Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207155.roa
File: AS207155.roa (raw, json)
Hash identifier: AW5KHEoiZijUWM0JStXafZxnk1AAEI/w0FIpoMxz6ew=
Subject key identifier: A9:78:FB:C4:EC:9A:99:3F:FC:AD:B5:A8:90:1F:66:9C:DD:30:ED:8F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3D59EC6D1ED37A19B1C799AACF009C484306A892
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207155.roa
Signing time: Fri 22 May 2026 16:47:15 +0000
ROA not before: Fri 22 May 2026 16:42:15 +0000
ROA not after: Fri 21 May 2027 16:47:15 +0000
asID: 207155
IP address blocks: 2a13:9500:98::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:59:ec:6d:1e:d3:7a:19:b1:c7:99:aa:cf:00:9c:48:43:06:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 22 16:42:15 2026 GMT
Not After : May 21 16:47:15 2027 GMT
Subject: CN=A978FBC4EC9A993FFCADB5A8901F669CDD30ED8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cd:ab:a9:21:2b:f4:e6:64:ff:40:18:58:82:
24:88:fe:99:d2:a2:a3:f2:2a:17:96:51:48:7d:64:
9e:7a:d6:a5:ea:b6:56:44:2f:e5:b5:d1:d1:13:ae:
7e:0c:12:b3:cb:22:fa:04:5c:33:cf:09:71:31:d0:
22:03:3c:53:81:68:2d:af:42:4d:05:64:75:50:b3:
69:44:27:f6:44:6b:f3:2e:9d:6f:10:ea:4a:73:a4:
2d:00:64:04:29:ff:2b:d5:af:4d:80:3c:02:8c:99:
c6:69:65:f3:b5:3f:99:f8:8b:91:6e:ee:bf:a4:a2:
5e:b5:f3:de:1d:20:ab:a5:45:0c:dd:13:7b:ac:b4:
6d:44:91:a8:aa:d0:d6:b3:bd:85:63:9e:1b:da:ad:
bf:5b:08:5c:91:07:bc:86:bc:8c:1d:70:e0:41:03:
31:84:e7:fc:6e:89:2c:bd:d9:25:1c:cf:4d:c5:a3:
5a:af:a7:0c:1d:79:ac:c2:31:7a:63:57:56:d3:18:
45:bf:36:99:2c:d6:6c:7c:43:50:a7:75:0a:d1:13:
62:6c:e9:fb:ad:f7:dd:a2:51:ed:47:19:dd:df:b4:
a7:3f:8e:03:24:86:58:a6:16:4f:85:3b:4c:fa:7b:
1c:2c:39:7d:d5:3f:64:1b:0d:c8:09:ed:11:0e:b1:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:FB:C4:EC:9A:99:3F:FC:AD:B5:A8:90:1F:66:9C:DD:30:ED:8F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207155.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:98::/48
Signature Algorithm: sha256WithRSAEncryption
66:12:3b:b6:90:2c:c5:a4:15:08:53:ff:9f:15:d7:4d:18:f2:
16:d5:86:c8:f1:4c:ef:be:42:87:61:b2:66:ca:de:f1:cf:14:
56:61:d3:fa:f1:30:25:64:69:07:17:27:8e:08:c4:7f:96:3a:
a7:38:58:68:97:46:58:b9:e5:e1:14:4f:9a:d5:0a:50:a9:58:
9a:9c:eb:6d:bf:cd:c2:05:63:1d:2a:c1:98:03:83:7f:90:4d:
f8:6f:cd:a2:20:e0:06:23:d6:a0:bb:d4:21:2d:ac:39:00:f4:
d8:33:ff:c9:4d:4f:fc:85:d4:d7:59:bc:e9:15:9f:98:7e:d0:
02:96:79:14:1b:a9:f8:98:f3:2d:74:f0:c6:0a:59:d4:5e:99:
74:d4:f9:f9:03:98:e9:ab:aa:40:c3:15:79:e7:05:7d:8d:34:
a3:86:3c:ee:55:9d:37:50:2a:a9:7d:de:ac:0b:37:c1:c7:52:
be:50:b2:f6:3a:3e:94:a0:1f:7e:77:0f:32:1e:fa:63:00:4c:
f3:26:58:77:37:0a:a1:b8:6d:41:74:12:a7:0f:6c:69:81:5a:
85:7d:9c:ea:6e:4b:3a:30:98:a3:b2:4b:5a:30:67:a0:3a:2a:
63:57:4f:ed:f4:e0:a2:79:6a:f8:b4:b2:10:4c:9b:8a:8a:46:
36:64:d9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:57 2026 by rpki-client