Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS207957.roa
File: AS207957.roa (raw, json)
Hash identifier: QIn1yLVOZADqV7L9ZlqiDV6QiYAeLGpGg7u89oI4U1Q=
Subject key identifier: 68:33:4D:5C:95:0D:40:6E:81:5F:E3:86:40:00:CB:59:7B:BD:BB:75
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 701CAFCD4DD68FFEAA177A0B807E5A75490DD632
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS207957.roa
Signing time: Thu 12 Nov 2026 06:18:45 +0000
ROA not before: Thu 12 Nov 2026 06:13:45 +0000
ROA not after: Thu 11 Nov 2027 06:18:45 +0000
asID: 207957
IP address blocks: 177.122.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1c:af:cd:4d:d6:8f:fe:aa:17:7a:0b:80:7e:5a:75:49:0d:d6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 12 06:13:45 2026 GMT
Not After : Nov 11 06:18:45 2027 GMT
Subject: CN=68334D5C950D406E815FE3864000CB597BBDBB75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:12:42:83:cb:ed:21:06:a4:f3:d7:4c:b0:
a1:93:90:9a:4b:95:92:8d:ec:6a:88:d4:7a:bf:ff:
56:90:4a:93:8c:71:41:38:7c:8d:32:b6:a4:62:bd:
2d:90:fd:d5:f5:82:72:c5:23:cb:59:a0:91:ef:9a:
9f:65:6d:54:8f:fa:09:32:fb:a0:6e:dc:da:ca:ed:
db:6e:f3:19:39:9e:37:d1:87:9c:55:cb:d5:5c:19:
e7:ca:06:e7:ae:5c:52:3c:a6:24:a9:b2:ee:a7:af:
aa:7e:35:8a:82:55:83:49:a7:1b:d6:c1:7f:c6:74:
8b:63:cd:73:7f:27:78:0d:a8:c8:02:f0:77:71:3c:
5b:85:5c:a2:14:17:0a:1f:2e:26:06:71:6c:49:be:
f2:af:b5:04:62:31:f5:86:be:49:50:2e:07:13:e6:
cc:6c:0d:48:81:80:b9:c3:52:ea:1f:ae:58:19:2b:
b0:d0:c2:8e:fd:60:57:8a:19:24:ac:91:0a:67:18:
89:b4:0f:bf:28:01:b0:67:8e:d6:60:3a:fc:c8:31:
a7:69:33:9d:99:c8:2f:55:9a:ab:f0:4e:a7:2f:47:
97:63:91:b0:a5:36:35:fa:d4:4b:a4:13:24:92:66:
57:37:aa:52:e5:32:39:b6:8e:f6:82:91:ad:82:7c:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:33:4D:5C:95:0D:40:6E:81:5F:E3:86:40:00:CB:59:7B:BD:BB:75
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS207957.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.122.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5f:c7:e5:19:50:05:f6:ee:26:2b:0a:48:85:fe:aa:73:2c:
ef:a1:4f:5a:f5:85:a6:98:33:b0:0e:9a:45:f9:d1:8e:d7:44:
04:bf:cd:85:ec:ab:4d:7f:19:3e:0f:c0:19:b7:d5:1d:73:9f:
70:5e:f9:b4:cf:16:19:36:b6:62:41:09:0d:de:52:ad:a4:e1:
31:8c:56:c5:aa:66:74:7e:2a:a9:1b:72:90:26:98:d8:52:01:
d5:83:81:34:10:6e:52:78:b8:98:7c:62:f9:96:a6:0c:3a:f0:
df:8f:c8:46:6a:f3:7c:59:e8:94:df:1e:f3:79:2c:19:d3:dc:
ce:cb:9a:84:97:86:70:12:56:2e:d7:04:ec:9b:91:99:48:cf:
77:45:22:2f:82:07:c4:98:79:2e:49:47:69:1f:29:11:01:04:
1d:79:30:c4:9a:49:0e:d9:dc:3b:51:42:43:75:7d:ab:9d:73:
88:39:e3:0a:b9:cd:85:30:f7:0d:59:f0:78:26:1e:cb:65:bb:
73:bf:cc:fd:88:67:f0:8d:7d:7f:dc:b0:44:86:f6:3a:d7:88:
5c:b3:f2:1f:1c:b1:a1:af:0e:16:45:9c:9c:2f:9e:3d:e5:bf:
10:48:99:0a:1b:02:3e:e7:04:c9:f7:71:e0:c3:6b:cc:03:a6:
b6:3c:10:b6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUcByvzU3Wj/6qF3oLgH5adUkN1jIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5YTdiZjJiOTBhYjhjYmZkMjRjYzRmOGJhZGVhNzg3
N2Y4ZTQ5NTAeFw0yNjExMTIwNjEzNDVaFw0yNzExMTEwNjE4NDVaMDMxMTAvBgNV
BAMTKDY4MzM0RDVDOTUwRDQwNkU4MTVGRTM4NjQwMDBDQjU5N0JCREJCNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENhJCg8vtIQak89dMsKGTkJpL
lZKN7GqI1Hq//1aQSpOMcUE4fI0ytqRivS2Q/dX1gnLFI8tZoJHvmp9lbVSP+gky
+6Bu3NrK7dtu8xk5njfRh5xVy9VcGefKBueuXFI8piSpsu6nr6p+NYqCVYNJpxvW
wX/GdItjzXN/J3gNqMgC8HdxPFuFXKIUFwofLiYGcWxJvvKvtQRiMfWGvklQLgcT
5sxsDUiBgLnDUuofrlgZK7DQwo79YFeKGSSskQpnGIm0D78oAbBnjtZgOvzIMadp
M52ZyC9VmqvwTqcvR5djkbClNjX61EukEySSZlc3qlLlMjm2jvaCka2CfKQLAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUaDNNXJUNQG6BX+OGQADLWXu9u3UwHwYDVR0j
BBgwFoAUOZp78rkKuMv9JMxPi63qeHf45JUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzQvMzk5QTdCRjJCOTBBQjhDQkZEMjRDQzRGOEJBREVBNzg3N0Y4RTQ5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09acDc4cmtLdU12OUpNeFBpNjNxZUhm
NDVKVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JlNDE3MDRmLTc4MTUt
NGYyYy1hNTAzLTU4YWUwOGU1NTZiNi80L0FTMjA3OTU3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsXqk
MA0GCSqGSIb3DQEBCwUAA4IBAQBbX8flGVAF9u4mKwpIhf6qcyzvoU9a9YWmmDOw
DppF+dGO10QEv82F7KtNfxk+D8AZt9Udc59wXvm0zxYZNrZiQQkN3lKtpOExjFbF
qmZ0fiqpG3KQJpjYUgHVg4E0EG5SeLiYfGL5lqYMOvDfj8hGavN8WeiU3x7zeSwZ
09zOy5qEl4ZwElYu1wTsm5GZSM93RSIvggfEmHkuSUdpHykRAQQdeTDEmkkO2dw7
UUJDdX2rnXOIOeMKuc2FMPcNWfB4Jh7LZbtzv8z9iGfwjX1/3LBEhvY614hcs/If
HLGhrw4WRZycL5495b8QSJkKGwI+5wTJ93Hgw2vMA6a2PBC2
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:46:21 2026 by rpki-client