Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207947.roa
File: AS207947.roa (raw, json)
Hash identifier: bwktifKn+Ooh+gwS4CcOD+j5QsnrG0GuCQ2VQytf/jQ=
Subject key identifier: 5A:8F:84:A5:78:E3:4A:BE:CC:36:98:14:7F:79:F4:00:3F:79:8F:5F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 22E3324D36B1524A2A6080A77A1B9D2BC824C17B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207947.roa
Signing time: Wed 11 Mar 2026 13:08:29 +0000
ROA not before: Wed 11 Mar 2026 13:03:29 +0000
ROA not after: Wed 10 Mar 2027 13:08:29 +0000
asID: 207947
IP address blocks: 2a0f:85c1:c20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e3:32:4d:36:b1:52:4a:2a:60:80:a7:7a:1b:9d:2b:c8:24:c1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 11 13:03:29 2026 GMT
Not After : Mar 10 13:08:29 2027 GMT
Subject: CN=5A8F84A578E34ABECC3698147F79F4003F798F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:3c:fe:7c:c9:d7:c0:fa:6d:dc:9b:93:0e:
d7:c1:8f:b7:24:ce:79:48:ff:bb:7f:5a:a2:3e:7c:
a7:5a:ef:4f:58:23:e2:29:16:44:a6:29:5c:84:9f:
9b:32:39:5b:63:a9:3a:60:7b:cd:10:69:97:c3:24:
ff:f1:2b:9c:81:18:bc:db:e6:06:1b:cf:a9:fb:c2:
0b:d2:55:0d:05:06:9e:7c:fc:f0:9e:a3:76:61:fe:
9e:d5:1a:49:21:b7:db:29:a3:8b:d4:64:d2:4a:ca:
2a:c9:ab:50:02:5b:68:ea:ce:79:71:fd:37:41:75:
93:a8:16:de:33:bc:09:0b:a3:80:52:bf:c6:78:d2:
30:1c:02:08:dc:33:9d:09:f0:a7:f6:af:d3:c5:2d:
2a:ca:a1:8f:12:ec:06:0d:cf:9e:88:ee:bd:97:34:
aa:0f:c5:58:27:60:08:b8:c8:b2:8c:7d:a0:8d:88:
a5:ff:05:e6:e8:32:2f:5e:90:37:5d:13:b5:c2:29:
c2:df:2c:07:34:d0:c4:52:2f:95:0d:3e:4a:63:7b:
0c:14:53:f2:b8:b0:4c:db:e0:19:ff:a4:ae:97:d3:
21:f3:4a:7d:54:6f:1e:24:f4:77:fe:00:cc:57:f2:
16:ac:0c:50:6f:a4:f0:51:1e:c5:f9:27:9d:fc:57:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8F:84:A5:78:E3:4A:BE:CC:36:98:14:7F:79:F4:00:3F:79:8F:5F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c20::/44
Signature Algorithm: sha256WithRSAEncryption
8c:3d:63:1a:80:63:44:33:b4:e9:e7:22:f2:34:d9:04:10:b8:
e8:87:64:9a:7a:33:c0:82:bb:f8:21:76:e3:c5:18:a2:c5:bb:
65:ec:6b:1a:be:94:28:cf:08:13:db:98:e2:8c:17:29:cd:9c:
d0:bf:5a:2a:eb:06:b0:cf:12:a0:10:ce:62:30:4a:19:39:38:
16:65:fd:09:ef:f4:0c:85:c2:a5:d7:21:0b:eb:31:7e:ea:33:
90:f9:92:90:ad:59:1b:69:a3:11:4d:bc:15:a1:3d:3e:62:13:
d5:c6:cf:c2:36:99:01:fa:cc:44:77:52:b3:fe:e3:ee:40:bc:
f1:29:27:e6:b3:76:9d:5c:77:92:18:3b:73:f4:d4:b2:d1:5b:
f4:fd:a0:52:b1:29:a2:3e:09:45:1c:61:80:e8:22:ef:10:d0:
4f:e4:44:7f:09:9a:1c:51:16:61:94:07:18:07:5c:9b:59:bf:
ce:7b:4e:80:8a:79:d2:a2:de:83:3c:f0:98:18:86:23:62:6d:
73:0f:6e:13:20:9c:e3:d8:21:33:30:89:2a:96:f1:8e:7d:0d:
06:64:a6:28:db:31:98:d0:ff:48:bb:b5:b2:b4:f5:73:d8:85:
10:8e:cb:4f:2f:7c:e6:bb:a4:89:0f:24:3a:dd:ad:39:12:b4:
0d:eb:1f:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUIuMyTTaxUkoqYICnehudK8gkwXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjAzMTExMzAzMjlaFw0yNzAzMTAxMzA4MjlaMDMxMTAvBgNV
BAMTKDVBOEY4NEE1NzhFMzRBQkVDQzM2OTgxNDdGNzlGNDAwM0Y3OThGNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsLzz+fMnXwPpt3JuTDtfBj7ck
znlI/7t/WqI+fKda709YI+IpFkSmKVyEn5syOVtjqTpge80QaZfDJP/xK5yBGLzb
5gYbz6n7wgvSVQ0FBp58/PCeo3Zh/p7VGkkht9spo4vUZNJKyirJq1ACW2jqznlx
/TdBdZOoFt4zvAkLo4BSv8Z40jAcAgjcM50J8Kf2r9PFLSrKoY8S7AYNz56I7r2X
NKoPxVgnYAi4yLKMfaCNiKX/BeboMi9ekDddE7XCKcLfLAc00MRSL5UNPkpjewwU
U/K4sEzb4Bn/pK6X0yHzSn1Ubx4k9Hf+AMxX8hasDFBvpPBRHsX5J538V/zXAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUWo+EpXjjSr7MNpgUf3n0AD95j18wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA3OTQ3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg+F
wQwgMA0GCSqGSIb3DQEBCwUAA4IBAQCMPWMagGNEM7Tp5yLyNNkEELjoh2SaejPA
grv4IXbjxRiixbtl7GsavpQozwgT25jijBcpzZzQv1oq6wawzxKgEM5iMEoZOTgW
Zf0J7/QMhcKl1yEL6zF+6jOQ+ZKQrVkbaaMRTbwVoT0+YhPVxs/CNpkB+sxEd1Kz
/uPuQLzxKSfms3adXHeSGDtz9NSy0Vv0/aBSsSmiPglFHGGA6CLvENBP5ER/CZoc
URZhlAcYB1ybWb/Oe06AinnSot6DPPCYGIYjYm1zD24TIJzj2CEzMIkqlvGOfQ0G
ZKYo2zGY0P9Iu7WytPVz2IUQjstPL3zmu6SJDyQ63a05ErQN6x8v
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:55 2026 by rpki-client