Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS207821.roa
File: AS207821.roa (raw, json)
Hash identifier: HVH5bzvlnFfChyWhTzofZgnvrIitykiU+J2d1wntJrY=
Subject key identifier: 03:1A:53:FE:AC:D9:8E:64:9B:6A:19:62:9E:1A:FF:D4:1B:FC:C2:E6
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 48A43311595DE3321004CA56B35DD7E487103457
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS207821.roa
Signing time: Wed 28 Oct 2026 11:49:39 +0000
ROA not before: Wed 28 Oct 2026 11:44:39 +0000
ROA not after: Wed 27 Oct 2027 11:49:39 +0000
asID: 207821
IP address blocks: 82.139.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a4:33:11:59:5d:e3:32:10:04:ca:56:b3:5d:d7:e4:87:10:34:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 28 11:44:39 2026 GMT
Not After : Oct 27 11:49:39 2027 GMT
Subject: CN=031A53FEACD98E649B6A19629E1AFFD41BFCC2E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:0e:d8:ce:7e:e9:b6:75:5d:ac:17:d2:67:
43:c5:33:2d:0c:40:d3:bc:17:b1:e8:ea:ec:ab:22:
c5:60:c6:35:b1:8c:c8:ef:d1:e9:d6:21:4e:9d:9a:
5b:79:96:ed:32:79:1b:64:16:c2:ce:1a:90:ad:59:
15:05:cd:5d:87:96:1e:56:57:3a:6e:c4:df:9c:20:
cc:54:d4:c5:31:b4:23:e1:a0:37:02:3b:8d:86:fb:
42:50:ed:e4:8b:fe:24:ed:cc:b0:a4:67:73:88:ac:
32:41:65:ea:72:57:6d:dc:d5:39:09:6b:e8:fc:ef:
7f:08:5c:f3:c5:d7:a7:7b:94:93:a0:21:25:18:0c:
61:d7:76:54:4f:0d:60:41:2f:28:36:c0:ce:e3:b9:
dd:39:3b:1d:13:3e:31:c3:e0:4e:b9:21:5f:8f:a9:
ee:da:d5:41:07:56:cb:c9:2d:89:de:70:04:c1:27:
ee:d5:6b:f1:31:30:a8:00:c5:20:d9:7d:9e:06:56:
e4:8e:aa:04:f9:c9:01:c5:4d:15:bf:fa:46:ce:d2:
db:27:c8:db:ae:2e:db:fb:2a:78:9b:1e:54:ad:9d:
65:e0:0a:14:13:3e:a7:4b:e5:af:d8:d4:7c:c8:d9:
da:10:6e:66:13:4d:69:28:fc:64:4c:ec:56:75:1d:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1A:53:FE:AC:D9:8E:64:9B:6A:19:62:9E:1A:FF:D4:1B:FC:C2:E6
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS207821.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f6:e2:b9:73:4f:d3:3d:50:f0:26:2e:6b:d3:64:6b:8d:6d:
91:35:0c:3e:8a:75:c4:45:b0:77:37:a0:59:8a:23:7d:39:1b:
78:5c:01:b4:37:7b:f4:6d:91:9d:59:6d:50:01:8f:a2:b6:16:
bd:58:b7:9f:1a:09:a3:c5:4b:89:19:55:ee:2c:52:fd:a9:08:
cc:68:6e:6f:d0:db:4d:e6:b3:2c:f7:33:9e:c9:cd:a5:37:10:
62:6b:66:b8:37:37:22:a4:44:07:a0:b5:e7:55:67:7b:1c:8c:
c8:3d:d3:7e:84:52:e2:c3:1f:d0:d7:69:67:31:bd:5e:7a:b9:
88:86:06:57:f6:85:81:2f:d0:d0:47:2f:28:6b:cf:52:6a:e5:
b9:0d:4f:cb:d0:c3:ab:cb:3c:6c:f7:6d:b6:4c:00:cf:e6:ee:
53:44:b3:bd:18:5b:fc:4c:d2:ec:04:8e:4f:4e:fe:69:00:12:
7d:08:2e:b3:ae:58:a6:84:b9:63:2e:b0:c9:42:4c:61:04:4c:
4e:71:b6:4a:8b:de:fd:d8:41:99:e5:80:be:03:64:8f:2c:9b:
27:0e:dc:a9:1e:78:d2:6d:a3:22:f3:a3:79:30:82:3f:6e:e2:
85:28:bb:7a:72:b6:d3:2a:bc:26:e1:2a:30:1d:51:e4:07:7b:
46:2e:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:55:26 2026 by rpki-client