Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208723.roa
File: AS208723.roa (raw, json)
Hash identifier: XqCx750H6cI+Y6W5u4ZFFbBBuvc+YaANuMy8ek7fbUQ=
Subject key identifier: BE:07:58:09:0F:17:E0:E0:76:3A:19:46:2E:8C:27:B2:31:37:17:90
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7074E2683538395D36920D34D64A0708B59575CA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208723.roa
Signing time: Fri 10 Apr 2026 16:08:30 +0000
ROA not before: Fri 10 Apr 2026 16:03:30 +0000
ROA not after: Fri 09 Apr 2027 16:08:30 +0000
asID: 208723
IP address blocks: 2a0f:85c1:c3b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:74:e2:68:35:38:39:5d:36:92:0d:34:d6:4a:07:08:b5:95:75:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 10 16:03:30 2026 GMT
Not After : Apr 9 16:08:30 2027 GMT
Subject: CN=BE0758090F17E0E0763A19462E8C27B231371790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:60:4e:d2:05:74:88:f5:40:64:08:a9:85:
99:73:80:08:fa:b2:60:8f:3a:ae:e9:80:ef:71:e4:
dd:72:17:75:4b:59:1d:15:2c:72:27:47:97:28:22:
d3:88:de:b1:0e:9e:d0:43:7a:82:88:32:74:40:3b:
57:4f:33:71:c8:dd:40:92:c0:6c:f2:d9:be:67:f0:
90:17:79:f2:5a:85:a8:f4:35:c2:00:0d:19:12:c6:
24:56:38:f9:61:d5:e2:a8:5b:20:16:4e:13:57:b8:
f5:84:6b:5e:34:9e:06:8a:53:35:8b:b2:54:44:12:
2b:38:26:0a:63:57:8d:7f:13:3b:e1:00:a8:39:d5:
8a:58:80:90:13:a0:5a:30:01:f3:58:78:bd:4b:fb:
dd:69:85:63:6a:83:7f:16:6d:53:36:de:08:3a:54:
22:1b:40:db:44:22:0c:9b:d4:37:16:5e:b8:3a:d1:
1e:aa:77:1b:63:e7:b3:f1:60:d6:1b:c3:c4:40:14:
7a:58:f2:3a:ea:55:56:61:4f:69:f6:8b:21:69:fd:
b1:c5:19:4c:d2:b9:f2:3d:3b:c6:2d:d5:6f:5f:b8:
d5:32:b2:37:99:08:be:94:a8:e5:94:25:d0:b4:b9:
f0:93:86:f4:64:87:8c:50:bd:21:d5:54:08:96:52:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:07:58:09:0F:17:E0:E0:76:3A:19:46:2E:8C:27:B2:31:37:17:90
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208723.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c3b::/48
Signature Algorithm: sha256WithRSAEncryption
4e:2d:da:91:c7:32:cd:e4:6c:76:d8:dc:71:dc:5a:cb:8f:79:
a4:0e:4a:66:75:18:de:2b:5d:2d:5c:8d:d2:4c:26:6c:30:63:
64:a6:94:15:ac:af:a1:71:93:22:15:35:2e:66:cb:5a:a2:6b:
c6:5f:93:52:c0:42:be:c6:54:5a:7a:e4:af:96:88:45:e7:bc:
7b:f7:9b:09:e0:71:32:66:35:ca:a2:c6:10:b8:d5:28:11:42:
28:bf:b9:d2:6b:e8:8e:ec:1e:d0:5f:49:f9:6a:e3:1a:c6:da:
f0:ce:fc:5e:0f:77:19:a3:12:86:a4:d3:fd:12:3f:e6:3f:eb:
af:5a:66:b7:f0:44:8f:93:a2:1b:4d:9f:9a:a9:b3:01:c5:14:
f8:94:af:12:ec:16:e3:10:c5:5b:61:fb:5f:1a:0c:26:c4:2b:
bd:ac:35:61:e9:e4:cb:e4:44:04:df:3b:d8:e1:21:1c:50:15:
67:cb:92:22:09:6f:ac:c9:4d:86:ab:7b:1b:3b:c8:5b:f5:ca:
da:db:8e:ae:ba:1b:04:c7:cd:7f:bd:a2:1e:50:d8:c7:a2:48:
7e:85:39:ea:0e:e9:c2:2f:b2:eb:05:b2:23:df:9d:dd:33:af:
67:31:96:01:94:5a:15:b8:67:05:3c:7f:2f:98:bb:f9:c8:a7:
c6:35:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:56:14 2026 by rpki-client