Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207043.roa
File: AS207043.roa (raw, json)
Hash identifier: xFkSDpy3eaj/+tES/GGrLTEx/9PLP4aWK8sTUgWa+CY=
Subject key identifier: 01:48:E0:EB:C9:8E:27:B0:95:AF:5D:D9:81:58:AA:2E:CB:44:F9:2F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 197CBB36FB03DABC64290C8873A76EC728F0F9FC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207043.roa
Signing time: Sat 08 Aug 2026 14:49:21 +0000
ROA not before: Sat 08 Aug 2026 14:44:21 +0000
ROA not after: Sat 07 Aug 2027 14:49:21 +0000
asID: 207043
IP address blocks: 82.25.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:7c:bb:36:fb:03:da:bc:64:29:0c:88:73:a7:6e:c7:28:f0:f9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 8 14:44:21 2026 GMT
Not After : Aug 7 14:49:21 2027 GMT
Subject: CN=0148E0EBC98E27B095AF5DD98158AA2ECB44F92F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:66:04:87:2d:8e:ab:e0:60:3d:87:60:83:
b1:38:0c:30:a5:23:1f:5e:26:e5:f9:e6:17:cd:09:
09:24:e7:ba:5d:3c:19:3d:83:7c:7e:94:45:9b:e4:
d7:34:5b:c5:f6:0b:62:83:8e:fa:30:3c:b1:35:d2:
f8:0f:2a:e3:3a:cc:70:aa:4f:d1:02:46:5b:29:0a:
95:c1:2a:48:40:15:53:1e:26:54:43:7f:ff:be:fe:
93:6c:b9:7f:45:93:13:37:cc:47:c7:00:a1:54:7d:
fd:61:83:51:e5:29:09:b6:4a:d6:b0:6d:4c:69:62:
62:c2:a3:9f:ee:86:56:6d:03:92:d1:48:f2:85:0e:
b9:ee:f4:4f:30:64:04:29:aa:a4:29:39:4b:c6:53:
9b:3e:bf:94:36:5c:c9:67:6c:32:0e:8e:33:b2:ee:
50:a0:1a:87:1d:ac:41:df:3d:fb:68:ab:58:7a:bd:
22:0b:8d:f5:22:56:cd:16:bc:6d:e1:3a:de:56:14:
e6:2e:4b:0e:06:a1:c5:85:fb:cc:f0:c9:1a:8f:70:
19:de:5f:ba:d3:9f:10:62:2f:92:45:d4:f9:28:af:
61:11:3f:cc:39:5f:d4:15:79:b0:c2:ec:b5:e2:1b:
6e:b3:d6:bb:47:59:19:a6:d1:35:31:a9:f3:11:b4:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:E0:EB:C9:8E:27:B0:95:AF:5D:D9:81:58:AA:2E:CB:44:F9:2F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ac:a1:dc:d0:e3:30:44:61:36:a1:e2:cf:97:26:88:39:4b:
b4:b5:fa:6a:5b:ae:ac:5b:df:f7:35:5e:cf:5b:0e:06:ff:5a:
1c:cb:23:47:9f:96:e4:8c:f6:77:ec:78:f2:b7:91:ab:2f:f2:
47:ff:9f:06:1d:48:47:8d:48:8e:ae:69:af:fa:4e:82:bb:91:
68:e8:a0:84:3a:27:7d:5b:43:09:aa:2e:5f:21:3e:9e:65:f5:
39:3c:a9:73:d2:e4:3c:8c:aa:f7:27:c5:27:15:3c:6a:1d:aa:
42:f4:3e:99:bb:40:fc:6e:24:09:ea:a9:79:b8:45:c4:fd:26:
28:06:8a:ef:4e:06:3b:19:95:52:03:1b:94:44:ea:b2:b7:0a:
02:01:81:b8:01:06:31:18:c1:43:dd:41:ef:6b:41:35:17:2c:
50:e5:51:8c:ae:28:45:af:96:92:3d:70:f6:9e:84:ae:45:19:
5d:39:75:b3:31:2d:38:89:2c:27:a4:05:20:92:1a:c6:0d:49:
50:d9:0c:33:9a:5e:d7:22:20:77:b5:53:bc:64:fd:b8:42:67:
73:fa:8e:5c:f7:e6:0c:2c:a4:3f:b9:33:0e:cf:ac:88:7a:22:
02:d2:1f:1e:e7:62:7d:66:0f:cb:e1:84:1b:18:02:e7:cf:f2:
27:bb:48:b7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGXy7NvsD2rxkKQyIc6duxyjw+fwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MDgxNDQ0MjFaFw0yNzA4MDcxNDQ5MjFaMDMxMTAvBgNV
BAMTKDAxNDhFMEVCQzk4RTI3QjA5NUFGNUREOTgxNThBQTJFQ0I0NEY5MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX82YEhy2Oq+BgPYdgg7E4DDCl
Ix9eJuX55hfNCQkk57pdPBk9g3x+lEWb5Nc0W8X2C2KDjvowPLE10vgPKuM6zHCq
T9ECRlspCpXBKkhAFVMeJlRDf/++/pNsuX9FkxM3zEfHAKFUff1hg1HlKQm2Staw
bUxpYmLCo5/uhlZtA5LRSPKFDrnu9E8wZAQpqqQpOUvGU5s+v5Q2XMlnbDIOjjOy
7lCgGocdrEHfPftoq1h6vSILjfUiVs0WvG3hOt5WFOYuSw4GocWF+8zwyRqPcBne
X7rTnxBiL5JF1Pkor2ERP8w5X9QVebDC7LXiG26z1rtHWRmm0TUxqfMRtEKlAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUAUjg68mOJ7CVr13ZgViqLstE+S8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA3MDQzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhk/
MA0GCSqGSIb3DQEBCwUAA4IBAQCirKHc0OMwRGE2oeLPlyaIOUu0tfpqW66sW9/3
NV7PWw4G/1ocyyNHn5bkjPZ37Hjyt5GrL/JH/58GHUhHjUiOrmmv+k6Cu5Fo6KCE
Oid9W0MJqi5fIT6eZfU5PKlz0uQ8jKr3J8UnFTxqHapC9D6Zu0D8biQJ6ql5uEXE
/SYoBorvTgY7GZVSAxuUROqytwoCAYG4AQYxGMFD3UHva0E1FyxQ5VGMrihFr5aS
PXD2noSuRRldOXWzMS04iSwnpAUgkhrGDUlQ2Qwzml7XIiB3tVO8ZP24Qmdz+o5c
9+YMLKQ/uTMOz6yIeiIC0h8e52J9Zg/L4YQbGALnz/Inu0i3
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:18:16 2026 by rpki-client