Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207994.roa
File: AS207994.roa (raw, json)
Hash identifier: r7JXSdZ5xw2CUEFq+XmvmNnmoUlQTvXnJogTw5sBMdI=
Subject key identifier: 32:1F:C6:6B:BC:05:A5:29:3B:2B:A6:E0:AB:AB:10:1E:2D:04:41:32
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1B42C09BB14832AF983EEC7A8482822A09491ADC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207994.roa
Signing time: Mon 09 Feb 2026 12:55:37 +0000
ROA not before: Mon 09 Feb 2026 12:50:37 +0000
ROA not after: Mon 08 Feb 2027 12:55:37 +0000
asID: 207994
IP address blocks: 146.103.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 11:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:42:c0:9b:b1:48:32:af:98:3e:ec:7a:84:82:82:2a:09:49:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 9 12:50:37 2026 GMT
Not After : Feb 8 12:55:37 2027 GMT
Subject: CN=321FC66BBC05A5293B2BA6E0ABAB101E2D044132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:62:e3:a3:26:57:a5:1a:d9:d3:67:40:2b:43:
09:2f:85:c5:51:9f:d2:88:3b:90:39:f2:9b:6d:14:
37:92:d4:d1:d5:be:10:09:c8:64:99:63:bc:59:61:
19:c7:10:d9:2b:03:47:0f:e3:a3:18:86:f8:89:41:
21:f0:e4:3c:49:87:1f:57:e5:4d:08:9a:a1:f8:e9:
bd:45:8b:bf:1b:1c:7f:4a:44:0f:19:3f:69:56:11:
7e:09:9e:64:75:3a:c4:04:92:50:71:da:48:46:5c:
66:f2:be:0b:a4:a9:63:ee:9f:72:40:5e:96:19:87:
a8:51:db:70:51:87:6c:98:67:c3:c2:2e:aa:f9:67:
a7:b4:da:a1:e1:2f:a8:d6:de:ca:1b:e5:dc:70:de:
4e:20:07:6a:22:3e:10:09:d1:e3:13:a7:d4:bc:ba:
61:d7:90:f7:11:2b:b7:5c:c6:52:26:83:79:d1:82:
a3:70:b0:65:99:f0:85:10:03:be:3b:9f:e1:2b:53:
56:3a:19:f7:0a:32:d0:4f:25:d5:95:ee:ae:db:b8:
da:03:62:2c:74:cb:71:47:27:55:ba:f4:e2:74:24:
9e:ce:d4:07:44:13:f2:db:dc:96:fa:26:97:36:11:
6c:f5:60:8e:b8:08:6c:c1:2b:93:c9:80:14:e5:94:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1F:C6:6B:BC:05:A5:29:3B:2B:A6:E0:AB:AB:10:1E:2D:04:41:32
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.50.0/24
Signature Algorithm: sha256WithRSAEncryption
35:44:63:a2:7e:9f:14:be:f1:d8:0a:85:84:96:c5:53:f3:a1:
a9:ff:2b:99:b9:5e:17:39:d0:f7:c2:25:a5:ef:fc:9d:96:98:
b7:ca:a8:3c:d8:b8:9e:84:9d:9e:7a:b9:62:e6:a8:2b:56:fa:
be:75:0b:54:0e:37:66:31:c8:63:db:b7:30:67:bf:df:cd:a8:
72:ea:e9:1e:4b:e2:9e:e6:4c:91:29:29:ae:8f:2d:fe:fd:e0:
c3:c1:45:2a:50:36:96:bf:8c:4e:d1:56:f1:df:97:7d:ad:e5:
d8:d3:7e:a6:cf:7c:00:6d:71:bb:f6:b6:fc:e2:06:6a:1a:43:
9a:be:81:b6:53:ff:b3:e5:b7:cc:e6:82:6f:3d:70:ad:ed:4b:
ee:b2:e2:18:44:53:88:5d:02:d2:83:7e:92:33:e6:a5:fa:48:
21:b5:2a:4c:52:b5:94:30:bf:9a:26:c6:24:2b:4e:01:44:5f:
3a:e2:a5:c9:f4:a6:83:15:c8:2c:9a:83:88:a0:50:1f:86:d0:
c3:ea:c9:44:6b:32:84:47:33:89:04:9b:33:be:c8:c9:da:25:
38:ff:33:e0:f6:29:c9:2e:fb:55:9d:77:bc:36:b1:fd:e2:e1:
11:24:fb:da:ba:d3:96:b4:c8:6f:79:5d:83:d6:22:bd:fb:38:
6e:bf:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:09:55 2026 by rpki-client