Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207158.roa
File: AS207158.roa (raw, json)
Hash identifier: 0y3L7HEkS9MC0YTdSxs4fX116abdBuGaW882Iy3KMAo=
Subject key identifier: 22:A8:AC:9C:5B:29:D1:DD:0E:3F:9A:4E:B1:62:82:F6:76:DF:D5:FD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3355EB5386B70F04285475E75BE7564DB8858B46
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207158.roa
Signing time: Sat 26 Jul 2025 10:38:36 +0000
ROA not before: Sat 26 Jul 2025 10:33:36 +0000
ROA not after: Sat 25 Jul 2026 10:38:36 +0000
asID: 207158
IP address blocks: 155.117.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:55:eb:53:86:b7:0f:04:28:54:75:e7:5b:e7:56:4d:b8:85:8b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 26 10:33:36 2025 GMT
Not After : Jul 25 10:38:36 2026 GMT
Subject: CN=22A8AC9C5B29D1DD0E3F9A4EB16282F676DFD5FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:ed:1e:67:fd:d1:75:55:4a:f8:4e:8e:e0:
75:90:f1:42:8f:92:65:66:7a:3a:76:b6:f1:29:0d:
0f:84:a3:8d:65:c7:f4:72:db:c3:64:ec:3d:8c:e1:
9e:a3:07:9d:bd:ed:88:22:6b:e0:61:99:aa:fc:b7:
bc:7c:6b:cd:ce:a9:0c:e5:09:ac:25:f2:d1:b5:ac:
05:6b:71:54:14:9f:c0:02:14:b4:4d:f5:c4:9d:f7:
84:56:4f:e7:3f:71:e5:ce:df:50:21:a1:5d:d0:0f:
b8:d9:a8:69:0c:3d:71:ad:94:40:b8:c2:86:c5:0f:
fe:6a:c9:2c:b8:40:fa:d4:dd:62:e1:f1:48:62:02:
ba:fd:53:32:75:5c:e2:d9:96:dd:00:f6:c3:65:60:
69:49:14:ed:72:c0:ec:7b:a3:e0:50:42:b8:f4:78:
8f:a5:24:3d:b6:de:ae:78:b1:ac:5d:ee:c2:6c:e1:
bd:31:f8:60:90:be:74:ee:55:85:a3:04:dc:fc:72:
05:7d:9d:02:3e:53:f6:b3:48:eb:5d:4f:01:69:f6:
07:ca:13:97:76:45:49:3c:06:79:ce:02:af:71:01:
2f:01:e2:78:fa:84:64:ef:6e:3d:6a:88:29:67:be:
5d:b7:f4:ff:97:e0:11:59:ca:a3:41:31:5f:dc:ed:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:AC:9C:5B:29:D1:DD:0E:3F:9A:4E:B1:62:82:F6:76:DF:D5:FD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.205.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a3:52:49:03:ca:d7:e4:9f:27:61:29:fc:14:17:66:d0:9f:
e0:4d:9c:48:84:0b:85:47:1e:35:3c:9c:d5:45:ae:a1:58:3d:
34:bb:13:c5:1c:eb:c6:75:f9:01:9e:b4:48:50:ae:b1:d5:02:
bd:73:9e:a5:49:b5:32:0e:ab:a1:53:5e:c6:0e:e8:e9:dc:71:
3d:c5:b9:90:f5:de:71:e5:43:51:8b:1d:c0:70:19:02:c2:fb:
4d:1f:7f:b7:bd:67:80:a8:3b:54:a4:af:0d:97:5a:5e:bc:4e:
88:e9:bf:80:dc:d5:39:cd:d1:11:3d:08:d2:22:d0:23:f6:23:
b5:5b:bb:ef:db:6b:5e:e1:64:7c:ab:aa:60:38:00:31:af:fc:
49:a9:bb:1d:42:26:91:61:af:9a:a9:4e:3e:85:e1:83:5b:c5:
02:0c:ed:61:04:57:15:a4:62:ce:b6:10:f2:da:e6:e2:7a:17:
02:e2:54:ed:db:b6:72:0a:63:38:ad:04:d0:a4:87:5f:05:49:
5e:dd:8c:3e:4a:08:74:05:8c:14:8d:5a:6a:08:10:86:a3:21:
b2:97:c9:e1:28:7c:1d:da:14:59:3d:4a:ac:a8:92:2f:e5:f5:
af:c6:00:48:e9:41:7b:0e:49:b4:da:6a:7a:0b:fc:b9:a9:1b:
12:05:7e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:05:14 2025 by rpki-client