Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207043.roa
File: AS207043.roa (raw, json)
Hash identifier: DRjmBJDy6/jh9CTwxLBiUHyJRt8CaUfVmCaiOzr1ZU4=
Subject key identifier: 50:E0:A0:68:15:82:9F:3C:72:A0:6C:C6:D6:A4:A3:8F:AB:FE:0D:50
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4A9F22DB2A2A7DA52CD0540AD1AF27355463C027
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207043.roa
Signing time: Wed 22 Jul 2026 17:42:49 +0000
ROA not before: Wed 22 Jul 2026 17:37:49 +0000
ROA not after: Wed 21 Jul 2027 17:42:49 +0000
asID: 207043
IP address blocks: 96.62.218.0/24 maxlen: 24
96.62.224.0/24 maxlen: 24
167.148.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9f:22:db:2a:2a:7d:a5:2c:d0:54:0a:d1:af:27:35:54:63:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 22 17:37:49 2026 GMT
Not After : Jul 21 17:42:49 2027 GMT
Subject: CN=50E0A06815829F3C72A06CC6D6A4A38FABFE0D50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:22:c1:f8:2e:7f:92:88:66:b5:29:eb:4a:
3a:e1:47:3a:c5:3e:25:c8:0e:e2:82:11:19:76:51:
72:86:73:36:8e:60:de:4d:b0:95:44:73:da:22:9c:
27:5e:31:a5:50:32:f9:1a:fe:47:d6:1b:77:47:27:
a0:02:94:2b:3c:c6:60:1b:d6:d2:ac:b1:56:6e:01:
c6:5e:b3:2f:e0:b9:73:6a:a7:32:f5:6e:f2:d4:7f:
c2:53:0f:9d:ca:f0:00:dc:4f:38:fa:91:fb:05:05:
9b:11:7a:d1:ac:d6:a3:93:b0:99:aa:62:67:5e:e9:
7c:e6:db:01:2e:24:8f:41:0c:ae:d4:74:28:61:ab:
de:7d:a8:2c:36:63:fc:16:c1:d7:78:11:a0:02:9d:
9e:f2:be:4c:2d:68:4c:df:71:c6:ee:98:14:25:b2:
7a:60:1e:b4:c3:51:93:12:10:3a:88:86:2b:46:d0:
2d:4b:3f:5b:bc:e5:c6:f3:e8:da:cd:51:51:37:6d:
a7:cd:45:38:fe:d5:74:23:21:e7:77:ae:21:ff:a1:
7d:75:74:66:8a:dc:ca:58:bb:ca:83:f0:5f:8f:dd:
93:eb:87:1d:da:7a:68:bb:46:0c:b3:e3:9f:64:1b:
cb:53:cf:73:c4:57:d4:7e:e7:09:38:a6:0c:be:6b:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E0:A0:68:15:82:9F:3C:72:A0:6C:C6:D6:A4:A3:8F:AB:FE:0D:50
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.218.0/24
96.62.224.0/24
167.148.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b4:13:b6:42:82:ae:3e:79:04:82:b4:9f:3c:37:c4:a4:1d:
36:c2:a8:aa:e9:cc:70:9c:99:aa:27:41:82:a7:c2:c5:3a:6b:
19:64:ad:d2:ae:0e:c6:3b:5d:e8:32:db:6c:22:bf:5e:4a:ed:
84:1c:da:e3:0a:86:87:2c:89:bc:28:99:47:34:7a:e4:cc:4f:
fd:0c:63:a5:ab:66:63:dc:55:7a:f0:be:6d:52:a3:71:71:25:
d2:52:e4:3a:7d:04:7d:d9:05:eb:cf:44:d2:a0:da:6f:ed:a8:
fd:fd:f4:43:50:81:2a:2a:ab:4f:93:57:30:4b:76:c6:b1:a5:
b2:63:12:b5:61:f1:7f:2b:3e:46:36:4d:f6:d5:32:17:18:f5:
60:c5:e2:92:f3:0b:8f:b2:1c:6c:be:68:63:ac:cb:d5:b7:58:
d0:c3:cb:61:b4:6b:59:df:ee:a6:52:ec:69:56:3f:53:58:37:
f7:c3:11:90:29:f5:1a:14:15:d3:88:cb:fc:93:03:2f:ec:47:
5c:24:6e:5a:52:16:fc:34:da:d3:dc:64:e4:60:4c:fd:a5:12:
90:42:1d:38:be:60:95:0a:ae:5f:ff:74:9d:84:d2:c6:c1:30:
a8:93:a4:85:61:ef:cd:f7:f9:41:29:00:8b:38:2c:46:ed:7f:
0e:e0:88:c9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUSp8i2yoqfaUs0FQK0a8nNVRjwCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MjIxNzM3NDlaFw0yNzA3MjExNzQyNDlaMDMxMTAvBgNV
BAMTKDUwRTBBMDY4MTU4MjlGM0M3MkEwNkNDNkQ2QTRBMzhGQUJGRTBENTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSSLB+C5/kohmtSnrSjrhRzrF
PiXIDuKCERl2UXKGczaOYN5NsJVEc9oinCdeMaVQMvka/kfWG3dHJ6AClCs8xmAb
1tKssVZuAcZesy/guXNqpzL1bvLUf8JTD53K8ADcTzj6kfsFBZsRetGs1qOTsJmq
Ymde6Xzm2wEuJI9BDK7UdChhq959qCw2Y/wWwdd4EaACnZ7yvkwtaEzfccbumBQl
snpgHrTDUZMSEDqIhitG0C1LP1u85cbz6NrNUVE3bafNRTj+1XQjIed3riH/oX11
dGaK3MpYu8qD8F+P3ZPrhx3aemi7Rgyz459kG8tTz3PEV9R+5wk4pgy+a1bDAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUUOCgaBWCnzxyoGzG1qSjj6v+DVAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA3MDQzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAYD7a
AwQAYD7gAwQAp5TDMA0GCSqGSIb3DQEBCwUAA4IBAQCwtBO2QoKuPnkEgrSfPDfE
pB02wqiq6cxwnJmqJ0GCp8LFOmsZZK3Srg7GO13oMttsIr9eSu2EHNrjCoaHLIm8
KJlHNHrkzE/9DGOlq2Zj3FV68L5tUqNxcSXSUuQ6fQR92QXrz0TSoNpv7aj9/fRD
UIEqKqtPk1cwS3bGsaWyYxK1YfF/Kz5GNk321TIXGPVgxeKS8wuPshxsvmhjrMvV
t1jQw8thtGtZ3+6mUuxpVj9TWDf3wxGQKfUaFBXTiMv8kwMv7EdcJG5aUhb8NNrT
3GTkYEz9pRKQQh04vmCVCq5f/3SdhNLGwTCok6SFYe/N9/lBKQCLOCxG7X8O4IjJ
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:37 2026 by rpki-client