Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207083.roa
File: AS207083.roa (raw, json)
Hash identifier: zFCS9K46YXGpPII7Vhg/xWoTzlbMAl55hnAACxm2nq0=
Subject key identifier: BD:64:E6:F3:1D:43:8B:AD:CF:21:3A:5C:0C:2C:72:ED:92:B2:CB:72
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 60EC77E47F11950AA9422E8A07748277FC85D235
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207083.roa
Signing time: Thu 28 May 2026 09:51:12 +0000
ROA not before: Thu 28 May 2026 09:46:12 +0000
ROA not after: Thu 27 May 2027 09:51:12 +0000
asID: 207083
IP address blocks: 82.47.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ec:77:e4:7f:11:95:0a:a9:42:2e:8a:07:74:82:77:fc:85:d2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 28 09:46:12 2026 GMT
Not After : May 27 09:51:12 2027 GMT
Subject: CN=BD64E6F31D438BADCF213A5C0C2C72ED92B2CB72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:ea:22:42:26:3c:de:21:26:88:bb:74:8a:
3f:d5:51:97:50:52:4e:60:9e:7e:21:5d:5b:ce:ed:
f0:e2:00:76:39:a7:06:69:15:3d:80:9b:51:d9:71:
0e:40:71:9d:9f:e0:38:5f:ea:5b:39:3f:24:fd:27:
c8:26:fa:01:7f:6f:82:0e:da:a5:f6:4f:8f:59:01:
8a:a3:33:6f:0c:22:ea:5c:49:f0:df:9f:ce:bd:d0:
da:19:c2:df:e8:ae:2a:20:8c:7d:a1:88:e4:4b:fa:
af:c8:86:00:f4:11:f8:0e:da:24:fc:6d:a6:78:4f:
17:4c:e2:7a:c3:0e:95:87:3c:e2:b1:10:47:3a:3b:
08:26:aa:5e:fd:eb:cc:e8:67:10:7a:4e:be:3d:3c:
7f:88:42:70:f4:c4:d8:cf:6c:3c:e3:53:b1:2f:2d:
ea:de:ef:0f:5e:70:bb:ef:cf:5c:84:fe:85:13:a4:
3f:0a:95:77:33:b8:3f:85:71:6d:3d:55:92:5e:38:
57:c3:79:84:17:5a:16:fd:c7:8f:a0:c3:73:e4:f6:
33:b6:4c:56:bd:43:b2:66:cf:a3:d4:02:e3:8d:da:
27:2f:77:5a:7b:81:25:31:d4:99:cc:23:32:e7:48:
11:2d:93:dc:45:89:e3:80:bd:92:50:c1:bd:f0:c8:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:64:E6:F3:1D:43:8B:AD:CF:21:3A:5C:0C:2C:72:ED:92:B2:CB:72
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f1:7a:34:aa:f6:88:a0:2c:43:7d:c7:46:51:ed:16:fa:2a:
c6:a5:54:a1:5b:c4:d9:d5:e5:40:db:aa:35:fc:9f:d4:6a:6c:
34:9d:37:23:0f:f6:85:26:99:6d:57:fa:0b:fa:5f:25:83:35:
d5:f7:8b:a7:d7:c3:c2:ae:4e:11:f2:09:3f:4e:b1:4d:32:29:
0f:58:8c:15:10:ba:55:c7:6e:62:af:d0:5d:75:7c:0f:2e:9a:
dd:b8:56:b3:3b:7c:16:b8:ca:4f:ea:7a:66:e0:31:0c:c7:81:
f6:e8:04:d4:4d:44:6a:81:2c:e1:12:26:ba:89:3f:8b:de:f5:
cb:f0:8a:2d:93:b4:d4:9d:26:70:d1:26:f1:e7:3d:05:7f:2a:
b4:d1:1e:11:4b:7d:c4:c9:92:63:35:15:04:91:c4:8a:8b:00:
58:9f:9d:2e:0e:af:51:b5:a6:1e:54:48:41:09:72:fd:e9:2d:
6e:78:0e:4b:e0:49:0f:82:ea:3b:96:78:cf:e5:7c:ed:bb:e4:
8c:b5:e2:f6:d1:0b:09:0c:0c:9c:e8:fa:05:ce:24:57:41:a5:
97:ba:bd:70:25:ad:c9:ee:84:85:ca:28:ae:e7:7f:cc:6e:e5:
a4:fb:b6:31:1a:8a:94:c6:eb:35:57:88:9b:e0:aa:2e:e8:62:
64:9c:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:32 2026 by rpki-client