Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS207019.roa
File: AS207019.roa (raw, json)
Hash identifier: PqXgmo7gv/1kvxynhrq+BFqUIat4aeuFzXgMiuKIahk=
Subject key identifier: C0:DB:8F:FC:B8:87:73:DD:E0:01:C4:00:4E:4D:9F:B0:2A:AF:16:E6
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 143B7B52976C3CE144337CFF35EF94FAEB804179
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS207019.roa
Signing time: Mon 14 Jul 2025 10:12:39 +0000
ROA not before: Mon 14 Jul 2025 10:07:39 +0000
ROA not after: Mon 13 Jul 2026 10:12:39 +0000
asID: 207019
IP address blocks: 143.20.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 11:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3b:7b:52:97:6c:3c:e1:44:33:7c:ff:35:ef:94:fa:eb:80:41:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 14 10:07:39 2025 GMT
Not After : Jul 13 10:12:39 2026 GMT
Subject: CN=C0DB8FFCB88773DDE001C4004E4D9FB02AAF16E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:67:c8:ca:b9:6e:31:b0:92:36:5d:70:7e:
ae:49:ac:78:40:20:24:8b:c8:a4:30:81:ba:22:eb:
68:7d:7a:95:95:ba:68:ae:a4:3e:13:cb:c2:27:77:
11:61:2c:d8:19:c9:ff:c6:51:52:f8:00:4c:1d:52:
fa:36:ed:eb:3d:00:44:cb:5c:d3:2d:1a:81:89:b7:
3f:c8:15:c3:ff:23:a7:b8:90:c5:2f:1e:71:ce:d4:
44:47:13:b7:74:79:50:97:98:54:cc:ba:df:44:27:
fd:a1:87:b7:1c:6d:57:85:ad:f0:d2:07:cc:96:d1:
46:64:e6:2d:65:84:d4:20:8e:45:90:72:00:7b:6a:
61:5b:46:31:07:4a:71:98:9e:d8:25:8f:0e:4e:18:
a9:2c:52:c3:00:ed:6c:7f:f4:de:7d:1b:be:f0:1b:
e5:8a:61:29:2e:58:cd:fd:8f:a1:e9:88:ec:2c:f5:
45:5b:b4:33:49:a2:b9:00:38:14:6e:cf:4f:7d:5a:
90:60:04:7c:5b:76:30:7a:6b:ab:e9:38:a8:ea:3d:
99:87:8d:b5:60:31:f2:79:af:37:91:60:e7:64:28:
94:fa:a7:c5:74:b3:bc:9d:15:39:c8:a9:5a:ce:c6:
5a:0c:30:20:92:7f:f2:63:0c:4b:23:67:b1:3e:c5:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:8F:FC:B8:87:73:DD:E0:01:C4:00:4E:4D:9F:B0:2A:AF:16:E6
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS207019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.207.0/24
Signature Algorithm: sha256WithRSAEncryption
da:11:bf:57:8a:47:1a:24:bb:fb:0c:1f:62:03:8c:45:e9:8b:
60:44:98:e9:e6:dc:64:fd:f9:4a:2e:91:2b:da:74:16:16:ae:
67:e7:ac:ff:1d:b4:90:db:d5:71:63:25:68:0f:b4:96:0c:23:
d6:d0:eb:c9:4a:d2:e1:72:8f:65:bd:84:ae:47:fc:ef:8e:27:
2b:8c:3e:42:11:c0:6d:f7:74:ef:19:5d:6b:37:c6:4f:86:e6:
3f:1c:80:69:d0:01:a8:f2:55:51:86:47:51:46:77:56:08:b9:
60:6f:92:39:f8:3d:a9:be:6b:88:19:96:d0:54:a3:5d:51:da:
99:c3:22:e6:be:be:87:42:1a:33:07:3b:a0:8c:66:7f:cb:90:
2c:0e:c2:73:f8:0a:a0:e5:d3:4b:ce:5b:96:2a:30:eb:5a:87:
d2:aa:d9:b3:65:a9:93:30:3c:e2:59:8d:fe:d6:d1:e6:5e:ef:
c3:be:d3:89:e5:99:81:ff:0c:ca:ae:1d:db:a2:c1:07:ec:ec:
0f:c5:56:2a:cf:9b:50:05:fd:06:cf:28:05:e5:35:61:f3:4d:
88:4b:bd:e5:56:19:52:5c:a1:6b:ea:bd:08:7c:cf:70:cd:93:
6d:0f:57:f5:b7:28:93:b1:19:52:d6:d7:33:ae:d1:67:12:66:
32:cc:5e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:30:43 2025 by rpki-client