Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207343.roa
File: AS207343.roa (raw, json)
Hash identifier: mJQdVEzGhqiok01T8YweDbRIOsz5T9FDbo7dxPDOS4c=
Subject key identifier: B9:E9:88:45:33:7A:99:6A:8D:EB:37:31:C9:14:78:F7:F4:7D:6D:20
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 47AF59AC7C86C9010C7A601F836A15F744C26647
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207343.roa
Signing time: Tue 26 May 2026 09:07:06 +0000
ROA not before: Tue 26 May 2026 09:02:06 +0000
ROA not after: Tue 25 May 2027 09:07:06 +0000
asID: 207343
IP address blocks: 82.39.130.0/24 maxlen: 24
178.83.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:af:59:ac:7c:86:c9:01:0c:7a:60:1f:83:6a:15:f7:44:c2:66:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 26 09:02:06 2026 GMT
Not After : May 25 09:07:06 2027 GMT
Subject: CN=B9E98845337A996A8DEB3731C91478F7F47D6D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:04:b0:85:ef:39:89:40:ba:22:f4:bc:e2:
bc:35:f1:80:fb:41:5a:04:43:21:9f:de:df:1f:bf:
b0:99:ed:78:8d:d4:f0:ab:4b:1d:3d:a1:98:d6:ae:
7b:bf:bc:e0:21:72:d5:28:fb:2c:67:c2:49:2b:af:
2c:d4:05:e5:9d:89:02:6c:4d:42:32:da:34:b7:45:
91:bc:79:d5:45:3a:4b:3c:81:ff:da:ac:cd:d5:ce:
cb:f3:84:b0:d2:a9:95:b2:78:b3:6c:2c:cc:bd:52:
21:cf:c9:0f:b9:43:62:10:c7:a0:b3:ef:64:6b:6d:
c7:4e:70:63:f9:0a:7f:43:b4:09:52:74:8e:8d:a7:
af:2e:9b:c2:9d:32:33:7d:1b:09:c4:45:a1:c0:ee:
0c:01:15:9c:69:d4:7a:35:96:60:9e:3b:4c:88:d0:
dc:4e:00:e0:3a:b2:d5:14:60:cb:03:d3:8d:c6:c9:
03:7a:76:27:2d:c9:f1:f8:f7:76:e8:cc:b7:c3:71:
58:58:bb:6d:d7:9b:0c:17:bb:2b:76:68:5e:dd:66:
f5:e2:dd:96:35:71:14:2d:a4:6b:d2:22:43:ca:25:
cd:b7:d0:d2:ee:3f:08:54:3e:a2:d2:86:46:cc:48:
97:54:4f:92:e1:c7:f9:6f:70:32:11:64:10:74:50:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E9:88:45:33:7A:99:6A:8D:EB:37:31:C9:14:78:F7:F4:7D:6D:20
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207343.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.130.0/24
178.83.171.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:57:5c:e7:b2:66:36:2c:ec:ce:cd:b9:05:d5:0a:18:01:7c:
eb:63:4e:57:07:42:42:c4:04:d3:ea:36:6b:90:21:95:83:07:
9b:c2:6c:8a:ee:e2:c1:5c:ef:cc:e7:f5:07:3e:6d:0f:0d:b5:
2b:8f:ce:78:da:95:ab:0f:d4:d2:57:52:be:1c:d0:6b:2c:c6:
d1:ee:f1:58:cd:32:d6:6b:cb:da:2c:ee:6f:0c:5b:32:49:8e:
ed:a8:57:62:3e:55:a1:12:3a:27:89:7b:98:24:ed:51:8f:eb:
ff:b5:c9:1e:6e:ee:be:d3:70:40:8a:9a:2e:fe:61:20:25:c1:
37:7e:07:88:c3:8d:e0:4d:42:10:db:6f:7a:44:7a:6f:0d:c2:
04:9a:ff:27:c8:73:5e:0c:97:0d:c9:5e:1c:2d:71:26:b5:10:
cb:92:98:f1:c1:6e:07:02:7e:2b:a4:36:02:0a:1b:07:57:ac:
92:cd:6e:f5:2b:43:51:c8:41:83:2f:f2:7f:83:37:69:38:c9:
84:08:4c:3b:9d:3c:25:dd:04:e2:7b:f4:5c:f1:58:b1:fb:16:
cc:8e:4c:fb:10:65:a5:a0:57:29:75:8c:b4:c2:88:e5:c9:82:
31:d2:80:95:cd:24:bb:49:32:61:2b:5a:52:b9:6d:55:22:5c:
37:6f:a5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:54 2026 by rpki-client