Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207272.roa
File: AS207272.roa (raw, json)
Hash identifier: eqTikdnhurQw78yjRZIipaeogqY07jBo4SqTdmPVSuk=
Subject key identifier: 93:5F:1B:7D:E4:6B:64:C5:10:2C:46:48:3D:10:F9:AE:6A:F6:EB:D9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 647B7F6530474EAE0087138E39AE04523CC935D5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207272.roa
Signing time: Mon 18 Aug 2025 20:55:45 +0000
ROA not before: Mon 18 Aug 2025 20:50:45 +0000
ROA not after: Mon 17 Aug 2026 20:55:45 +0000
asID: 207272
IP address blocks: 2a0f:85c1:ce2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:7b:7f:65:30:47:4e:ae:00:87:13:8e:39:ae:04:52:3c:c9:35:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 20:50:45 2025 GMT
Not After : Aug 17 20:55:45 2026 GMT
Subject: CN=935F1B7DE46B64C5102C46483D10F9AE6AF6EBD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:96:8e:aa:1f:db:b1:cd:59:68:ae:c8:96:
ce:fe:aa:b0:dd:ec:fe:b0:31:91:54:6d:cf:7e:a8:
c6:da:01:e4:ab:14:88:44:d7:96:c7:33:4f:c8:b8:
82:c1:98:24:2d:d3:0e:d8:c6:22:4c:27:e0:9e:4d:
fb:52:98:c3:ee:84:05:19:bf:0b:87:cf:99:88:f4:
a4:52:7e:c4:7d:9f:81:8d:38:8a:89:f4:bd:a7:c6:
49:e8:7f:61:69:1f:85:98:fe:37:f9:7e:61:1b:76:
b2:ec:f3:a9:c6:30:9d:a4:07:a7:e2:82:c9:af:c7:
93:3f:cf:04:6b:33:a7:a9:74:32:90:2a:3c:73:1f:
6b:f4:b3:ca:06:cd:56:2d:be:28:00:ac:cb:1f:f8:
36:33:d4:bf:2c:a0:04:78:95:1e:19:27:57:61:74:
db:fe:66:46:28:5a:bd:74:1a:82:ff:00:b0:63:88:
54:dd:46:ce:07:fc:e6:46:04:50:70:bc:67:33:c1:
ec:f3:e0:f3:78:f0:06:5a:58:cd:1d:6c:3c:72:ac:
3d:5c:ad:93:ea:89:be:5d:51:2c:f3:f5:57:52:23:
73:84:b7:e6:cb:d2:5b:4e:49:b9:1b:03:65:60:72:
66:2b:92:e6:9d:94:d5:87:a4:0c:f3:00:29:b1:83:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:1B:7D:E4:6B:64:C5:10:2C:46:48:3D:10:F9:AE:6A:F6:EB:D9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ce2::/48
Signature Algorithm: sha256WithRSAEncryption
5e:7f:3a:e0:59:37:ca:78:9a:22:e9:d6:95:37:3a:8e:5b:92:
73:73:b0:9a:cc:73:92:8d:cb:f8:83:01:9c:dc:e9:9b:15:f7:
b3:c3:9f:15:b8:60:04:02:02:bc:43:e6:f3:0d:fd:5c:bd:b2:
55:87:57:1a:f3:72:a1:fa:5c:5c:cb:e2:8e:5c:b2:22:ea:d2:
c6:5e:00:fd:0e:2e:32:a2:31:da:b1:17:fc:1b:0a:51:23:83:
c3:61:34:b5:f7:eb:96:df:a0:a8:71:f4:9c:0f:58:98:a1:28:
11:cb:db:77:60:82:72:68:1d:39:27:67:e5:de:14:ec:9e:ce:
ce:ac:43:0b:36:d0:9e:aa:16:29:04:e5:a3:9c:67:89:a6:65:
05:cf:96:91:e2:4c:b0:42:de:ea:02:1b:2d:a0:a3:b1:2f:4f:
ad:89:57:d3:7d:59:38:64:bb:5f:21:90:ca:58:88:e2:24:f5:
31:0c:60:93:dd:5c:da:77:85:7d:b7:71:df:c5:9a:96:9d:3c:
e0:9b:38:39:d2:75:a6:4a:77:70:00:08:77:d4:c3:90:f4:b6:
8a:90:cd:2c:0a:94:e5:bc:31:2c:19:2f:27:7e:88:f4:57:0e:
73:fa:ba:de:58:56:cc:2d:d6:72:6b:37:99:dc:64:5f:23:8b:
d4:17:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:25 2025 by rpki-client