Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207451.roa
File: AS207451.roa (raw, json)
Hash identifier: 4uELgGHRA/RWJeC7p9oEXWiwaYx7g4ctu4q1+Lfr2k4=
Subject key identifier: B1:D7:71:08:A9:70:28:F7:EE:5F:7A:15:29:75:A1:3D:DB:45:C1:33
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 430A174D4C626901095914CE09F0D63862F1F8C2
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207451.roa
Signing time: Fri 26 Jun 2026 08:08:48 +0000
ROA not before: Fri 26 Jun 2026 08:03:48 +0000
ROA not after: Fri 25 Jun 2027 08:08:48 +0000
asID: 207451
IP address blocks: 2a0f:85c1:213::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0a:17:4d:4c:62:69:01:09:59:14:ce:09:f0:d6:38:62:f1:f8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:48 2026 GMT
Not After : Jun 25 08:08:48 2027 GMT
Subject: CN=B1D77108A97028F7EE5F7A152975A13DDB45C133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:ee:b9:24:58:f4:ba:f5:74:37:cb:50:a7:
f2:eb:80:da:db:d1:89:f9:a9:ab:76:fa:d1:ff:ce:
7b:81:71:54:93:8a:7d:e2:e8:bb:52:90:0a:a4:9e:
bc:46:8d:ec:00:c1:70:9b:44:b5:f4:56:aa:15:b4:
0f:66:97:83:ea:88:5d:b2:6f:e5:c4:b6:dc:23:23:
08:db:77:ba:df:aa:38:12:11:af:98:79:bc:95:30:
23:f4:1a:cc:75:15:50:8c:77:ab:36:7e:ce:cb:82:
79:93:17:20:03:24:0f:94:4a:eb:40:e6:9b:b8:b9:
0f:f7:ab:23:f7:ac:ed:14:de:14:e7:e8:19:54:13:
50:ca:4e:90:56:18:d1:f7:67:ff:78:ec:14:8c:54:
60:08:8d:31:69:9c:a5:89:9a:80:89:8c:b6:b6:62:
bf:5e:28:f5:4c:e5:33:c7:b6:50:30:ff:32:09:86:
4e:39:d2:43:f6:a4:fa:89:03:b3:2f:1d:93:a5:63:
4b:c8:e5:54:aa:23:7e:df:02:9c:df:8a:d5:95:31:
d9:33:f9:ef:af:5d:e9:69:1c:60:69:c5:02:da:a3:
6f:29:40:07:ae:45:72:8c:a0:e5:9d:f4:dd:19:f5:
0d:ad:d6:fd:05:a4:cb:71:6c:c8:3a:1c:d8:bf:bc:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D7:71:08:A9:70:28:F7:EE:5F:7A:15:29:75:A1:3D:DB:45:C1:33
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207451.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:213::/48
Signature Algorithm: sha256WithRSAEncryption
70:72:a4:20:ec:14:9e:59:6e:18:3e:95:0c:90:5f:29:d3:be:
11:73:7a:24:03:2a:83:e5:d1:c0:d7:a2:85:89:32:c0:d8:f9:
18:82:8f:49:03:15:55:36:50:00:35:1d:8a:99:da:d4:06:a5:
9d:3c:ff:7d:fd:e4:68:17:4e:d9:9e:09:f3:ae:ef:8a:b9:18:
cf:0a:b4:91:48:ba:8b:59:8a:ea:2a:d9:12:27:34:37:0b:f8:
8f:05:b7:42:ab:73:08:07:a5:99:aa:12:f2:0b:17:ca:ae:ae:
38:28:8f:ad:3b:84:63:71:1f:f6:d9:99:12:77:42:94:10:68:
d1:dc:04:77:db:cb:6c:3e:50:8f:7b:a3:82:7d:c0:b3:59:cf:
42:cb:d2:21:58:2f:78:57:77:de:3c:f9:9b:0e:0e:e5:80:cf:
65:7d:8c:6c:24:de:3b:d5:f0:f2:ba:b2:c5:9d:a4:68:54:eb:
9b:fd:b0:95:06:25:52:d1:02:ca:98:d2:8c:f3:84:66:79:90:
64:3f:01:b7:c5:85:f9:25:b0:84:b0:7f:0e:90:57:cc:64:51:
8e:53:0d:6a:08:f5:26:2e:cd:9e:5a:ce:63:e3:55:c4:46:aa:
d1:c0:0b:71:35:70:e6:99:4c:7d:34:0a:32:7f:7b:c5:fb:66:
59:a3:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:28:00 2026 by rpki-client