Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207459.roa
File: AS207459.roa (raw, json)
Hash identifier: zrrwEbnB5FMHuDmHrRAimdVpgSzdqRcb7Qtfg7A66y4=
Subject key identifier: 66:6E:66:EC:18:57:55:66:75:A7:B5:11:D1:67:A0:1C:6D:4E:07:33
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 50A77F06BE55C23BD2DBB798646D959AA3B6D7A9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207459.roa
Signing time: Thu 07 Aug 2025 14:31:32 +0000
ROA not before: Thu 07 Aug 2025 14:26:32 +0000
ROA not after: Thu 06 Aug 2026 14:31:32 +0000
asID: 207459
IP address blocks: 2a13:9500:c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a7:7f:06:be:55:c2:3b:d2:db:b7:98:64:6d:95:9a:a3:b6:d7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 7 14:26:32 2025 GMT
Not After : Aug 6 14:31:32 2026 GMT
Subject: CN=666E66EC1857556675A7B511D167A01C6D4E0733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:68:b1:fc:e5:8d:9f:e3:b9:b3:52:e8:3d:
fd:d1:d1:da:7d:d8:94:f6:fe:f7:2f:92:64:09:06:
b6:c9:5b:f0:57:56:d7:34:51:e7:6d:d2:92:94:44:
ee:3e:87:11:dd:a8:54:8e:41:4a:ee:8f:08:d6:16:
b8:d8:64:5c:b4:39:10:53:a8:43:eb:c2:96:06:ab:
8d:e9:7b:92:38:0f:0b:6e:ea:f6:f3:d5:e9:a0:d7:
0b:27:53:c8:49:32:e6:e8:89:91:5c:56:3a:a2:9e:
a6:bc:2d:1d:f6:0f:8f:33:ca:7e:25:b8:44:a8:f8:
ab:63:6a:51:85:c8:5c:23:d7:0b:5d:cd:42:d2:d7:
29:c5:01:ad:d4:48:93:85:44:54:96:ec:3c:71:cf:
b8:78:7e:e3:1a:61:55:3d:6b:1a:7b:b4:7e:48:66:
c1:cb:c4:df:21:51:b7:a5:a3:b3:89:ad:20:dd:ac:
cb:43:4f:8c:88:1f:3d:86:83:33:1d:18:5e:43:9c:
d2:bd:08:d2:52:4e:06:72:dc:39:ff:58:e0:2e:30:
09:e0:3e:1d:2c:a0:9c:19:68:89:16:0b:c3:ed:b2:
7d:fb:b7:c4:65:dd:04:1d:67:c0:d2:92:45:eb:c8:
c0:7c:9c:ab:de:49:15:23:a5:1a:64:1f:cb:84:81:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6E:66:EC:18:57:55:66:75:A7:B5:11:D1:67:A0:1C:6D:4E:07:33
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c0::/48
Signature Algorithm: sha256WithRSAEncryption
82:66:87:2f:7f:a8:0f:4a:c6:21:f4:2b:3e:ed:25:ae:05:94:
7f:e2:c7:ae:bf:70:5c:ad:cc:e6:10:ee:4f:aa:9f:fd:55:ca:
0c:0a:56:38:30:39:d6:60:fa:a2:45:a6:1f:20:90:90:42:e6:
34:b8:e7:f0:f3:f1:d0:fe:84:c6:48:11:68:22:2d:1d:4b:4e:
44:a3:a2:39:6d:48:06:2f:5c:c8:e8:f2:0d:09:38:f2:9a:3c:
01:52:f0:d1:0c:df:e5:ad:ea:9c:f1:51:54:d6:15:ca:de:64:
58:65:b2:b2:72:5d:0c:9c:57:47:9f:a0:f6:e9:d5:3f:5c:df:
c2:ea:d1:fc:de:b1:cf:3c:22:eb:69:b3:0a:df:38:06:db:a2:
34:b5:88:ab:ac:64:56:45:57:83:5a:db:92:70:87:ef:b4:9e:
24:dd:4f:05:ac:db:64:b4:e9:c5:42:30:16:67:23:2f:65:6e:
43:47:1f:0b:3b:5a:67:2f:2d:7e:88:65:2c:77:6d:4c:ca:01:
dd:24:d1:ec:d6:d2:7e:22:79:76:a2:76:1b:bd:e9:59:bd:1b:
27:d5:e8:3f:91:13:0b:33:7a:3b:72:7b:c1:d6:e6:d2:09:45:
cf:4e:1c:a9:8f:9f:5a:08:85:c5:7c:79:b1:6a:78:5f:66:f9:
2f:e3:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:07:35 2025 by rpki-client