Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207550.roa
File: AS207550.roa (raw, json)
Hash identifier: ITnZ/+8dTDNiCxXNviJWCjkPkur1GyTHkuFGY0FTW+g=
Subject key identifier: 31:8A:ED:AC:84:8C:9E:57:DD:49:2E:1B:13:BD:36:B5:F3:E8:49:E5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4D21EFCFDDCED482E5C165199864C7B603BD60C7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207550.roa
Signing time: Wed 29 Apr 2026 08:29:03 +0000
ROA not before: Wed 29 Apr 2026 08:24:03 +0000
ROA not after: Wed 28 Apr 2027 08:29:03 +0000
asID: 207550
IP address blocks: 82.47.13.0/24 maxlen: 24
82.47.226.0/23 maxlen: 24
84.75.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:21:ef:cf:dd:ce:d4:82:e5:c1:65:19:98:64:c7:b6:03:bd:60:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 29 08:24:03 2026 GMT
Not After : Apr 28 08:29:03 2027 GMT
Subject: CN=318AEDAC848C9E57DD492E1B13BD36B5F3E849E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:8a:aa:c9:46:20:b4:30:de:ea:cb:0a:78:
c7:56:b0:3d:47:68:40:8d:0b:59:95:62:b5:1f:76:
d6:f2:a0:27:82:49:67:00:91:2e:44:e5:1c:6c:37:
8c:96:7a:60:cf:7a:73:e8:b8:c8:45:df:9d:ac:57:
f2:fa:c6:a2:72:51:6e:b9:fb:0d:19:2a:1d:06:48:
05:96:11:6e:65:38:16:92:1d:88:26:e3:3b:18:22:
b0:43:67:5c:2d:ae:22:90:31:d4:df:c9:21:c5:e4:
c6:c3:8a:70:af:f2:d9:c6:5f:b3:a0:47:ae:b6:54:
de:0e:72:7b:c5:34:87:fc:81:90:08:94:1e:f8:ed:
6f:e7:4f:d4:d1:1d:f5:d9:fe:ce:09:d3:24:3a:1c:
08:1b:4a:e0:51:2d:1a:64:09:7f:07:ff:5e:1e:b2:
57:26:01:9d:4a:5e:c2:5a:90:e2:c8:8a:3d:34:28:
9d:e6:3a:81:11:8a:25:f9:7a:27:d2:ba:d5:da:aa:
66:18:4d:28:23:ec:59:64:d2:83:d3:c8:0e:a0:f0:
66:c3:65:07:a3:b5:71:b8:15:ce:69:06:f9:a7:6e:
f7:89:5e:ea:cf:11:5d:20:8a:15:55:b3:b5:f4:24:
36:42:2a:81:55:8f:f4:d1:85:c2:03:8f:dd:6e:26:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8A:ED:AC:84:8C:9E:57:DD:49:2E:1B:13:BD:36:B5:F3:E8:49:E5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.13.0/24
82.47.226.0/23
84.75.166.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5e:1c:0c:74:54:1c:d4:d5:91:eb:15:c0:da:b1:e9:ff:cd:
f9:0a:f0:b3:f6:3a:29:15:cb:2e:9f:c6:8d:2f:31:4b:d0:8a:
15:1a:66:68:a5:fe:48:a7:e0:52:79:55:77:83:98:c6:26:bc:
af:14:16:ce:a1:b5:79:55:c2:82:0a:63:f8:9f:64:ca:86:35:
76:b5:3b:6a:1b:16:cb:b1:67:81:c4:5a:98:a9:9d:95:a7:62:
7d:36:f2:a5:4a:be:82:aa:0d:16:12:bb:d9:ab:88:ec:12:d2:
bb:80:15:a8:e1:6b:0d:bd:3c:a1:76:d3:9a:08:dc:8d:d2:47:
7e:46:43:8d:e0:dd:10:61:72:8c:50:57:03:7e:d3:4d:45:ec:
c9:8f:57:d9:4a:1e:3c:eb:d4:d5:49:77:83:81:6d:10:e0:35:
ec:98:14:d0:57:05:f4:9e:e7:77:a0:e6:b7:a4:c4:2b:7a:1f:
00:21:9a:b1:5b:52:2d:70:47:83:5c:e1:09:7a:b3:7f:9e:83:
cb:11:18:ca:1f:15:93:37:49:00:d1:1d:5d:f6:e0:ca:15:45:
40:38:97:57:fe:67:22:d2:63:15:ae:25:29:6f:d9:90:4a:f8:
45:60:56:43:65:74:18:00:08:10:e2:e7:d9:cf:1f:d4:a7:0a:
cc:ab:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:51 2026 by rpki-client