Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208915.roa
File: AS208915.roa (raw, json)
Hash identifier: BOfLQcMsFH6HCgn1g82cfpIDhpEJbVKN2z9nv4VaDIo=
Subject key identifier: 39:B7:F6:F0:57:8D:17:F9:F4:13:C4:20:7D:C2:D7:BF:EE:DA:D4:F8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4D25CF1D276F8EC08947AAD6A8294B63B21E9962
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208915.roa
Signing time: Thu 16 Apr 2026 01:08:32 +0000
ROA not before: Thu 16 Apr 2026 01:03:32 +0000
ROA not after: Thu 15 Apr 2027 01:08:32 +0000
asID: 208915
IP address blocks: 2a0f:85c1:c31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:25:cf:1d:27:6f:8e:c0:89:47:aa:d6:a8:29:4b:63:b2:1e:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 16 01:03:32 2026 GMT
Not After : Apr 15 01:08:32 2027 GMT
Subject: CN=39B7F6F0578D17F9F413C4207DC2D7BFEEDAD4F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:80:4e:d0:30:6b:35:8e:3a:5d:f9:e5:57:
1b:f4:1e:59:03:51:4e:bd:95:7a:ca:7c:a3:b4:d0:
ce:49:74:ab:80:d7:59:15:25:f3:5c:f1:d6:93:53:
f8:45:fd:57:18:0c:50:7f:ac:a5:06:51:fa:91:19:
e4:7c:4d:8b:56:ec:37:61:e8:cd:75:f6:f6:f2:e9:
e7:9d:85:5b:76:a7:8e:a0:46:2d:45:e7:75:5a:5b:
55:b1:12:f1:36:c4:fc:05:05:0f:e0:db:c1:c5:00:
28:36:c3:36:22:e2:3c:0f:d0:1e:18:af:9b:06:8a:
1c:61:cd:5e:85:02:79:92:37:73:de:57:2d:10:77:
9f:d6:08:5b:dd:12:f4:c8:4e:91:0f:31:ed:45:7f:
70:01:d7:62:94:a3:5b:d6:0c:f6:d7:0c:08:af:e2:
3a:82:81:11:d6:a6:a0:69:b4:f7:df:a8:1b:46:82:
cf:1b:f4:db:8d:b7:5c:bf:45:f7:ae:65:cc:cd:b8:
d2:b1:39:27:1f:00:ba:70:6d:c5:87:fc:9f:a1:fd:
e6:88:db:64:6b:27:aa:35:48:c7:da:91:c5:89:e2:
2a:22:4b:98:92:96:00:f8:31:2a:76:57:51:59:10:
00:98:08:7f:b5:4c:ec:d9:67:6a:e1:95:2d:ae:9b:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B7:F6:F0:57:8D:17:F9:F4:13:C4:20:7D:C2:D7:BF:EE:DA:D4:F8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c31::/48
Signature Algorithm: sha256WithRSAEncryption
90:f9:b8:81:b5:46:03:f8:46:93:af:e2:c5:b7:3f:db:dc:24:
69:c2:0c:58:f5:ee:12:0a:89:1d:14:90:12:d9:cd:4d:53:86:
92:8d:ad:9d:0c:bc:a7:1f:ac:ba:bd:f2:b1:f1:7a:bf:2e:69:
d6:85:60:38:6e:74:82:4a:ca:93:7e:a7:7d:e0:d2:af:61:54:
2c:ba:f5:bb:0b:29:3a:cd:44:40:88:25:2b:ad:90:8e:a1:54:
09:06:06:9a:84:6b:51:0b:fc:60:ec:e5:1a:75:59:70:74:8f:
b3:da:67:b8:0b:7d:68:61:85:3b:78:10:3c:00:b6:cd:b9:d3:
45:2e:6f:1e:1f:46:a7:9c:16:42:5d:d9:81:ac:69:f3:32:55:
18:40:04:99:6f:96:98:19:08:43:24:93:33:73:a9:24:15:13:
26:9b:d8:16:d5:b6:89:67:2a:14:9c:64:47:74:11:85:1c:12:
0c:b5:d5:57:12:23:2b:18:40:45:bd:94:1a:23:b4:7e:92:09:
e3:90:93:4e:08:54:e1:99:87:09:b5:37:aa:af:86:12:04:2e:
3e:4b:8d:c8:6d:a9:32:f6:b5:19:7b:4e:53:ca:1d:5e:75:f4:
80:c7:4e:f8:01:05:e3:d2:78:ef:47:d8:f9:0c:92:e4:3c:3b:
3e:c2:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:34:54 2026 by rpki-client