Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207043.roa
File: AS207043.roa (raw, json)
Hash identifier: Zxu8/rPrG8ZbkaI53XxTwHeu7TZ8VLSzVsMIUoZrZ/o=
Subject key identifier: 4B:CC:88:EE:A0:51:2A:57:70:08:59:DB:94:CD:18:C3:2D:3F:CD:21
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3CFC4EDE9F1E2F2BE0492AA00A37533570401E59
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207043.roa
Signing time: Fri 05 Sep 2025 15:48:49 +0000
ROA not before: Fri 05 Sep 2025 15:43:49 +0000
ROA not after: Fri 04 Sep 2026 15:48:49 +0000
asID: 207043
IP address blocks: 167.148.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fc:4e:de:9f:1e:2f:2b:e0:49:2a:a0:0a:37:53:35:70:40:1e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 5 15:43:49 2025 GMT
Not After : Sep 4 15:48:49 2026 GMT
Subject: CN=4BCC88EEA0512A57700859DB94CD18C32D3FCD21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:15:0b:94:6b:7b:0c:bd:a9:18:83:c8:c7:
d6:07:ff:fa:bf:a7:2d:59:da:67:2f:6a:65:b6:6d:
38:ea:c6:88:01:2f:c8:4c:de:f8:10:24:36:32:20:
7d:18:b8:7d:7f:9c:1e:8d:b2:3b:67:11:16:42:f8:
78:a2:e7:85:cd:c0:b9:fe:40:22:10:04:ac:ef:17:
c1:41:0a:04:30:10:55:3c:1b:4f:48:db:8f:01:d9:
08:2e:a4:2f:94:e7:8a:7e:04:61:aa:98:55:25:48:
45:29:30:1d:81:7d:ab:d5:2d:5a:bb:08:9d:4c:35:
65:f0:86:e3:cd:fc:6f:e7:01:ac:93:70:99:0d:a0:
b7:d7:ee:cd:c7:48:28:16:48:92:ee:48:5c:54:db:
d3:7d:08:1f:dd:21:e6:4f:23:dc:67:52:6c:a1:01:
3c:30:6d:0f:b3:2a:fb:35:16:cf:0b:93:07:7f:45:
5b:b4:42:ca:ce:3e:29:53:59:fa:c2:49:c6:a6:73:
a8:aa:e2:84:84:38:50:42:15:3a:4d:0e:26:c0:85:
b6:37:68:fc:06:56:d1:f7:d5:c3:99:60:44:f0:8f:
a3:ef:61:9a:1f:ab:57:0f:2e:9e:15:e1:68:8d:0d:
e9:7c:f7:c7:ae:bd:b5:7a:da:90:27:31:89:fd:5d:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CC:88:EE:A0:51:2A:57:70:08:59:DB:94:CD:18:C3:2D:3F:CD:21
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.195.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4a:96:3c:3a:20:b4:cd:64:0c:04:cf:9a:44:03:8e:20:c8:
62:34:a1:20:cd:c0:42:a9:48:d2:f6:5a:34:7d:f7:d7:96:c8:
81:a1:61:61:17:6c:04:d0:eb:a8:16:42:7b:af:7a:e9:64:71:
19:5d:1d:59:d7:67:4d:cb:8c:66:11:eb:2d:a8:64:ba:6e:7b:
45:dc:1c:70:cb:f4:3f:e4:4f:68:39:c6:32:25:e2:3c:56:0e:
a0:e1:38:99:51:4e:5c:06:67:c0:29:5b:5f:8f:8d:e8:cb:b2:
25:b2:43:00:62:bc:32:05:d8:af:9a:1d:c9:58:2d:d6:9b:c2:
d1:a0:e5:75:17:9a:6d:99:fc:40:b1:8a:c8:51:01:8b:e9:0d:
42:fe:ca:13:05:5a:bf:cf:45:21:35:c3:41:69:a1:6e:79:64:
34:e6:15:79:72:c9:80:8e:31:fc:4c:2c:a6:3f:3e:e3:8e:fc:
ac:1d:8a:3a:e0:de:f6:80:e6:6e:59:b3:e2:7c:aa:10:42:bd:
f7:de:eb:6e:50:7e:d4:8c:ef:a3:e0:f3:a0:e1:a3:4c:c9:ca:
c1:c7:2a:4c:fa:bc:41:de:f5:a0:cf:11:cb:39:32:73:92:0c:
0b:58:0f:3f:27:bd:e4:3c:40:5e:a4:d3:67:16:16:1e:15:6a:
04:e7:38:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUPPxO3p8eLyvgSSqgCjdTNXBAHlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA5MDUxNTQzNDlaFw0yNjA5MDQxNTQ4NDlaMDMxMTAvBgNV
BAMTKDRCQ0M4OEVFQTA1MTJBNTc3MDA4NTlEQjk0Q0QxOEMzMkQzRkNEMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXZBULlGt7DL2pGIPIx9YH//q/
py1Z2mcvamW2bTjqxogBL8hM3vgQJDYyIH0YuH1/nB6NsjtnERZC+Hii54XNwLn+
QCIQBKzvF8FBCgQwEFU8G09I248B2QgupC+U54p+BGGqmFUlSEUpMB2BfavVLVq7
CJ1MNWXwhuPN/G/nAayTcJkNoLfX7s3HSCgWSJLuSFxU29N9CB/dIeZPI9xnUmyh
ATwwbQ+zKvs1Fs8Lkwd/RVu0QsrOPilTWfrCScamc6iq4oSEOFBCFTpNDibAhbY3
aPwGVtH31cOZYETwj6PvYZofq1cPLp4V4WiNDel898euvbV62pAnMYn9XS0vAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUS8yI7qBRKldwCFnblM0Ywy0/zSEwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA3MDQzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5TD
MA0GCSqGSIb3DQEBCwUAA4IBAQA3SpY8OiC0zWQMBM+aRAOOIMhiNKEgzcBCqUjS
9lo0fffXlsiBoWFhF2wE0OuoFkJ7r3rpZHEZXR1Z12dNy4xmEestqGS6bntF3Bxw
y/Q/5E9oOcYyJeI8Vg6g4TiZUU5cBmfAKVtfj43oy7IlskMAYrwyBdivmh3JWC3W
m8LRoOV1F5ptmfxAsYrIUQGL6Q1C/soTBVq/z0UhNcNBaaFueWQ05hV5csmAjjH8
TCymPz7jjvysHYo64N72gOZuWbPifKoQQr333utuUH7UjO+j4POg4aNMycrBxypM
+rxB3vWgzxHLOTJzkgwLWA8/J73kPEBepNNnFhYeFWoE5zg/
-----END CERTIFICATE-----
Generated at Fri Sep 5 19:49:18 2025 by rpki-client