Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207158.roa
File: AS207158.roa (raw, json)
Hash identifier: JX9RTSC0cFqyAu7FGg53S7uxlDyQe6yXETd4gRtWhcc=
Subject key identifier: E0:AB:D2:B4:81:04:F5:1D:E0:2E:6A:06:E7:B4:58:F8:66:31:14:23
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0E247B612FA4E3D08E6DA024B885CD3924B53CEA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207158.roa
Signing time: Sun 12 Jul 2026 07:25:12 +0000
ROA not before: Sun 12 Jul 2026 07:20:12 +0000
ROA not after: Sun 11 Jul 2027 07:25:12 +0000
asID: 207158
IP address blocks: 82.47.2.0/24 maxlen: 24
178.83.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:24:7b:61:2f:a4:e3:d0:8e:6d:a0:24:b8:85:cd:39:24:b5:3c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 12 07:20:12 2026 GMT
Not After : Jul 11 07:25:12 2027 GMT
Subject: CN=E0ABD2B48104F51DE02E6A06E7B458F866311423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:af:a3:d6:ac:58:94:94:25:94:9b:da:ec:
bc:95:ca:c0:d3:73:b1:36:dd:cc:ef:a0:ed:d3:18:
72:1f:32:7b:52:71:3f:48:d0:40:34:57:75:53:74:
28:93:49:f2:e7:27:d5:28:1a:50:4e:c2:e1:80:3f:
d1:d3:00:78:fe:c2:05:51:85:07:de:de:36:53:c5:
b7:a1:49:fa:d2:80:1c:b1:64:86:42:66:bd:e4:19:
b5:f7:ae:f0:21:af:0e:b9:2a:67:ca:c4:78:98:c6:
67:7d:3e:fb:0c:74:d4:ac:77:44:c8:60:4e:83:c1:
53:c2:ca:fe:9b:9d:ef:07:66:61:28:27:dd:d8:7b:
20:a7:1e:12:8c:4d:27:26:10:52:ce:d3:dc:43:c6:
28:c5:2a:ed:d5:5e:f7:76:f7:bc:4b:05:c3:f7:5f:
cd:31:bc:56:52:31:f3:b7:aa:68:0c:bf:60:6f:c8:
c9:78:70:20:5c:8c:f3:b0:ca:45:f0:f6:44:1c:98:
82:16:4d:c8:4a:15:dc:d6:53:f7:b1:80:f6:2b:45:
4b:97:b9:b7:aa:c9:ea:2b:2f:6b:f2:d6:4a:f3:6b:
26:6a:b9:04:01:89:c3:bc:92:2b:8f:75:fc:e8:91:
13:6e:89:de:cb:5f:d5:f3:df:9e:8d:1e:f7:af:89:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:D2:B4:81:04:F5:1D:E0:2E:6A:06:E7:B4:58:F8:66:31:14:23
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.2.0/24
178.83.200.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f4:b2:4d:e3:e7:43:cf:15:85:d3:42:ef:f5:b9:ae:99:7f:
6a:ca:79:6c:17:59:0a:f0:5e:dd:bf:d5:ea:16:48:8d:2c:7d:
7d:21:22:18:f9:7c:02:a1:28:b2:49:29:12:18:dc:82:c9:a1:
0b:95:81:00:28:55:ee:95:b7:fa:64:93:60:42:e2:94:53:ab:
30:d3:3d:67:6c:f8:33:b2:06:e2:7a:b4:37:3c:0e:65:f2:74:
90:d1:5c:9b:e2:80:7f:43:17:74:93:ac:02:e5:20:50:8a:f6:
0f:52:e5:96:b7:e4:e2:ec:5f:2b:df:44:a9:51:be:c5:5b:c6:
4e:62:f2:37:da:8a:9b:5d:6d:5e:c8:2d:d9:62:3f:c8:bd:3e:
83:78:c0:07:7a:7f:c6:54:ff:3e:ec:29:1b:f9:66:8d:25:b3:
b9:11:9c:22:01:eb:e5:a0:c9:91:a8:69:cd:29:91:8b:7d:35:
19:35:70:90:4f:53:43:e8:1b:c7:5c:84:b5:09:9b:7c:25:17:
51:7e:fd:6f:23:89:37:8c:54:5e:59:bc:04:30:a0:3a:aa:4c:
a5:b5:58:2a:5e:27:92:ac:a1:1c:bb:49:e8:e5:50:37:cd:4b:
87:3d:7b:cd:da:86:e5:ac:61:08:33:e3:d4:4f:89:05:fe:35:
a1:96:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:22:13 2026 by rpki-client