Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208711.roa
File: AS208711.roa (raw, json)
Hash identifier: UBsIklGZG1m8F1sq7xZf6/Q7cVzHx72S4T4Bw9Mo16Q=
Subject key identifier: 43:0C:56:1B:35:E5:2D:69:32:94:C1:91:4C:12:43:14:C1:44:44:42
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1455997B184DA4DEE47C6DF228B03C27A36296BC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208711.roa
Signing time: Tue 04 Nov 2025 13:53:25 +0000
ROA not before: Tue 04 Nov 2025 13:48:25 +0000
ROA not after: Tue 03 Nov 2026 13:53:25 +0000
asID: 208711
IP address blocks: 82.22.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:55:99:7b:18:4d:a4:de:e4:7c:6d:f2:28:b0:3c:27:a3:62:96:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 4 13:48:25 2025 GMT
Not After : Nov 3 13:53:25 2026 GMT
Subject: CN=430C561B35E52D693294C1914C124314C1444442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:91:3c:19:10:33:a9:2a:04:06:d3:d6:e6:
59:a0:2c:47:7c:0d:74:53:72:ce:f6:71:04:39:b5:
76:42:ef:97:eb:c9:2e:78:79:f8:7d:6b:52:a2:b9:
f5:8d:49:3a:5e:b1:39:ad:84:b9:65:00:4e:a4:05:
3b:d4:a3:f0:e4:e8:d2:36:ed:44:52:fb:8e:6c:e0:
16:1e:c0:39:a2:00:2d:10:5a:41:a0:15:ae:79:a3:
65:5c:ff:84:97:c6:43:71:bc:68:4d:61:ce:38:20:
f3:85:8c:e4:e4:d6:82:7b:9d:6b:f8:69:79:c3:a5:
1a:1c:14:a9:20:87:93:df:3e:14:37:02:c8:32:07:
61:b8:d5:ac:07:59:5c:81:03:73:fd:8c:ec:8e:19:
ce:41:b0:03:57:77:b9:6c:2c:a3:17:f6:26:f0:48:
e5:1e:b9:83:a8:9d:ab:db:d4:39:de:b5:90:8b:d5:
bb:e4:5d:52:40:73:e9:e5:28:05:a6:13:8a:84:6d:
99:57:86:d8:e1:1b:2c:0d:4c:39:df:54:9b:54:9b:
d6:55:46:fc:33:91:74:31:1e:df:41:bb:cc:fc:08:
ad:02:8b:4c:4a:00:95:d9:fa:3d:9d:ac:dd:b1:8c:
7c:df:d2:d4:6c:5c:02:be:54:44:f8:13:32:7e:f2:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:56:1B:35:E5:2D:69:32:94:C1:91:4C:12:43:14:C1:44:44:42
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.43.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0c:55:40:ac:26:9b:d9:5d:b1:df:94:ef:40:64:be:ff:b5:
62:b8:d9:fa:01:7b:42:35:53:90:db:53:11:17:2f:48:f1:3b:
d4:e5:4a:e1:61:23:31:a3:05:a5:81:8e:18:46:d3:05:0a:1c:
40:38:3a:eb:12:b9:39:05:be:8c:bb:4b:1a:31:2d:88:53:83:
c3:a3:ef:28:3a:b5:74:33:f5:06:56:e4:ae:76:2f:60:96:e3:
31:f7:93:31:41:c2:d3:32:4b:84:af:77:15:5b:28:c5:dd:3b:
71:b4:9f:c9:bd:57:e3:90:94:f3:a3:fc:4f:6c:37:10:c4:ed:
56:03:1d:5a:4d:0b:47:cd:a2:0a:e8:ad:41:f9:60:32:a3:e3:
39:c3:5c:cd:d9:ad:6c:fb:88:dc:53:ed:b7:fd:25:4f:c5:43:
0d:11:85:ff:3e:28:e9:2b:28:ce:db:d7:95:b8:9e:38:a1:80:
fb:e8:4b:32:10:43:2e:d4:e8:9d:8a:d5:0f:06:e7:08:4c:21:
47:b6:63:5a:89:a6:9a:60:b6:95:c3:b3:9a:e5:30:71:e8:8c:
2c:42:98:2c:e2:d9:a0:ed:f8:83:ca:82:c7:9b:71:4d:35:4e:
c0:cf:bb:d0:77:80:29:ea:a8:14:20:91:56:b7:7d:80:8c:b3:
71:29:b1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:47 2025 by rpki-client