Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207043.roa
File: AS207043.roa (raw, json)
Hash identifier: OtES9KeGwxOdl/ohGBHuicJMGzQ8eYEeDxqyfAUDUGM=
Subject key identifier: B5:51:7D:D8:49:AF:FC:4C:A7:A3:31:14:7D:76:CF:C6:7D:B8:30:58
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 05E5D1F7960331EBBF5266FCB77E9B3034D6CA3C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207043.roa
Signing time: Sat 06 Sep 2025 14:38:16 +0000
ROA not before: Sat 06 Sep 2025 14:33:16 +0000
ROA not after: Sat 05 Sep 2026 14:38:16 +0000
asID: 207043
IP address blocks: 82.25.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e5:d1:f7:96:03:31:eb:bf:52:66:fc:b7:7e:9b:30:34:d6:ca:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 6 14:33:16 2025 GMT
Not After : Sep 5 14:38:16 2026 GMT
Subject: CN=B5517DD849AFFC4CA7A331147D76CFC67DB83058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:17:5a:f5:3e:7b:ce:2e:08:72:0b:1e:bd:
ae:24:d8:5b:ec:df:06:57:a6:8b:05:2f:0d:f2:8d:
ad:fa:fd:2c:1e:9a:ec:b0:cc:72:b7:73:6f:a0:44:
f8:7c:da:3c:69:e9:65:d1:c2:6d:d8:b8:42:fe:b7:
de:10:04:04:db:1a:62:29:81:64:3d:f0:86:94:c1:
42:0c:5a:66:0c:ed:6c:cc:2b:cf:ed:fb:22:67:99:
57:7f:8a:27:10:5e:f6:26:3b:83:ec:64:5e:52:ae:
d6:34:74:b9:62:41:ce:1d:da:4e:8b:be:21:4d:52:
63:07:9c:5b:14:0e:b0:d2:c9:67:c2:25:89:3b:74:
10:4b:81:2d:0b:ab:54:0f:84:bf:3e:cb:3c:d8:99:
51:ab:9e:bf:62:cf:91:5a:aa:8e:cf:c6:d3:aa:0f:
68:1c:fd:3d:1d:6e:e2:1d:da:78:f9:5c:cd:50:44:
15:fb:bf:1f:f8:98:61:ce:d5:da:b3:ec:05:89:8f:
e3:6e:ef:58:fa:9f:dc:1f:d3:21:e8:c0:1d:4e:14:
7b:03:f0:89:27:22:b8:d1:e4:2e:f7:fe:91:98:94:
ad:cb:05:bf:77:ed:81:41:af:b0:2b:c7:4c:8b:20:
60:97:c9:39:56:59:71:3c:b5:85:ad:4b:39:fe:b8:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:51:7D:D8:49:AF:FC:4C:A7:A3:31:14:7D:76:CF:C6:7D:B8:30:58
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.63.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a1:a4:49:dc:8f:07:e3:91:ff:5b:9d:4d:a2:c5:b3:49:b4:
50:8e:bb:04:a3:db:e7:a1:1f:9c:db:ba:1b:f8:28:ac:ac:54:
ec:88:d7:f3:c3:4b:36:bb:f3:d1:7d:0a:06:e3:88:1d:3e:71:
7a:0a:28:dc:76:4e:56:b4:83:5d:0b:4b:4b:9e:84:ff:73:42:
5c:c5:5f:13:cc:24:ef:da:a1:8b:0f:e4:b8:d3:d7:4d:6a:5e:
b1:3b:98:71:10:59:3c:10:61:07:d6:9c:63:17:ae:48:ea:68:
fe:4c:28:fe:06:1c:e0:1e:83:95:d0:ac:90:eb:4a:dd:00:6c:
fc:24:27:80:0a:97:5c:e8:aa:d6:f7:98:6c:f6:90:b6:73:03:
1a:f7:dc:10:f5:50:4d:e1:ea:5e:11:eb:25:1d:72:e8:71:8b:
6d:91:a9:53:eb:16:52:0c:c2:5c:1a:06:3f:16:d8:66:cb:aa:
c5:7c:e5:86:a1:53:2e:0f:61:19:68:b8:64:e3:d8:fe:d9:06:
93:a5:0a:02:6f:ef:47:65:e5:e0:61:c5:2c:72:d3:68:df:ee:
b7:18:ff:90:b4:56:1d:53:5d:13:14:f2:84:30:2a:32:77:81:
e0:d7:c6:68:02:f5:cb:93:65:e4:e9:ca:73:4a:25:b3:00:91:
de:53:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:29:27 2025 by rpki-client