Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207343.roa
File: AS207343.roa (raw, json)
Hash identifier: O4ARfPCqvZKxX18deKBNbc8cHg8tywrVpS+B63E+luc=
Subject key identifier: 7E:7D:F9:18:14:6F:54:BC:1C:75:8B:C7:D0:DE:FE:97:58:9D:78:88
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4607CA4D1BD087EC8C7603A2B2E55B17CA59A906
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207343.roa
Signing time: Fri 08 May 2026 13:29:53 +0000
ROA not before: Fri 08 May 2026 13:24:53 +0000
ROA not after: Fri 07 May 2027 13:29:53 +0000
asID: 207343
IP address blocks: 178.83.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:07:ca:4d:1b:d0:87:ec:8c:76:03:a2:b2:e5:5b:17:ca:59:a9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 13:24:53 2026 GMT
Not After : May 7 13:29:53 2027 GMT
Subject: CN=7E7DF918146F54BC1C758BC7D0DEFE97589D7888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:7f:a7:f3:6f:8f:bd:02:69:ad:7e:78:b1:
7f:98:42:8b:14:a2:29:20:04:87:31:e1:1c:75:79:
f5:e6:b6:36:74:07:05:d0:06:92:0a:cd:b1:4c:33:
9a:f8:db:a0:1d:8e:80:f8:04:00:1c:3d:91:de:ef:
58:01:d2:4c:ff:5e:90:6e:a1:17:7f:e8:ec:d6:aa:
70:bd:d8:9f:2f:f6:27:4e:76:05:0c:f5:28:84:11:
94:72:13:9b:36:4f:dd:6b:94:9a:66:48:6a:79:97:
e6:2f:06:13:2a:5c:05:09:72:dd:2a:7f:76:83:e2:
d0:6a:e9:14:5a:f5:75:8f:a9:d6:62:7e:81:73:41:
ec:47:00:1d:e7:b9:1b:0a:d3:59:87:5b:fa:56:7a:
5b:2e:a2:c0:9b:ac:32:5d:9e:51:45:2c:2d:67:79:
a5:56:46:04:88:34:1b:7a:30:ca:59:e9:59:10:37:
bd:f8:33:02:7e:16:14:d8:9d:b3:09:e0:43:da:5a:
b5:af:1c:7b:f2:cd:ad:33:d3:af:df:40:77:ed:81:
d0:3e:45:b0:27:b6:cb:d3:d0:9f:5c:a0:01:d2:a2:
18:a2:69:19:a8:6b:65:5e:38:e0:41:7e:19:68:34:
cf:31:a2:98:82:3c:48:3b:4d:96:59:50:7e:b9:7c:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7D:F9:18:14:6F:54:BC:1C:75:8B:C7:D0:DE:FE:97:58:9D:78:88
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207343.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.171.0/24
Signature Algorithm: sha256WithRSAEncryption
63:be:66:9c:12:5d:cf:33:c3:c5:1c:f7:c1:d3:5b:c1:9b:ab:
1f:c9:8e:19:8d:97:15:dd:cd:1c:f1:ce:d8:b5:5a:ce:5b:37:
1d:d5:c4:50:a1:0e:e0:60:12:4d:f5:69:ff:e0:d4:3c:d7:91:
0b:e8:d0:1c:63:06:cd:59:a9:d4:bc:84:76:2e:7f:38:10:ac:
6f:d7:dd:17:f4:43:82:03:3d:a8:60:3c:b8:20:89:88:70:f1:
50:eb:e2:f1:51:cb:02:1d:01:b1:1e:7f:46:ce:fb:51:e0:fc:
02:56:f1:8e:37:48:b1:f2:34:0b:e5:c0:53:1c:3b:c3:75:e4:
1a:0d:39:76:92:e6:ed:a6:5a:6d:52:d5:af:47:ac:85:23:ba:
42:b6:51:33:52:5f:96:ab:3f:bc:5e:19:a5:1e:e8:cd:d1:d1:
61:a6:be:6e:37:cb:85:7f:b6:23:91:31:2f:45:47:2f:53:dc:
1f:68:c2:fa:5e:f2:bb:e9:77:c0:cb:a9:28:3b:44:e9:b0:38:
e5:bf:0a:5b:a9:d9:51:82:d1:e0:1d:0d:c0:1e:f0:72:1e:20:
9b:04:02:ae:eb:6e:75:bb:e8:43:e2:a2:a5:99:ff:d0:72:c6:
67:ff:9f:77:7b:0c:8e:52:99:9d:ea:08:43:79:2a:45:05:fa:
33:a0:9e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:45 2026 by rpki-client