Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207258.roa
File: AS207258.roa (raw, json)
Hash identifier: 5EZimoHv7PbZW+Sa4DpwV9cA82/VeEznVBTaiLGnNsQ=
Subject key identifier: 7D:71:03:08:83:2D:03:F9:85:4E:5E:CF:87:58:92:6E:09:80:57:14
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0903D0B6A6BD588F9975F46B5822193C9F5C1295
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207258.roa
Signing time: Tue 14 Oct 2025 20:27:28 +0000
ROA not before: Tue 14 Oct 2025 20:22:28 +0000
ROA not after: Tue 13 Oct 2026 20:27:28 +0000
asID: 207258
IP address blocks: 2a0f:85c1:d68::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:03:d0:b6:a6:bd:58:8f:99:75:f4:6b:58:22:19:3c:9f:5c:12:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 14 20:22:28 2025 GMT
Not After : Oct 13 20:27:28 2026 GMT
Subject: CN=7D710308832D03F9854E5ECF8758926E09805714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:f7:b1:9d:87:93:1a:6b:6e:78:3c:1f:b9:
85:86:08:47:85:6d:5a:a8:83:db:55:74:90:f0:c1:
14:a8:5b:f9:ff:ec:91:b0:fe:1c:74:79:a6:37:c8:
1f:74:05:a8:31:32:7b:9c:a5:71:b6:f5:e7:af:55:
ce:33:a9:15:54:77:a1:2f:50:d5:91:a1:f3:35:77:
e6:8d:71:df:3f:d9:93:ce:92:11:87:e8:7e:4e:5c:
30:97:49:68:98:c0:ad:1b:63:10:6c:80:9f:6d:2f:
43:95:df:27:49:ed:97:47:51:34:72:bd:94:e6:9c:
1e:36:b5:db:e7:49:3b:fa:51:9c:c9:99:51:b4:62:
b1:55:f3:f7:68:8d:fd:8b:b0:a7:37:92:e4:d6:88:
a1:a5:30:c5:80:55:46:89:a6:99:85:4e:47:47:84:
21:c7:f4:d1:76:42:52:0b:ad:4b:ee:0e:04:0f:2c:
43:d0:b2:2a:28:59:46:9d:13:8c:23:bc:32:25:94:
0c:9b:6f:56:9c:34:bd:3e:2f:0c:84:8d:6e:bb:f1:
75:d6:f1:f2:e7:bb:ff:87:1b:5c:79:7f:60:07:5b:
fd:16:07:aa:7e:93:25:2a:13:7e:68:3c:31:f6:f8:
b8:91:c8:0b:13:48:28:8b:1a:5b:c5:17:47:06:ed:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:71:03:08:83:2D:03:F9:85:4E:5E:CF:87:58:92:6E:09:80:57:14
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207258.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d68::/48
Signature Algorithm: sha256WithRSAEncryption
50:e1:50:df:ed:d1:63:ac:a1:8c:0f:34:11:f2:80:c7:a7:a4:
79:e8:35:15:66:b0:3f:ed:4d:2f:c6:31:c7:2f:72:ef:b5:4c:
58:db:6f:06:d1:9e:cb:60:14:bd:44:19:de:b7:2f:4e:da:97:
88:b5:9a:16:d5:38:94:c1:3c:a1:30:2a:a5:b4:80:f4:aa:cd:
d3:77:f4:c6:69:2d:f2:3d:65:df:7d:05:17:73:bd:fc:ea:bc:
dd:ec:2e:1c:bb:b3:b1:8f:66:76:b9:7d:1d:4f:8e:e2:bb:e9:
fe:ed:74:28:36:ad:c6:da:1f:8d:80:b8:8b:70:30:d0:c6:57:
49:e1:83:61:b5:7e:fd:2b:38:33:c7:b0:12:c0:c3:d2:f2:0a:
43:3a:71:d8:6e:61:dc:ae:b1:56:5f:a1:a2:6a:a9:ce:14:ec:
16:0c:45:23:9c:57:74:d6:69:57:a5:95:c7:64:10:95:5c:c1:
79:f8:fa:f8:a4:03:89:d3:4c:ad:e5:bd:ac:b9:a2:f0:cc:ea:
e8:5f:88:6a:da:fd:36:92:85:8f:6c:e7:25:c5:e9:f3:17:46:
98:a7:93:88:be:14:b0:32:90:ad:1f:b2:3b:06:e2:d4:3e:da:
77:e1:61:71:03:88:0c:26:79:9f:69:73:66:fd:d1:26:2f:28:
f1:b8:b4:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUCQPQtqa9WI+ZdfRrWCIZPJ9cEpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTEwMTQyMDIyMjhaFw0yNjEwMTMyMDI3MjhaMDMxMTAvBgNV
BAMTKDdENzEwMzA4ODMyRDAzRjk4NTRFNUVDRjg3NTg5MjZFMDk4MDU3MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8NfexnYeTGmtueDwfuYWGCEeF
bVqog9tVdJDwwRSoW/n/7JGw/hx0eaY3yB90BagxMnucpXG29eevVc4zqRVUd6Ev
UNWRofM1d+aNcd8/2ZPOkhGH6H5OXDCXSWiYwK0bYxBsgJ9tL0OV3ydJ7ZdHUTRy
vZTmnB42tdvnSTv6UZzJmVG0YrFV8/dojf2LsKc3kuTWiKGlMMWAVUaJppmFTkdH
hCHH9NF2QlILrUvuDgQPLEPQsiooWUadE4wjvDIllAybb1acNL0+LwyEjW678XXW
8fLnu/+HG1x5f2AHW/0WB6p+kyUqE35oPDH2+LiRyAsTSCiLGlvFF0cG7ZZLAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUfXEDCIMtA/mFTl7Ph1iSbgmAVxQwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA3MjU4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQ1oMA0GCSqGSIb3DQEBCwUAA4IBAQBQ4VDf7dFjrKGMDzQR8oDHp6R56DUVZrA/
7U0vxjHHL3LvtUxY228G0Z7LYBS9RBnety9O2peItZoW1TiUwTyhMCqltID0qs3T
d/TGaS3yPWXffQUXc7386rzd7C4cu7Oxj2Z2uX0dT47iu+n+7XQoNq3G2h+NgLiL
cDDQxldJ4YNhtX79Kzgzx7ASwMPS8gpDOnHYbmHcrrFWX6GiaqnOFOwWDEUjnFd0
1mlXpZXHZBCVXMF5+Pr4pAOJ00yt5b2suaLwzOroX4hq2v02koWPbOclxenzF0aY
p5OIvhSwMpCtH7I7BuLUPtp34WFxA4gMJnmfaXNm/dEmLyjxuLTU
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:12 2025 by rpki-client