Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207675.roa
File: AS207675.roa (raw, json)
Hash identifier: 6E47H68wOGsx8wwNkVjJHido0MxWzHTcIyGc9+/ZeGU=
Subject key identifier: 4A:9D:91:A9:AC:F5:E8:CE:E9:C8:93:90:02:AB:FA:C6:AE:75:45:21
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 10D3B240F0D51EF5465C0B3D2989C4C00EE5EB52
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207675.roa
Signing time: Mon 04 May 2026 16:47:07 +0000
ROA not before: Mon 04 May 2026 16:42:07 +0000
ROA not after: Mon 03 May 2027 16:47:07 +0000
asID: 207675
IP address blocks: 2a13:9500:52::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d3:b2:40:f0:d5:1e:f5:46:5c:0b:3d:29:89:c4:c0:0e:e5:eb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 4 16:42:07 2026 GMT
Not After : May 3 16:47:07 2027 GMT
Subject: CN=4A9D91A9ACF5E8CEE9C8939002ABFAC6AE754521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:b0:ea:83:80:63:bc:4e:7e:24:bb:bc:a9:
d7:8f:f1:52:91:8a:2d:84:1b:65:d1:3b:ba:e9:7d:
1f:cb:9f:62:51:97:11:74:0a:d9:53:ed:c9:b3:e9:
e4:54:30:aa:13:44:99:83:4a:57:cd:db:2d:e3:f6:
38:b4:48:19:41:bb:e8:a9:32:a6:02:48:54:4b:36:
b9:ba:cf:dc:61:11:36:23:f9:76:42:a1:73:57:d7:
f7:fb:ca:55:94:e5:cd:bc:e0:ad:7d:00:43:d9:ea:
e8:20:a5:4f:88:8d:42:29:3f:78:7d:8f:9c:83:e1:
38:dd:9a:06:d4:4b:09:d9:f7:5c:3b:dc:3f:6a:f6:
71:2b:9c:68:47:fe:a3:ba:bb:fd:19:88:12:8d:f4:
8b:ee:a6:3c:0d:32:3c:7d:29:3e:ff:01:9c:aa:73:
62:c2:84:70:64:c4:ef:02:5e:4e:d6:18:68:f6:55:
cb:cc:73:3a:49:57:96:d1:f6:88:b0:f2:31:9f:19:
7a:f6:c2:09:4d:05:c6:0a:15:7b:01:f6:7c:b2:60:
71:15:d4:8e:fc:fa:a1:e7:0d:a7:93:ae:cc:4a:c3:
96:e6:87:6a:eb:49:ab:bb:d8:92:61:20:2f:00:4d:
af:54:34:a9:d4:4f:2f:78:65:36:78:ca:68:8b:25:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9D:91:A9:AC:F5:E8:CE:E9:C8:93:90:02:AB:FA:C6:AE:75:45:21
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:52::/48
Signature Algorithm: sha256WithRSAEncryption
8f:3f:9a:01:c4:45:a6:ab:80:49:10:60:85:b8:92:32:e7:6c:
f5:6f:75:16:f7:6c:81:31:67:01:65:a0:af:66:ba:05:3a:aa:
29:67:d5:cf:2b:df:b7:e8:e3:6a:3b:ff:d4:7a:cd:46:ab:e4:
0e:66:c6:b3:32:4d:dc:20:6b:11:df:0e:57:0e:21:f6:b1:0a:
ae:74:42:5b:27:f2:32:cb:c6:1f:26:8c:cf:26:c5:00:4b:70:
22:1e:9c:c7:e4:08:82:dd:fe:3b:6c:7e:97:09:52:d9:1a:cc:
a7:d9:32:a8:2a:86:d6:e1:c0:b5:63:9c:78:1c:d6:27:9b:e8:
21:cc:51:d9:78:3f:84:e6:1b:e1:97:77:3b:92:cc:69:b7:b0:
ae:cb:e0:df:bd:3a:b0:eb:16:e2:0e:d3:8f:02:98:44:39:72:
61:bd:67:81:73:8b:25:1f:48:fd:16:e1:20:ba:6c:c0:f1:ee:
bc:91:fc:ab:f6:11:a0:db:ae:04:c3:75:25:3d:52:96:8f:78:
44:04:fc:e2:03:de:3f:c7:91:9c:04:95:eb:8f:56:f3:d4:ea:
7d:6f:74:8d:06:1e:89:34:6f:48:ee:05:00:fc:57:b1:6b:08:
03:8a:2e:12:1b:59:84:e8:d1:0a:94:08:41:fe:31:be:be:a8:
85:ac:b9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:42:10 2026 by rpki-client