Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207860.roa
File: AS207860.roa (raw, json)
Hash identifier: 0N4CuYJQb0qBkvFC5ohcJ5U6DAMEj+3Gs6Yje9w5+4o=
Subject key identifier: BE:BC:39:68:D1:5F:E0:98:DE:10:9C:D9:7E:52:F9:39:C4:6C:BC:B6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 315AD306773CB5F4DC2A1EB42E9279CEF56D1FC8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207860.roa
Signing time: Thu 05 Jun 2025 16:26:01 +0000
ROA not before: Thu 05 Jun 2025 16:21:01 +0000
ROA not after: Thu 04 Jun 2026 16:26:01 +0000
asID: 207860
IP address blocks: 143.14.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5a:d3:06:77:3c:b5:f4:dc:2a:1e:b4:2e:92:79:ce:f5:6d:1f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 5 16:21:01 2025 GMT
Not After : Jun 4 16:26:01 2026 GMT
Subject: CN=BEBC3968D15FE098DE109CD97E52F939C46CBCB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1b:27:d6:63:ed:48:1e:a8:73:84:cb:90:22:
80:d8:76:38:a9:25:d2:99:9e:d9:ad:7d:b5:76:7a:
b3:76:2a:43:04:1a:f2:bf:e4:9b:58:be:de:98:d0:
70:5b:c7:6e:9a:3f:ed:8a:f7:8e:d9:9f:5b:a0:23:
55:bc:bf:14:d7:a4:10:50:20:41:ed:85:4b:53:d6:
25:a2:69:85:8d:70:7f:ca:48:5d:ba:db:59:e9:0b:
ce:03:09:7e:d2:93:cd:6b:76:56:11:7f:d9:a8:67:
ec:ab:98:8a:14:36:f7:0a:d6:e1:20:8b:c9:01:b0:
32:60:7d:7f:b9:44:8b:2d:71:f6:f8:a9:49:ec:9c:
ef:75:25:8e:11:1d:e8:e1:7a:bd:f4:36:f5:00:18:
50:92:63:6d:14:50:e7:04:77:93:bf:3c:d1:2e:10:
1e:7f:d4:a1:ad:ea:c5:be:be:7b:ad:22:fc:49:42:
bb:cb:1e:e0:5f:dc:07:1b:8a:78:a4:b2:8e:c1:db:
5a:93:84:30:ea:44:6a:12:ed:a9:45:cd:29:b4:89:
71:b5:4e:4e:f2:54:87:1e:c5:ac:44:2b:34:1a:8e:
e0:e4:1f:28:a2:38:14:4c:24:62:55:cd:ab:e9:69:
d0:4d:bf:41:ee:93:63:4b:8d:71:6f:14:e4:7c:8c:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:39:68:D1:5F:E0:98:DE:10:9C:D9:7E:52:F9:39:C4:6C:BC:B6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.14.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8e:86:e3:ab:b4:cf:29:13:9d:4a:20:22:63:4c:cb:82:94:
7d:4c:a0:81:b9:b7:a0:08:11:da:66:c6:30:ad:45:0b:a9:90:
ed:e3:70:dc:fd:17:12:8e:a3:0a:49:11:dc:bf:81:11:0d:2e:
33:77:46:6c:4f:d5:7f:92:8a:a1:15:93:68:cc:88:e3:cd:90:
8d:5e:74:f1:35:dc:50:d0:78:bb:51:98:12:00:c8:ab:7e:ea:
ac:d1:bb:c4:6c:c4:d7:32:01:60:d5:ef:b1:fe:ca:3e:b4:51:
35:00:a8:33:81:f1:8e:24:d2:73:41:c7:ee:80:49:4c:4d:cc:
7d:0a:37:88:f7:ed:7c:2c:09:2a:99:22:3c:6a:9d:59:da:22:
08:b5:96:b1:f2:cd:9c:7c:3f:c3:eb:37:28:b9:77:5d:7d:8f:
14:b8:ec:11:cc:aa:cf:21:bd:19:5e:58:54:25:86:ac:4c:f5:
ea:82:61:0b:ce:3c:f1:ea:77:2f:b2:32:74:15:78:03:61:62:
00:43:cd:dd:6e:2c:69:85:b8:55:ac:02:c0:ab:36:eb:ee:33:
ba:b9:f2:c0:eb:a1:1d:e7:8f:3f:81:3b:49:3e:26:79:8b:68:
f7:02:27:e9:d6:b3:ef:a1:c2:b0:9b:4d:81:17:63:f2:7a:8f:
28:c0:ea:b6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUMVrTBnc8tfTcKh60LpJ5zvVtH8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA2MDUxNjIxMDFaFw0yNjA2MDQxNjI2MDFaMDMxMTAvBgNV
BAMTKEJFQkMzOTY4RDE1RkUwOThERTEwOUNEOTdFNTJGOTM5QzQ2Q0JDQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1GyfWY+1IHqhzhMuQIoDYdjip
JdKZntmtfbV2erN2KkMEGvK/5JtYvt6Y0HBbx26aP+2K947Zn1ugI1W8vxTXpBBQ
IEHthUtT1iWiaYWNcH/KSF2621npC84DCX7Sk81rdlYRf9moZ+yrmIoUNvcK1uEg
i8kBsDJgfX+5RIstcfb4qUnsnO91JY4RHejher30NvUAGFCSY20UUOcEd5O/PNEu
EB5/1KGt6sW+vnutIvxJQrvLHuBf3Acbinikso7B21qThDDqRGoS7alFzSm0iXG1
Tk7yVIcexaxEKzQajuDkHyiiOBRMJGJVzavpadBNv0Huk2NLjXFvFOR8jHcXAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUvrw5aNFf4JjeEJzZflL5OcRsvLYwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA3ODYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjw4O
MA0GCSqGSIb3DQEBCwUAA4IBAQBMjobjq7TPKROdSiAiY0zLgpR9TKCBubegCBHa
ZsYwrUULqZDt43Dc/RcSjqMKSRHcv4ERDS4zd0ZsT9V/koqhFZNozIjjzZCNXnTx
NdxQ0Hi7UZgSAMirfuqs0bvEbMTXMgFg1e+x/so+tFE1AKgzgfGOJNJzQcfugElM
Tcx9CjeI9+18LAkqmSI8ap1Z2iIItZax8s2cfD/D6zcouXddfY8UuOwRzKrPIb0Z
XlhUJYasTPXqgmELzjzx6ncvsjJ0FXgDYWIAQ83dbixphbhVrALAqzbr7jO6ufLA
66Ed548/gTtJPiZ5i2j3Aifp1rPvocKwm02BF2Pyeo8owOq2
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:00:12 2025 by rpki-client