Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207459.roa
File: AS207459.roa (raw, json)
Hash identifier: lDeuFsgwAiJqwGv2NQoIbIWL4cpuzAwOSOax47svfwE=
Subject key identifier: FE:1B:CC:98:CE:20:A6:FD:7E:EE:49:82:DF:69:6A:B3:AC:68:F2:66
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 072CC91E6AE8DC5A57CEEF9CBB4FA1E477294C50
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207459.roa
Signing time: Thu 09 Jul 2026 14:49:07 +0000
ROA not before: Thu 09 Jul 2026 14:44:07 +0000
ROA not after: Thu 08 Jul 2027 14:49:07 +0000
asID: 207459
IP address blocks: 2a13:9500:c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:2c:c9:1e:6a:e8:dc:5a:57:ce:ef:9c:bb:4f:a1:e4:77:29:4c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 9 14:44:07 2026 GMT
Not After : Jul 8 14:49:07 2027 GMT
Subject: CN=FE1BCC98CE20A6FD7EEE4982DF696AB3AC68F266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:49:38:f1:ca:e8:7a:ac:1d:b5:64:a3:2f:
aa:fb:ae:82:fe:39:b1:19:85:f9:8c:e0:17:15:b9:
9a:72:de:61:19:bd:28:13:fb:f3:b7:96:cf:ea:68:
08:48:5f:22:33:09:51:ab:20:5c:bc:55:cc:30:33:
2b:15:65:73:08:ee:ce:18:ce:3f:8b:d4:63:76:fc:
05:e9:b8:f3:cc:96:65:ba:45:98:ae:84:c6:14:ee:
90:22:92:89:0e:e0:c8:b7:cd:66:89:b4:af:e7:de:
2a:90:5d:e9:94:b3:b0:a4:9d:3f:71:bd:1d:81:bb:
68:d8:65:6a:34:3c:51:c5:9b:de:22:d7:76:dc:ad:
45:29:7a:e4:76:be:d8:e6:48:89:eb:8c:23:ff:d4:
b2:29:6a:6d:33:3a:ab:25:6a:0b:fc:e9:23:85:5e:
aa:ee:7c:d3:2d:50:78:38:45:68:b1:dd:24:7c:03:
34:0f:2d:9c:4b:d9:bd:da:cf:ef:ff:93:48:1f:02:
4b:46:df:00:e7:aa:dd:1e:80:d7:3c:d8:c5:bd:90:
f0:79:22:02:d7:8c:d6:d2:67:8c:6e:d0:a8:4f:07:
8c:a1:0f:da:7a:38:44:e5:f8:86:6a:4e:49:29:e3:
a5:84:e8:b7:28:ea:7e:d4:30:1e:57:61:81:32:3c:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1B:CC:98:CE:20:A6:FD:7E:EE:49:82:DF:69:6A:B3:AC:68:F2:66
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c0::/48
Signature Algorithm: sha256WithRSAEncryption
38:6d:68:8b:1c:a7:ae:26:1b:47:16:e7:e2:47:b1:7f:97:53:
22:40:ed:e7:6b:2a:c7:84:70:66:7a:5a:70:7b:1d:86:ff:0e:
58:a9:fa:f2:f3:ea:b8:ab:7a:8a:f7:c6:c8:d5:82:ad:75:f5:
13:a5:67:01:b7:8e:05:c8:92:d5:ed:8f:e7:1e:47:1f:ca:db:
c4:80:79:23:98:29:19:78:9b:cb:49:d3:f4:c7:ca:d9:35:5a:
50:ca:df:0e:a9:2f:4d:30:56:97:e4:46:37:b7:09:98:ca:0e:
55:31:4b:14:46:66:dd:8e:78:d4:24:1e:de:d1:a7:8f:d4:69:
08:1e:ee:1d:fa:14:b8:2c:6b:47:cd:7f:be:d2:4b:77:54:c7:
d5:9d:67:8b:1a:f4:b8:e4:00:9e:b0:0b:24:71:ad:3d:64:a7:
ef:9b:87:51:c8:51:bf:cc:e0:59:f1:e9:d4:b7:e5:e0:82:e3:
0e:1e:ea:34:34:87:d7:de:ea:a9:37:b4:b2:af:35:b6:43:72:
3a:5d:a1:e8:cc:37:e5:20:82:76:f7:79:73:a5:8f:5c:c6:52:
63:4f:40:fe:56:04:f8:f2:46:49:ba:8c:fe:b2:3f:0f:32:07:
fd:2c:6a:fb:35:fa:df:87:e6:81:2e:55:69:c0:7a:7a:fe:3f:
3c:10:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:09:08 2026 by rpki-client