Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207295.roa
File: AS207295.roa (raw, json)
Hash identifier: lpKXIiIYjPVQVekqtFSsPkiwgaAp9Ynf0/aeS5GTtTk=
Subject key identifier: 67:E3:3D:DC:89:C2:6B:F7:D4:13:08:6C:30:FD:AA:FF:F8:D4:D6:1D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3D2B6B34068101ADBF38AADA6254D143F1B6C76D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207295.roa
Signing time: Mon 18 Aug 2025 20:53:44 +0000
ROA not before: Mon 18 Aug 2025 20:48:44 +0000
ROA not after: Mon 17 Aug 2026 20:53:44 +0000
asID: 207295
IP address blocks: 2a0f:85c1:cc8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2b:6b:34:06:81:01:ad:bf:38:aa:da:62:54:d1:43:f1:b6:c7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 20:48:44 2025 GMT
Not After : Aug 17 20:53:44 2026 GMT
Subject: CN=67E33DDC89C26BF7D413086C30FDAAFFF8D4D61D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:bf:68:fb:e5:f9:85:0e:d7:9e:0f:05:3a:
16:fb:7d:75:4e:aa:61:79:6c:2e:04:7e:03:17:9e:
53:91:5b:ab:69:92:c6:d8:26:7b:fe:a2:b1:2d:cb:
98:f6:4c:6c:20:ab:34:c0:50:99:51:1d:34:2d:13:
43:92:77:e6:fc:b1:ff:00:9e:5b:c2:ed:45:d8:81:
85:f1:4f:5d:88:c4:8e:3b:6c:5b:72:28:47:fa:32:
87:24:c2:1e:5b:a3:80:3d:74:92:5f:57:eb:b1:bc:
7d:ea:b8:ce:37:d6:cb:47:d2:e8:9f:4d:8a:96:be:
03:dd:e1:28:3b:f0:41:7b:69:80:7f:1d:a4:ff:57:
c7:af:83:8c:b6:bb:75:81:a5:4c:6e:a4:e1:98:66:
04:1c:9d:ec:c8:81:d3:97:1a:a7:85:59:5a:09:6f:
4a:6a:50:91:b2:3a:a4:8d:c7:ec:9f:08:04:6d:89:
0f:67:e0:70:6c:52:c4:67:57:5b:85:a7:00:13:90:
7e:51:bf:7c:4c:20:6c:c8:fd:f5:c6:8d:f2:04:ae:
c7:21:43:6f:60:27:d3:14:20:c8:c7:5f:92:bb:7c:
ff:87:a8:82:90:58:15:7f:92:8e:e9:92:28:dd:2a:
c6:f7:97:a3:83:04:5b:94:00:da:96:ef:66:43:68:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E3:3D:DC:89:C2:6B:F7:D4:13:08:6C:30:FD:AA:FF:F8:D4:D6:1D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207295.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cc8::/48
Signature Algorithm: sha256WithRSAEncryption
32:56:20:69:4c:ff:20:1f:75:c3:83:89:7b:27:0e:36:13:00:
f0:5d:d5:dc:97:77:54:42:af:80:e9:69:ed:af:0a:2b:67:08:
da:74:95:23:e5:e5:fa:67:b4:93:b3:93:d7:d8:13:d6:d7:c0:
23:f5:75:a2:1f:8b:cc:b4:de:7f:18:a5:5e:94:32:2f:ec:e4:
81:11:38:62:1f:89:37:f2:2f:72:10:47:02:83:05:bf:b1:a4:
ac:cf:5e:32:be:e7:ef:7a:f4:2e:68:b6:6f:09:a2:fb:1e:7f:
0a:4f:f2:43:e4:95:c4:38:96:e3:21:82:20:11:e5:c9:b7:75:
1a:8f:66:c5:18:2d:23:39:48:fd:2b:7b:a6:b7:d2:61:86:7e:
e2:3c:f8:fe:b1:50:1e:52:bf:07:70:d3:58:cf:c1:4e:c6:ab:
5b:c2:4d:b8:5b:d8:73:4b:11:93:d7:50:81:8c:92:60:c7:1e:
fc:7b:ae:36:99:be:a7:83:63:66:cd:9f:2b:2e:bd:7f:dd:33:
de:96:42:e6:31:bb:03:8d:e5:4d:3d:45:77:16:90:60:4e:1a:
cb:c5:f3:79:c2:aa:54:49:37:98:83:d5:ac:a7:e8:ef:60:94:
ea:7b:83:fa:b2:e8:4d:09:ea:49:0a:c8:cc:9c:6c:eb:6b:92:
43:72:75:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:40 2025 by rpki-client