Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207344.roa
File: AS207344.roa (raw, json)
Hash identifier: ixGUQSTQPkufSYJQrAstfPV5722AHduGGKNdw7DZud8=
Subject key identifier: A3:AB:30:41:20:9E:7D:59:83:8A:72:18:D3:47:97:BD:D1:EA:D0:FD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 350BCE331ACD53DFC69243C66150CF50ECB257E2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207344.roa
Signing time: Tue 28 Jul 2026 23:49:16 +0000
ROA not before: Tue 28 Jul 2026 23:44:16 +0000
ROA not after: Tue 27 Jul 2027 23:49:16 +0000
asID: 207344
IP address blocks: 2a13:9500:8f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0b:ce:33:1a:cd:53:df:c6:92:43:c6:61:50:cf:50:ec:b2:57:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 28 23:44:16 2026 GMT
Not After : Jul 27 23:49:16 2027 GMT
Subject: CN=A3AB3041209E7D59838A7218D34797BDD1EAD0FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:66:89:e7:06:c1:36:70:76:3c:f3:c4:35:
a2:3d:10:58:ae:89:fb:f8:e5:8d:29:06:28:4f:ff:
01:e7:c7:93:69:d9:a1:33:be:d1:30:0e:f6:e0:24:
ef:6c:0a:ff:72:78:2b:23:27:12:be:05:5b:43:ef:
b6:62:23:b0:02:1d:fa:2b:4b:8d:4b:7e:61:8a:29:
d8:70:97:3a:cf:0c:c8:7e:aa:20:a5:c9:11:1f:30:
1e:08:f4:f1:f8:16:0b:46:33:b6:d2:20:11:d6:3f:
4b:c8:09:59:dd:4e:ab:04:53:f4:4e:36:ed:8a:21:
d3:c8:42:a5:31:44:40:6a:23:0f:bd:4a:fe:4c:27:
dd:6e:70:6b:5b:52:6f:d4:20:70:04:64:07:3e:70:
9a:e4:f2:ff:9d:e2:00:7c:0e:54:68:92:3d:ab:5f:
8e:8d:b3:4a:99:6f:85:78:78:5d:5c:10:72:5f:37:
dc:3e:34:c5:3c:5c:b7:fe:9c:7a:86:41:1f:80:1a:
91:8c:9e:1d:a1:63:5b:45:05:3b:f5:4e:b1:ee:2f:
4f:dc:6f:c2:d3:5b:20:4d:39:7a:7f:aa:98:6f:4d:
d4:2c:9a:36:81:f7:ae:05:c3:8f:20:01:d7:c7:01:
8e:91:89:64:c7:e8:b8:ea:66:79:2b:fa:66:1d:59:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AB:30:41:20:9E:7D:59:83:8A:72:18:D3:47:97:BD:D1:EA:D0:FD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207344.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:8f::/48
Signature Algorithm: sha256WithRSAEncryption
99:e3:9c:2b:c3:a5:07:4d:f4:be:52:b9:69:20:84:52:31:cb:
3d:ed:67:44:00:4c:29:92:ed:f3:87:a5:d9:73:44:83:80:5c:
01:f3:bf:fd:94:22:bd:c6:a1:af:a0:79:d7:13:e4:57:cf:39:
06:8b:23:c3:6e:07:0d:67:59:1f:d6:00:a4:de:40:9f:9d:13:
94:98:c6:c8:4c:c8:55:ae:aa:d0:0b:d4:a3:82:49:f2:08:30:
c4:1c:b0:82:45:75:9a:d1:d2:1f:5f:1d:91:47:62:7f:33:07:
1b:23:12:b0:6f:a1:a6:6d:32:1d:2a:d7:48:21:3c:98:4b:19:
38:dd:26:31:03:71:a3:86:db:2b:82:bd:23:7d:0c:a6:6a:89:
8a:08:e8:c6:97:e0:44:66:43:d7:7a:c5:db:93:d4:2e:00:55:
ae:83:cc:0e:34:79:89:c5:32:73:d5:04:d5:35:ac:4a:74:1c:
ed:2f:6a:02:d2:1f:28:e7:02:f4:39:03:02:54:85:47:0e:a3:
16:05:99:38:ac:9f:20:e6:25:90:6b:b9:b8:a7:c1:55:69:7d:
f5:a0:00:5c:cc:96:a3:9d:72:f6:64:15:a8:92:eb:e4:bd:1f:
5d:a1:a5:b6:25:9a:f8:d5:af:09:7b:7a:d6:1a:33:0e:1f:4f:
d3:b4:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:17:34 2026 by rpki-client