Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207837.roa
File: AS207837.roa (raw, json)
Hash identifier: z/5ySueo13BqsHpxK1Yz8kDK3jnSwBRYRSJQjfVqNYI=
Subject key identifier: E9:93:52:2B:E4:56:DD:08:41:80:DD:74:1D:F1:0F:85:67:EE:65:DD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2CBE892AFAC3D9234142978496C7D7BE9345915C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207837.roa
Signing time: Sat 23 Aug 2025 10:28:17 +0000
ROA not before: Sat 23 Aug 2025 10:23:17 +0000
ROA not after: Sat 22 Aug 2026 10:28:17 +0000
asID: 207837
IP address blocks: 82.25.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:be:89:2a:fa:c3:d9:23:41:42:97:84:96:c7:d7:be:93:45:91:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 23 10:23:17 2025 GMT
Not After : Aug 22 10:28:17 2026 GMT
Subject: CN=E993522BE456DD084180DD741DF10F8567EE65DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:5f:c8:8e:38:e0:97:5a:1a:08:b9:46:c1:
09:9c:64:3d:9d:f9:fd:c6:a0:ff:c6:62:11:ce:f5:
bf:a8:73:a4:34:eb:30:e2:b7:df:f1:24:8f:4d:35:
c1:4f:a0:90:2a:3c:be:d5:14:9e:7c:25:b9:3e:9e:
d5:8f:e4:8d:7b:cc:f6:38:d6:52:4e:86:69:a0:c2:
d7:89:81:28:c8:d5:b1:17:f2:bd:86:1b:8a:ed:64:
81:e5:72:4a:1b:b4:1b:61:3e:85:02:ac:07:a1:3d:
4e:66:7d:04:23:c0:8e:91:27:d5:02:65:4b:44:48:
67:74:63:16:a8:1b:1c:74:d7:f4:6c:cd:d2:34:e9:
7a:ed:c3:60:7a:44:f4:d4:a2:c5:b1:a9:bc:42:e8:
8c:d5:62:a7:cd:65:f1:93:92:65:13:dd:1d:51:b7:
ab:48:7c:f7:84:55:3f:58:db:f5:27:26:cd:d5:99:
3c:ab:4e:68:62:be:7f:77:17:e1:59:cd:f2:a0:7c:
5f:31:49:ce:33:10:11:19:8b:da:5a:f4:37:91:db:
9c:09:32:b7:eb:d5:47:94:38:77:69:57:d3:60:52:
8f:c5:9b:30:38:00:f4:31:d8:42:1a:e6:f6:c9:3d:
f5:ff:03:a7:ba:e8:d7:c2:48:7f:69:6c:df:b3:68:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:93:52:2B:E4:56:DD:08:41:80:DD:74:1D:F1:0F:85:67:EE:65:DD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.190.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:69:91:d1:e2:27:f7:ed:ac:b2:88:c4:63:31:d3:74:99:f4:
14:68:dc:39:ae:88:76:9c:30:e1:ea:7f:e3:d2:7b:80:14:91:
e2:2a:9a:01:9a:65:ea:a9:e5:34:a4:71:6f:8e:81:1f:dc:40:
a1:46:a3:d9:a5:bb:be:11:2d:c4:61:fc:8b:5e:19:f8:3d:77:
40:55:34:d8:b8:1e:68:ea:93:b4:37:d2:f6:cf:6e:c6:50:95:
72:10:47:b1:d5:4d:49:ab:b1:33:75:88:1b:da:26:9f:d8:9e:
de:bf:4b:01:57:fa:fb:6a:5b:1c:1b:4f:aa:93:a9:36:f1:f4:
ff:27:dc:a4:64:b1:42:2b:8e:05:b4:02:85:f0:a9:71:d6:07:
69:71:99:9a:61:d4:b0:a3:e7:5c:bf:46:5e:0f:4c:da:17:d6:
ff:01:18:27:28:4b:d3:7b:82:9f:96:72:8d:10:9d:58:28:2f:
fc:5e:29:b1:ef:9e:32:42:c7:95:1b:0f:a9:6b:74:da:7d:a0:
d8:44:0f:06:1b:b3:71:e4:8e:44:3c:ad:43:9e:c7:16:b4:13:
39:f9:8d:ae:62:b7:b9:0b:4b:03:c3:77:4d:34:9e:0c:7c:89:
e4:21:9e:b9:4f:06:80:63:60:1c:3e:13:4a:b7:59:77:9c:07:
55:3d:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:43:54 2025 by rpki-client