Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208755.roa
File: AS208755.roa (raw, json)
Hash identifier: 2/bxfVO7uUOA35y/Z/oZyhAQhL0ous530anTxZWLPyc=
Subject key identifier: 88:E3:8F:52:0F:53:F3:A0:62:87:FD:93:09:E7:04:DF:68:A0:A4:F7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5688E890645F72FD7D4C411E57B2B44CA45867FB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208755.roa
Signing time: Thu 16 Apr 2026 01:08:32 +0000
ROA not before: Thu 16 Apr 2026 01:03:32 +0000
ROA not after: Thu 15 Apr 2027 01:08:32 +0000
asID: 208755
IP address blocks: 2a0f:85c1:c3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:88:e8:90:64:5f:72:fd:7d:4c:41:1e:57:b2:b4:4c:a4:58:67:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 16 01:03:32 2026 GMT
Not After : Apr 15 01:08:32 2027 GMT
Subject: CN=88E38F520F53F3A06287FD9309E704DF68A0A4F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:2e:75:fe:23:03:ce:ed:ce:26:ed:e6:09:
51:2b:78:ea:e1:c7:74:73:7c:7d:c1:ce:a3:2f:c7:
89:a2:43:c3:65:36:5d:a7:de:1c:78:86:a0:59:7d:
9f:29:a2:f1:43:a5:83:6a:c0:38:2a:ac:7c:96:86:
7f:ca:b4:e4:e5:a2:70:61:78:0b:c7:9f:14:f1:99:
8d:d8:23:ea:ec:7b:6c:86:53:37:42:00:93:c8:25:
c7:f4:64:2e:38:fa:bf:a2:95:58:57:20:ca:ba:e5:
03:c3:0e:4d:e3:f8:69:21:61:af:3d:0a:e7:dd:0c:
01:ce:11:12:d6:45:83:d5:4d:9e:b1:29:f4:aa:65:
5b:42:a2:8e:00:7b:c1:4f:cf:12:57:3a:a3:1e:18:
65:51:b8:8f:3d:fb:25:a6:5f:9a:1f:1a:c3:44:db:
28:b7:b2:b6:cf:1e:7e:22:33:05:32:14:05:6f:79:
55:6f:ef:92:58:91:cb:0a:c9:ca:5f:60:d8:54:fd:
58:68:0a:4d:c0:77:b5:98:53:91:48:16:e0:02:3d:
f4:a1:ca:c5:5e:5f:6b:8c:cb:91:51:55:3e:1e:4a:
0b:90:57:05:25:e7:0d:ff:6f:8b:f9:89:88:29:98:
f8:39:58:cf:0d:35:a4:c2:b7:eb:24:8e:25:d5:a8:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E3:8F:52:0F:53:F3:A0:62:87:FD:93:09:E7:04:DF:68:A0:A4:F7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208755.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c3c::/48
Signature Algorithm: sha256WithRSAEncryption
a5:d3:b7:04:7a:70:6d:a1:a7:3e:61:53:32:9c:c6:f5:d8:92:
36:da:fe:9f:af:0c:ea:47:3c:d5:64:b3:25:2f:4a:35:62:45:
4d:4d:da:d0:1a:e3:87:25:26:d5:26:d2:83:d7:96:89:78:e6:
3e:76:56:28:cc:9c:ab:31:b0:59:6d:d8:39:45:8e:33:cb:7f:
4e:07:29:8f:b4:c7:96:e2:b0:62:02:5f:26:2d:f2:bd:a0:59:
6d:fc:be:f8:14:e5:46:6b:41:3f:55:6d:5c:af:b2:08:d7:72:
d8:f0:c2:be:bb:8b:4a:f5:8a:fa:9a:5e:74:e8:4a:f4:54:e9:
1e:4c:cb:35:21:bb:dd:d2:3e:06:c2:c3:78:18:fc:9c:25:b8:
0c:a8:53:45:a5:88:e0:80:bf:55:c6:31:5b:ab:00:49:90:7d:
14:e7:71:44:80:cf:6a:27:7c:31:48:cf:0b:e7:7c:e9:4e:ae:
75:71:af:77:29:d3:3d:22:bc:8f:53:14:d7:66:3a:97:b5:0b:
f4:3a:4c:1f:b9:57:ec:64:48:15:a0:4d:c0:d6:b6:ba:33:41:
9c:23:2e:22:bd:f6:c3:a2:6d:cb:a1:de:c4:7f:e2:1f:91:cd:
70:de:86:f9:1a:62:17:2e:21:29:69:4e:78:d1:1f:82:26:44:
89:88:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:13:48 2026 by rpki-client