Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207158.roa
File: AS207158.roa (raw, json)
Hash identifier: 1Si6F090YRzHXMMNrxTY9Nwy2I+bs0WN/3bl34W7Cbw=
Subject key identifier: 7C:24:52:30:0C:51:85:F3:55:AF:27:BF:75:99:8A:C4:AB:94:B7:C6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0E881EC6FEB26C2DB858844E99F03D88CA5B5893
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207158.roa
Signing time: Sat 08 Aug 2026 00:00:47 +0000
ROA not before: Fri 07 Aug 2026 23:55:47 +0000
ROA not after: Sat 07 Aug 2027 00:00:47 +0000
asID: 207158
IP address blocks: 178.83.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:88:1e:c6:fe:b2:6c:2d:b8:58:84:4e:99:f0:3d:88:ca:5b:58:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 7 23:55:47 2026 GMT
Not After : Aug 7 00:00:47 2027 GMT
Subject: CN=7C2452300C5185F355AF27BF75998AC4AB94B7C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:c8:d4:44:1a:12:a8:26:e4:93:9f:08:cd:
36:85:f0:c2:6c:c8:b7:d0:e9:5c:60:45:ca:00:4c:
f4:ca:2c:42:66:fb:44:1b:66:76:97:6f:8a:56:00:
7a:ed:1e:d0:34:91:26:00:16:f8:6a:a7:94:7b:3c:
df:e8:ff:aa:b6:e2:8c:da:b2:46:33:44:2d:fc:51:
eb:75:48:ec:f7:50:76:d6:13:7d:41:28:e6:81:1d:
53:4d:99:c7:1c:49:55:80:5c:5c:27:5a:10:51:27:
84:81:9d:68:21:fc:69:71:4d:2f:6e:a4:45:72:36:
23:9c:e0:ad:07:2a:3d:04:48:46:a4:a3:54:2c:34:
04:42:c2:0f:05:4f:a6:07:fc:29:7b:09:1d:4a:69:
8d:09:16:30:dd:43:42:19:98:f1:0b:41:5a:c6:95:
9f:ee:b7:95:b2:e4:ee:cb:98:d2:fe:ff:df:0d:a1:
ea:e3:0f:b1:66:40:40:bf:99:77:37:10:2f:ec:e9:
59:a4:ac:b8:e1:12:67:77:7d:b1:67:5e:8f:75:e9:
cb:76:96:98:86:64:d3:42:56:8a:51:4f:be:93:f8:
52:06:20:bb:a7:c7:f1:9b:57:68:fc:12:a9:a3:6d:
f4:86:6f:2f:85:86:24:73:68:cf:93:f9:bb:52:bd:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:24:52:30:0C:51:85:F3:55:AF:27:BF:75:99:8A:C4:AB:94:B7:C6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.200.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e6:05:88:a8:e4:97:7b:0d:7d:6c:cf:97:22:3f:08:ad:3b:
af:aa:cc:67:7e:27:cc:92:2b:d2:f8:80:a3:6c:0f:44:5a:a3:
ed:e6:f7:5a:0c:5c:8b:f2:b8:bb:f2:bf:29:6c:6a:47:68:53:
50:c0:64:e8:93:fc:ad:4d:b4:75:35:f6:74:b5:d2:1e:90:0a:
24:b5:c8:e9:6c:a1:46:a7:17:a9:6c:f4:54:bd:98:73:4f:56:
6e:c8:67:3f:fa:85:da:ea:d8:62:9b:ee:07:9c:c0:2a:a1:88:
f5:c8:8d:46:16:6f:dd:18:8a:51:78:71:54:37:97:36:c7:6b:
b1:a1:57:4f:c0:a0:f2:f1:46:ac:bb:cc:16:d6:01:a3:c7:8d:
b4:b1:b0:4b:d7:c4:2d:ee:e4:0f:f2:68:c9:c0:1c:6c:4e:24:
16:24:a5:79:5b:0a:fd:68:67:7b:1d:ec:44:40:0f:5d:b0:52:
7c:b3:aa:24:a9:a4:d2:29:89:78:92:5d:85:6c:27:f0:bd:5f:
d9:0d:4c:47:38:17:52:2e:5b:16:05:65:63:dc:73:28:cb:5e:
f4:cf:7a:e4:d7:b8:78:18:90:d2:fd:db:02:d6:ff:72:83:7c:
9c:21:5c:4b:11:cf:a0:25:1a:07:33:35:97:06:25:d0:a9:85:
4c:1b:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:10:26 2026 by rpki-client