Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207075.roa
File: AS207075.roa (raw, json)
Hash identifier: rzq8RSoCnq6fuWKL0GNnXc4URED36SRT5aKWL+TTBMw=
Subject key identifier: 2F:F0:00:3E:15:B0:65:B4:55:FF:8A:54:FA:D3:A1:D2:2C:35:B6:A8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7ECAA6266703C4E865DF1F5CBFDFA820C3DE6388
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207075.roa
Signing time: Sat 14 Jun 2025 16:22:40 +0000
ROA not before: Sat 14 Jun 2025 16:17:40 +0000
ROA not after: Sat 13 Jun 2026 16:22:40 +0000
asID: 207075
IP address blocks: 46.203.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ca:a6:26:67:03:c4:e8:65:df:1f:5c:bf:df:a8:20:c3:de:63:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 14 16:17:40 2025 GMT
Not After : Jun 13 16:22:40 2026 GMT
Subject: CN=2FF0003E15B065B455FF8A54FAD3A1D22C35B6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:b7:74:b4:30:b3:2f:dd:54:6b:07:43:7c:
3f:52:9f:4a:01:6b:11:6e:2b:97:f4:5b:88:d6:06:
a9:87:cb:a0:5f:c6:cb:4a:e4:bc:58:fe:8e:e7:d1:
15:ba:cc:f2:96:82:9b:55:c6:23:4c:03:06:8b:c6:
f4:e2:47:31:f0:52:b8:73:b9:4d:44:64:b0:31:f9:
39:7b:e8:fe:6e:44:16:17:82:d7:4b:50:ea:86:a7:
20:d6:ff:6d:78:d9:ec:e9:ac:2e:b4:e6:72:8c:e6:
e6:e3:77:c7:80:61:70:2a:e3:b2:b8:25:e7:97:8c:
c1:b3:36:25:f7:12:1c:58:16:d7:48:22:57:63:5e:
cf:f6:be:df:aa:32:d5:20:d2:f5:bd:e1:6b:e1:28:
03:ba:25:cd:a2:a8:8b:f6:42:87:16:9d:1b:1c:eb:
50:1c:df:a9:03:3e:1a:da:44:91:d5:71:3e:77:a5:
ca:0d:49:ba:a3:03:2e:0c:b5:18:c9:4d:8b:4d:47:
77:ac:07:4b:28:5f:b9:e4:d1:61:e5:80:96:fc:1a:
d7:61:e5:c7:e6:06:83:1a:17:dd:75:41:ce:ec:49:
9a:a8:36:90:99:1f:e0:f1:16:38:38:ca:bd:1f:86:
32:2b:f9:43:1c:88:bb:49:b9:69:71:ac:a6:2a:0f:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:00:3E:15:B0:65:B4:55:FF:8A:54:FA:D3:A1:D2:2C:35:B6:A8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.222.0/24
Signature Algorithm: sha256WithRSAEncryption
48:12:58:31:ab:6a:ef:34:83:74:13:e0:31:4f:3e:b6:83:b5:
65:7d:de:8a:c4:28:e3:11:2b:ca:2d:51:6c:14:f1:60:59:bf:
be:51:d3:d6:b8:a6:b6:5f:b6:f5:df:ad:39:76:80:07:8b:be:
a3:0f:3d:f2:e0:3c:17:57:72:44:fe:4a:81:d3:06:36:b0:15:
63:50:95:79:0e:a2:31:60:eb:2c:16:d7:cc:a2:7c:8f:48:35:
e6:dd:7a:85:a0:a9:5c:7a:b4:7f:ab:6c:4a:f5:ca:6f:39:3a:
85:64:b1:07:0f:49:26:aa:4d:3b:9b:04:b9:f4:61:bc:2d:b2:
38:f7:ba:5f:96:fe:6a:b9:b0:a6:37:96:f7:de:00:95:be:2a:
98:77:a9:0a:08:23:60:85:ac:e4:e1:d5:ad:2c:13:90:a9:62:
7a:13:17:77:e3:ca:33:c8:ff:15:71:8c:be:4d:33:f1:3b:ac:
47:cf:c9:04:23:bb:cf:7a:a1:67:2b:0e:8d:d0:5a:37:07:e0:
28:aa:4b:a1:84:a5:2e:6e:b7:85:c6:15:4e:3d:83:6b:4a:f9:
f1:b7:af:fd:52:35:a8:bc:3d:a2:88:2b:6e:94:b2:12:57:65:
2b:c9:9d:35:09:94:77:03:86:43:31:40:a7:a6:0f:f0:e1:e8:
e4:84:5d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:37:14 2025 by rpki-client