Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208191.roa
File: AS208191.roa (raw, json)
Hash identifier: tnbBua3SWlyOMC9szcv/JQ4hgvDNntuUTPq8MLUOpys=
Subject key identifier: B6:44:37:42:24:A3:D4:53:82:1F:FD:A1:CF:30:BE:BC:52:6A:0B:6A
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5D28E5B5F7F35679639AE296D826822999352E38
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208191.roa
Signing time: Tue 05 Aug 2025 10:51:52 +0000
ROA not before: Tue 05 Aug 2025 10:46:52 +0000
ROA not after: Tue 04 Aug 2026 10:51:52 +0000
asID: 208191
IP address blocks: 195.206.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:28:e5:b5:f7:f3:56:79:63:9a:e2:96:d8:26:82:29:99:35:2e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 5 10:46:52 2025 GMT
Not After : Aug 4 10:51:52 2026 GMT
Subject: CN=B644374224A3D453821FFDA1CF30BEBC526A0B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:ea:e4:54:59:8c:61:52:0c:7d:ac:e0:fd:
f3:94:47:d0:06:f1:28:e7:44:b4:3b:03:f5:19:75:
e4:a1:5f:74:a9:53:4a:34:c8:cd:c4:00:76:69:90:
f3:8a:f9:f5:bb:e8:4a:f8:2b:20:df:d3:53:c8:8c:
4a:14:c7:ae:2f:54:f8:3a:9e:1f:ff:1f:8d:31:c4:
37:64:24:82:9f:f4:68:21:ad:d8:a2:64:19:14:39:
91:1e:00:2d:78:f5:cb:bc:db:9b:26:81:3e:eb:1d:
cc:41:c0:01:51:b7:33:fb:d2:6d:92:40:e3:c8:e8:
98:68:d0:e7:e6:70:72:ca:6c:95:f9:ae:61:29:9f:
48:d2:5d:44:33:54:22:a2:06:ae:22:f8:04:98:62:
82:57:ea:d9:00:b6:56:5a:d1:c3:f8:a6:a6:98:22:
d8:ce:7f:79:9a:11:5c:d5:86:ed:0a:92:27:75:ec:
09:8e:50:3e:0b:96:2a:f1:06:ba:4c:04:c9:d8:af:
9b:32:8c:b0:89:2d:02:4f:ce:85:17:cd:4d:aa:8f:
24:bd:5b:fc:5b:3b:98:fa:5a:b9:17:51:d0:e8:1e:
c1:1a:7b:d5:27:aa:8c:5c:d2:c6:fb:35:57:99:57:
3a:77:c4:03:62:ca:22:d6:2c:dd:e7:18:7c:98:89:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:44:37:42:24:A3:D4:53:82:1F:FD:A1:CF:30:BE:BC:52:6A:0B:6A
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208191.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6d:9b:94:71:76:d8:05:52:13:94:c9:c0:1f:bd:57:81:c0:
b9:0c:5b:9f:b9:ef:f0:5f:85:eb:89:ba:bc:cd:37:5e:19:21:
52:5f:b3:dd:9a:0b:d4:c4:7c:c1:38:be:d4:ae:6e:6c:c3:56:
07:06:a7:af:32:3e:a4:b7:36:92:1b:70:67:c7:74:fa:43:f5:
a6:c1:58:07:8b:0d:f7:bc:a0:94:f0:c5:3f:48:b6:d0:7a:24:
85:9c:e9:01:68:8a:e7:ba:0f:03:64:49:cd:b3:f0:49:67:b8:
5a:d9:6f:b0:31:a8:29:b2:8d:a8:37:60:78:0a:bb:a5:d4:a8:
7e:6d:e4:42:98:85:81:b6:f4:b9:4d:4c:24:96:31:51:50:b8:
d8:7f:69:2d:17:df:aa:70:a5:50:0d:9a:df:4b:46:ef:5a:bd:
b3:3f:81:90:56:bc:0b:bc:0e:f9:97:86:69:a2:24:7e:e2:fc:
f8:9d:5b:d0:b1:21:9b:ef:69:48:74:23:b0:63:86:6c:63:91:
5a:bf:f3:1b:fe:56:88:ef:14:f2:ef:31:56:5a:8e:81:27:64:
7a:bc:ba:cf:70:e7:5a:54:99:57:11:63:61:f7:57:64:92:6b:
41:aa:f5:bd:88:05:10:0b:f2:35:a3:a8:3c:1c:0e:7d:b9:df:
d5:d8:b7:9d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUXSjltffzVnljmuKW2CaCKZk1LjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTA4MDUxMDQ2NTJaFw0yNjA4MDQxMDUxNTJaMDMxMTAvBgNV
BAMTKEI2NDQzNzQyMjRBM0Q0NTM4MjFGRkRBMUNGMzBCRUJDNTI2QTBCNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKRurkVFmMYVIMfazg/fOUR9AG
8SjnRLQ7A/UZdeShX3SpU0o0yM3EAHZpkPOK+fW76Er4KyDf01PIjEoUx64vVPg6
nh//H40xxDdkJIKf9GghrdiiZBkUOZEeAC149cu825smgT7rHcxBwAFRtzP70m2S
QOPI6Jho0OfmcHLKbJX5rmEpn0jSXUQzVCKiBq4i+ASYYoJX6tkAtlZa0cP4pqaY
ItjOf3maEVzVhu0Kkid17AmOUD4LlirxBrpMBMnYr5syjLCJLQJPzoUXzU2qjyS9
W/xbO5j6WrkXUdDoHsEae9Unqoxc0sb7NVeZVzp3xANiyiLWLN3nGHyYiYgjAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUtkQ3QiSj1FOCH/2hzzC+vFJqC2owHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjA4MTkxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw87q
MA0GCSqGSIb3DQEBCwUAA4IBAQBlbZuUcXbYBVITlMnAH71XgcC5DFufue/wX4Xr
ibq8zTdeGSFSX7PdmgvUxHzBOL7Urm5sw1YHBqevMj6ktzaSG3Bnx3T6Q/WmwVgH
iw33vKCU8MU/SLbQeiSFnOkBaIrnug8DZEnNs/BJZ7ha2W+wMagpso2oN2B4Crul
1Kh+beRCmIWBtvS5TUwkljFRULjYf2ktF9+qcKVQDZrfS0bvWr2zP4GQVrwLvA75
l4ZpoiR+4vz4nVvQsSGb72lIdCOwY4ZsY5Fav/Mb/laI7xTy7zFWWo6BJ2R6vLrP
cOdaVJlXEWNh91dkkmtBqvW9iAUQC/I1o6g8HA59ud/V2Led
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:24:08 2025 by rpki-client