Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207158.roa
File: AS207158.roa (raw, json)
Hash identifier: DAAPA4UqySSLF+ClRZIinUnhDiv57uwI7Vw/b6B8lKI=
Subject key identifier: DF:AE:79:BB:18:67:D5:06:A9:0C:95:56:A0:2C:C1:E9:A8:8D:82:AC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 742293D0AFFEDC27BA5C0F192630C199DF0A1512
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207158.roa
Signing time: Fri 05 Jun 2026 09:51:06 +0000
ROA not before: Fri 05 Jun 2026 09:46:06 +0000
ROA not after: Fri 04 Jun 2027 09:51:06 +0000
asID: 207158
IP address blocks: 143.14.192.0/24 maxlen: 24
143.14.194.0/24 maxlen: 24
155.117.248.0/24 maxlen: 24
155.117.249.0/24 maxlen: 24
155.117.250.0/24 maxlen: 24
155.117.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:22:93:d0:af:fe:dc:27:ba:5c:0f:19:26:30:c1:99:df:0a:15:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 5 09:46:06 2026 GMT
Not After : Jun 4 09:51:06 2027 GMT
Subject: CN=DFAE79BB1867D506A90C9556A02CC1E9A88D82AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6e:6d:f3:2f:0a:49:8d:1d:e8:03:54:66:d8:
af:0b:18:84:fa:5a:49:97:f1:f6:d1:0a:6c:1f:cb:
83:c3:ec:cc:5c:2e:33:f8:a3:ca:84:24:e7:34:f1:
e1:19:12:43:a2:3f:0a:41:83:2a:7c:62:f8:38:01:
bc:9e:a6:2b:8d:ce:d4:1c:1a:7d:4a:b8:6f:b2:46:
51:bb:18:f7:f9:ea:6d:8c:b9:32:7b:d8:02:32:52:
89:f5:bc:e3:5b:d2:f2:4f:eb:d0:c1:a0:2e:04:a2:
49:58:e8:d9:03:76:5c:26:10:ac:0d:34:b9:22:9b:
67:c8:df:5c:d6:49:b7:e9:90:37:ed:ad:da:b4:28:
30:9c:36:1c:5d:f0:55:00:9b:ec:c9:a5:08:9e:a0:
b1:32:90:ee:51:d0:80:b4:d1:0b:8d:2d:11:a1:7d:
cc:51:ef:7f:1e:4d:29:f2:a5:2e:3f:88:cd:a1:34:
82:d8:f4:b7:d8:e5:fd:ec:5c:e2:cc:9d:ae:9e:0f:
b2:f5:63:7e:2e:cd:ab:4e:2d:22:dc:a4:69:d3:b8:
f3:76:86:9a:df:59:63:ed:b8:65:05:06:19:0f:a8:
54:a1:ec:33:10:1a:39:64:24:5c:75:e4:9e:1a:c1:
d1:46:94:7f:88:59:de:27:87:32:3b:79:35:2b:76:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:79:BB:18:67:D5:06:A9:0C:95:56:A0:2C:C1:E9:A8:8D:82:AC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.192.0/24
143.14.194.0/24
155.117.248.0/22
Signature Algorithm: sha256WithRSAEncryption
54:88:09:f6:cb:98:a2:6f:1f:c1:f9:de:53:c4:d6:5c:cc:ba:
bb:90:1a:4d:40:8d:e5:dc:3d:49:ce:a7:6d:9c:48:05:52:14:
a7:6a:23:96:16:9a:3c:ea:b2:a9:6e:f5:ff:38:3e:6f:ee:8d:
7f:5c:3a:00:69:a3:6b:d8:67:17:a9:2c:83:cd:8b:3c:f6:4e:
eb:1e:06:9e:4d:bc:ec:e0:65:54:87:b3:39:75:8e:34:95:4a:
36:fd:af:5d:8a:e2:a8:b7:99:74:6b:e2:37:23:ee:39:f0:c2:
d2:e9:66:d1:df:5a:75:c6:8a:0d:e1:f5:df:33:b6:30:8f:28:
fa:9c:bb:ab:39:d1:8f:54:f1:fa:87:63:7b:c7:48:8b:c5:56:
01:35:46:8d:98:52:79:10:05:09:0c:ac:7d:9a:cf:0b:f6:1b:
14:7d:49:8e:25:70:02:83:10:31:cf:95:c9:6c:4e:f3:3b:fb:
61:73:ee:11:d6:7c:68:a6:a3:b8:c0:7e:f4:a6:47:5c:bd:d2:
70:3b:ea:52:1c:a8:1b:de:e8:ab:14:88:55:f1:ea:63:8c:b0:
1a:b8:7a:29:66:7a:11:b4:26:38:ea:41:03:ca:ca:e1:39:e8:
73:be:d9:7e:01:6e:15:8e:89:95:67:92:50:89:be:0b:cc:76:
b0:01:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:57:38 2026 by rpki-client