Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207992.roa
File: AS207992.roa (raw, json)
Hash identifier: 1AuMJj2XVEVy9LUDDILKONEaF4DJpfyWlSxvVXFCG6Y=
Subject key identifier: F0:19:7C:6F:EC:78:F0:2E:A3:5C:C7:B6:C5:D1:D1:2B:78:DE:23:DF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 38221EF60995361D12E8451637B78BAC84D8EA22
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207992.roa
Signing time: Fri 14 Aug 2026 00:49:28 +0000
ROA not before: Fri 14 Aug 2026 00:44:28 +0000
ROA not after: Fri 13 Aug 2027 00:49:28 +0000
asID: 207992
IP address blocks: 181.214.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:22:1e:f6:09:95:36:1d:12:e8:45:16:37:b7:8b:ac:84:d8:ea:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 14 00:44:28 2026 GMT
Not After : Aug 13 00:49:28 2027 GMT
Subject: CN=F0197C6FEC78F02EA35CC7B6C5D1D12B78DE23DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:4f:10:cb:21:42:55:e1:c1:6c:59:3c:49:
c1:a8:c6:7c:1a:66:c4:f4:44:ba:f9:09:64:9d:da:
d1:99:3b:dc:cb:5f:b0:76:07:2c:ca:cc:75:71:5f:
91:96:19:04:64:a3:b0:18:87:b1:8f:80:2d:ed:8c:
42:dd:92:45:b1:a3:67:48:6b:d2:fe:59:4e:bd:47:
7e:4b:d5:c2:09:e2:0b:45:c9:6b:bd:ab:81:f1:79:
cd:aa:e2:6e:cd:ce:88:1b:3b:ed:1c:87:b7:29:f3:
19:1e:ec:3f:cc:2c:28:87:0d:94:b9:39:2d:86:a8:
81:29:6f:dc:52:10:d7:5a:7a:07:9e:10:34:be:2e:
c0:bb:e2:e8:54:74:23:fb:0f:33:72:e8:7b:5e:70:
37:02:69:b3:0b:f2:b4:9b:37:9d:e9:a1:9c:ff:39:
a5:0d:bc:8b:78:ff:8c:68:9c:c3:95:69:b8:5c:76:
84:c9:7d:63:df:51:2d:57:b0:1e:40:b3:7a:0d:d6:
90:42:6d:97:74:59:a3:fa:56:0c:cf:0f:10:30:f9:
2c:f5:9a:0d:69:26:71:e9:aa:2d:3f:79:14:59:63:
48:c3:0b:9f:2d:2b:18:80:01:de:21:32:fd:c1:2a:
bd:4c:fc:c9:02:5c:1a:3b:56:89:f2:e9:ec:03:37:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:19:7C:6F:EC:78:F0:2E:A3:5C:C7:B6:C5:D1:D1:2B:78:DE:23:DF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.189.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f7:0a:9e:07:b3:0b:1c:93:2f:a6:58:2e:4b:d2:4a:68:2b:
e7:b4:a6:51:4d:37:1e:b9:1b:84:18:50:5c:67:d1:72:be:45:
db:8f:18:18:51:9f:e1:d1:b6:86:69:04:3a:22:eb:8c:50:14:
2d:73:e2:a8:bf:5e:0a:c4:d4:fd:7f:ab:a0:75:c4:2c:dd:bd:
25:34:92:92:97:92:be:18:0f:3c:29:37:f0:97:8b:bc:e1:4b:
ae:79:22:32:cb:b5:94:3f:b0:23:c1:39:30:8c:69:44:29:24:
84:4c:a1:ab:e1:f1:00:f4:7a:13:f5:e9:56:6a:99:87:b6:c5:
97:a8:82:3b:59:cf:b2:f8:79:9d:fb:ed:aa:59:67:06:95:f6:
4c:50:eb:86:58:85:e3:32:fe:11:75:ab:0d:63:4e:d5:5a:99:
5f:7b:e5:69:dd:38:ee:9f:1b:12:79:e4:5e:30:08:82:c4:da:
36:60:f7:f2:f4:a1:8d:0e:59:cf:69:1f:59:40:05:e1:bd:35:
6c:24:9c:52:04:03:aa:ad:b0:63:4f:5f:b3:53:b7:d2:0f:c1:
61:3d:64:da:bb:b7:bc:36:06:0a:64:7b:31:ba:d1:3f:6f:be:
88:d1:d3:1b:61:11:f8:3e:ed:66:c9:cd:97:d6:9a:da:15:4d:
92:d3:12:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:51:34 2026 by rpki-client