Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207230.roa
File: AS207230.roa (raw, json)
Hash identifier: JoRUKS7EHJiQQR6Diok/gjwFFJEyHxCqS9AzSjgNH04=
Subject key identifier: 64:02:CE:7A:B5:70:37:CF:2D:BD:A2:8E:1B:31:58:36:57:35:E8:9D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 379A0937EFE09C0507D988337D900CE5D63B7CFF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207230.roa
Signing time: Thu 18 Jun 2026 09:39:16 +0000
ROA not before: Thu 18 Jun 2026 09:34:16 +0000
ROA not after: Thu 17 Jun 2027 09:39:16 +0000
asID: 207230
IP address blocks: 150.241.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:9a:09:37:ef:e0:9c:05:07:d9:88:33:7d:90:0c:e5:d6:3b:7c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 18 09:34:16 2026 GMT
Not After : Jun 17 09:39:16 2027 GMT
Subject: CN=6402CE7AB57037CF2DBDA28E1B3158365735E89D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:24:a8:6d:13:52:fa:21:49:bf:d0:fe:2a:
8c:ec:dd:2d:55:b7:d8:63:97:8c:b2:04:cf:35:84:
35:32:e8:f2:ab:46:1e:1b:ab:f0:e1:fa:fa:d7:98:
6d:a8:50:1b:c9:79:c7:af:83:6e:92:7d:aa:b8:5b:
64:c0:eb:2e:6e:cd:23:f7:5d:3b:7f:09:31:34:5e:
31:47:e0:ad:dc:1c:a6:5a:0d:64:b2:96:61:70:c1:
be:6c:db:87:3f:b8:e3:d3:b8:de:83:ad:27:74:75:
c7:82:74:43:bc:a7:6d:44:7f:04:32:05:23:0a:2f:
a9:20:53:76:78:d0:6d:a9:7b:5e:3a:35:89:7b:9f:
9d:52:b9:04:f9:e2:43:aa:45:ef:97:5a:cd:c9:c2:
ca:3b:ec:69:ff:96:f5:f0:e3:97:84:b9:7b:98:42:
7b:f1:ca:63:87:53:eb:ec:ea:a5:e8:63:da:fd:a3:
75:e3:fc:37:40:47:2b:43:80:16:28:f1:65:c3:2e:
60:d5:18:0f:c5:22:df:a5:05:51:43:0e:f6:10:9e:
21:99:c4:fe:0c:e6:52:2a:eb:36:6f:3f:5f:93:bd:
a9:cb:a6:b2:b7:e4:ea:09:a8:1f:d4:bb:c3:2c:3a:
ee:b2:fd:d7:ce:37:dc:99:f1:69:bb:98:56:8f:59:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:02:CE:7A:B5:70:37:CF:2D:BD:A2:8E:1B:31:58:36:57:35:E8:9D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c5:d8:77:7c:1c:f4:e7:ca:fe:95:38:a3:bd:41:50:3a:83:
97:9e:28:87:35:4d:b2:87:d7:cb:fb:91:ab:da:af:78:f9:8a:
2c:ba:65:b8:88:8d:af:d2:fb:30:e2:ce:66:97:7c:e4:34:5f:
df:36:b3:f7:cf:d3:e0:de:12:ce:ca:fb:00:e9:fe:00:26:b8:
7d:99:e0:c4:9d:82:94:68:c0:f9:d2:46:d6:32:19:17:3f:c8:
1a:74:31:d7:fc:73:da:99:69:32:a3:17:27:06:0d:c3:d4:7a:
62:66:78:a8:7b:1c:97:28:a7:81:3f:9b:b8:8e:40:6a:51:24:
fd:86:c2:f8:1f:47:e6:72:13:f9:ff:d5:77:fb:fe:74:92:14:
47:93:92:a1:51:96:e8:e7:22:36:1e:62:58:a0:fb:6e:f7:ed:
f6:40:c8:32:18:41:0b:28:29:10:7d:cb:7a:4b:cd:19:d3:58:
76:69:fd:8a:e4:67:4e:0d:f0:10:f2:f0:90:d5:43:df:f5:85:
8d:8a:17:98:c4:2a:2d:58:e7:91:ef:51:94:ca:90:b3:54:70:
e9:3b:57:ba:04:55:fd:8f:28:02:dd:15:a5:90:43:20:63:4a:
e1:f5:8f:84:b8:e9:34:b8:69:4f:bd:04:1f:09:e3:b4:da:e3:
1a:89:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:28 2026 by rpki-client