier: C3:CC:BF:18:2B:94:02:A3:DB:D4:1A:E4:6C:3E:B6:AA:25:B4:C5:B0
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 02DF968E6A95F4357466162C9853147DB7A47046
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS208972.roa
Signing time: Mon 15 Jun 2026 09:24:05 +0000
ROA not before: Mon 15 Jun 2026 09:19:05 +0000
ROA not after: Mon 14 Jun 2027 09:24:05 +0000
asID: 208972
IP address blocks: 31.40.205.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
185.231.227.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
212.87.196.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 19:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:df:96:8e:6a:95:f4:35:74:66:16:2c:98:53:14:7d:b7:a4:70:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jun 15 09:19:05 2026 GMT
Not After : Jun 14 09:24:05 2027 GMT
Subject: CN=C3CCBF182B9402A3DBD41AE46C3EB6AA25B4C5B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:1d:de:81:bf:30:99:6b:1d:97:f3:66:7d:
a6:06:ae:0d:83:99:6b:04:4a:a7:27:c6:f6:a8:71:
4e:ad:ef:4f:47:aa:ea:ff:82:0f:a3:31:9e:6a:e1:
6a:14:10:da:45:4d:d5:9a:05:3b:74:35:9d:aa:4d:
e6:76:70:b0:51:19:6d:5c:03:b8:a8:5b:c2:3a:3b:
a3:80:49:08:ed:91:51:4c:18:8c:0d:6d:65:41:21:
b5:a4:97:0b:19:46:2d:62:fa:8f:f2:bd:fa:32:55:
e7:50:8a:e0:53:15:00:55:c8:38:72:33:71:6e:27:
f2:86:a7:1d:fb:74:d7:db:b2:2f:a6:23:88:29:03:
28:4a:e9:b5:1c:a8:67:23:ec:bc:44:d2:41:7d:a7:
01:a4:02:09:70:06:94:81:ed:cf:16:a6:73:5f:4d:
ff:19:22:2e:ba:83:ae:77:2d:ef:32:e5:21:11:4e:
df:06:90:30:6a:a4:09:6a:bc:be:f2:dc:75:6a:d6:
9f:a1:e7:ab:b0:8f:0a:09:1c:15:06:6b:d5:49:6c:
8a:e3:c7:c9:dc:ce:36:46:9c:dd:f5:d9:59:68:f2:
44:ef:2f:48:a8:79:fc:3b:ab:72:b2:a4:48:95:a7:
30:0f:ee:8c:e2:ff:20:0e:d9:83:53:f9:5c:a2:e8:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CC:BF:18:2B:94:02:A3:DB:D4:1A:E4:6C:3E:B6:AA:25:B4:C5:B0
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS208972.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.205.0/24
85.235.73.0-85.235.74.255
176.96.128.0/24
185.231.227.0/24
193.111.79.0/24
212.87.196.0/24
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:cb:4e:8b:fd:5a:0c:ed:ba:84:d7:dc:98:32:35:bf:36:25:
5b:e3:d5:ad:22:fe:d6:e2:25:ae:a8:78:8c:fd:7f:45:63:70:
8f:d6:92:16:d6:96:74:ad:b5:7e:c5:5e:03:15:64:b5:b6:27:
e5:3c:0e:21:08:ef:38:97:a3:24:42:3c:ea:71:c8:67:6b:64:
2e:3f:29:25:45:7a:7b:47:4e:bf:8d:01:8f:c1:47:ca:83:30:
c1:0b:ff:83:7c:b2:17:95:24:2d:eb:b2:dd:ee:e2:f1:3f:23:
7a:26:63:16:63:1d:0c:04:d4:af:d4:c5:a0:6c:e7:8c:2c:02:
8e:7e:fd:c0:b7:6e:99:21:21:21:46:9d:39:6a:12:5e:0f:39:
69:9a:1d:11:c4:d6:a5:17:a1:af:f5:85:91:45:c8:62:5e:63:
19:d3:cc:a9:a6:39:98:88:a9:6a:9b:ae:45:eb:cf:b0:16:fe:
5b:98:43:d0:78:38:7a:b8:5a:46:33:8c:5f:e5:85:c4:49:a1:
16:84:c3:59:a4:eb:91:36:c5:de:cf:03:c9:07:5b:21:f5:a4:
6e:18:23:7e:8e:a3:d7:c4:01:22:09:c5:1b:d9:75:7d:5d:9e:
4f:0f:00:51:9f:61:71:c5:53:8a:95:da:df:80:77:ea:0f:fd:
e3:72:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:33:19 2026 by rpki-client