Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207992.roa
File: AS207992.roa (raw, json)
Hash identifier: 7ixx4Tg1+4HCPPWcgmfQOWHHmfVHKMG0uZNSx63M7sE=
Subject key identifier: 6B:13:ED:A7:C5:E6:0F:41:22:37:1A:7C:F1:AC:CC:7C:E9:D8:A9:25
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7C4DA9D500B0BDDB64193994DF6DD91D7FF0A301
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207992.roa
Signing time: Fri 26 Jun 2026 11:48:41 +0000
ROA not before: Fri 26 Jun 2026 11:43:41 +0000
ROA not after: Fri 25 Jun 2027 11:48:41 +0000
asID: 207992
IP address blocks: 2a13:9500:4f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4d:a9:d5:00:b0:bd:db:64:19:39:94:df:6d:d9:1d:7f:f0:a3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 11:43:41 2026 GMT
Not After : Jun 25 11:48:41 2027 GMT
Subject: CN=6B13EDA7C5E60F4122371A7CF1ACCC7CE9D8A925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:80:2e:5a:ba:f6:77:66:63:de:a5:7c:4c:
ce:30:95:10:e1:82:21:fc:ba:36:8d:b7:3b:24:43:
2d:f2:50:0e:72:51:c5:37:30:22:40:25:d5:0a:5c:
05:c7:fc:8e:86:33:e4:95:33:5e:69:a2:d0:83:16:
a2:c1:0b:78:4b:ce:56:67:71:4f:29:f7:01:7e:a3:
79:46:6a:a6:a5:d9:d1:b7:87:3f:2f:6c:32:0c:f2:
fc:04:09:c7:91:ec:7b:81:e8:67:e1:bf:0b:0f:8d:
23:0c:51:83:de:bf:f4:66:0b:ff:ad:d7:df:6e:84:
ac:51:92:f6:ed:d5:96:52:aa:00:d3:81:4c:09:35:
f0:fb:b8:d9:66:d2:71:69:1d:d5:df:ae:8e:25:87:
4e:6b:c7:e0:37:98:fd:2a:92:44:44:46:e5:6e:12:
8e:0a:3c:f6:cd:ee:0f:0c:7d:55:50:c5:7c:f0:15:
68:fd:4f:e7:c0:89:67:53:8d:58:7f:2e:7a:b9:56:
4a:dc:9c:23:80:94:62:2e:3d:33:46:15:f6:67:f1:
1a:4a:54:f7:63:da:6b:4f:e2:df:1d:ce:a8:c0:6c:
8c:a6:7d:4e:7b:51:b3:8e:e2:6f:a1:b0:9b:84:3d:
9f:c6:97:b5:24:7a:1e:8a:60:69:5d:f9:22:98:b5:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:ED:A7:C5:E6:0F:41:22:37:1A:7C:F1:AC:CC:7C:E9:D8:A9:25
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:4f::/48
Signature Algorithm: sha256WithRSAEncryption
48:98:cf:06:7c:fa:f1:54:f2:38:6f:0b:b9:16:af:83:f5:96:
31:68:64:a5:f6:1d:07:52:a0:1b:e1:48:ca:b5:f9:d1:17:bd:
ae:24:9e:19:de:cc:1c:04:b2:4f:cf:13:cc:ac:b1:ec:e9:e2:
46:e7:ae:f6:9a:69:b7:4a:3d:06:fe:51:2e:9e:a3:18:da:6e:
a9:2b:ed:26:ec:1b:ad:ae:9e:4f:f7:b0:08:84:ee:a6:69:4c:
74:74:b9:ac:8f:10:08:5f:83:70:34:f1:cd:8a:48:fa:1d:eb:
72:1a:fd:3a:9f:f5:f7:5f:aa:45:55:06:be:42:51:8b:d6:ac:
7b:63:b7:ab:96:c2:e8:f8:e2:fa:73:a4:fd:bf:bb:e9:e6:57:
06:7c:6e:31:54:a9:64:62:b0:fc:bd:b4:d6:1c:22:63:6a:29:
36:6a:cb:4d:b1:60:cd:8f:5d:d0:7a:78:6a:1b:d0:ec:36:55:
5d:07:fe:61:e1:10:9e:0e:ee:7b:af:1e:d4:55:7b:d7:48:6a:
ab:6d:e2:32:9d:3e:b7:39:cd:aa:ac:66:42:f0:cb:00:11:2d:
4d:5d:a4:19:e8:96:4e:e2:3e:72:13:e9:a0:94:84:c2:38:7a:
a2:77:8b:3b:9c:c6:17:17:c4:1a:d8:20:61:a0:67:38:29:b0:
c7:2c:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:11:11 2026 by rpki-client