Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207449.roa
File: AS207449.roa (raw, json)
Hash identifier: TG0iUXCpkdo1dy7/qsgMxlefpavNwUts6Z6CIKmEcJk=
Subject key identifier: E7:DC:2F:66:91:95:55:B5:46:B0:30:EF:BA:8F:F1:E3:1D:D1:F6:43
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 249C9EA550B6253F9FB33EDE8ACD981A383D53DD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207449.roa
Signing time: Mon 29 Jun 2026 17:55:41 +0000
ROA not before: Mon 29 Jun 2026 17:50:41 +0000
ROA not after: Mon 28 Jun 2027 17:55:41 +0000
asID: 207449
IP address blocks: 82.29.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:9c:9e:a5:50:b6:25:3f:9f:b3:3e:de:8a:cd:98:1a:38:3d:53:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 29 17:50:41 2026 GMT
Not After : Jun 28 17:55:41 2027 GMT
Subject: CN=E7DC2F66919555B546B030EFBA8FF1E31DD1F643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:85:b7:44:67:07:a5:6b:6d:14:f4:05:75:
e2:ad:e6:40:5f:5b:25:31:14:fb:fb:a1:87:7a:f0:
5d:49:9b:94:74:1a:c8:2a:13:38:ad:1c:82:21:e2:
1c:91:26:cf:48:54:42:7d:f4:a3:4b:9d:28:02:47:
98:d9:7a:e2:3f:6a:dc:31:f4:56:f1:60:17:80:ff:
6d:b4:7a:9d:1b:7b:79:84:e9:79:6a:f9:90:71:6b:
09:f3:b1:06:4a:87:65:c6:4d:da:8e:97:24:6f:b4:
99:11:6c:26:99:ea:c7:ff:f4:fb:64:2a:7e:90:bc:
91:b9:fa:d6:0e:42:f7:65:a5:a0:4e:22:cb:67:d7:
53:8f:74:88:79:b2:78:b9:4d:38:5b:31:86:a1:23:
f7:73:c0:f0:08:e7:f5:19:96:72:c5:16:37:ae:10:
40:cb:d2:d1:1c:f1:4f:49:58:fc:ab:fc:c4:d7:48:
a6:61:ca:95:f3:48:f5:e7:16:a2:d9:3c:8e:51:cb:
51:59:e7:7a:cb:30:bc:3b:c1:ec:ff:e5:69:0e:d1:
bc:2b:a6:0e:f0:86:3e:c2:0c:c2:db:b9:0d:2d:a6:
89:ac:09:5d:a0:74:65:38:03:df:bf:f7:f0:bd:6f:
8b:62:1c:47:22:c3:05:a6:4f:d1:98:a7:45:17:08:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DC:2F:66:91:95:55:B5:46:B0:30:EF:BA:8F:F1:E3:1D:D1:F6:43
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207449.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:11:d7:cb:bb:f3:75:92:ec:6e:c5:7c:35:f2:07:9a:b6:da:
0a:54:29:49:d9:18:99:20:e6:6c:15:be:33:cb:37:b0:ae:37:
5d:5d:22:98:de:22:97:c9:76:0f:a3:f4:f6:64:d2:0d:66:4c:
56:f2:5f:b8:11:84:f1:6e:06:f1:b3:eb:32:32:34:71:e3:76:
20:90:78:a1:c3:03:6c:ba:26:6f:8c:8f:d4:b6:72:0b:1b:95:
4b:09:46:2e:d3:40:04:17:44:89:3d:c4:ce:6f:98:4a:41:bf:
0c:72:6d:ca:dc:ce:0a:ce:e4:0b:08:2a:91:ab:d5:ce:e4:de:
e7:4b:f3:e2:e7:ce:8f:33:cc:bc:b7:2c:ee:ad:29:24:47:bc:
95:0f:c7:00:f3:44:c0:79:17:37:63:77:09:cd:e9:05:ca:1a:
ae:22:2d:f3:8e:f5:8f:7d:1b:56:0f:c3:1e:9c:6f:75:9f:39:
82:0e:87:a7:95:75:ce:d2:d1:d0:2a:82:36:ac:50:46:6f:3c:
92:a9:50:15:3e:7a:33:be:cc:a0:e6:b6:47:66:6a:f0:77:21:
cf:3b:ad:be:4e:fe:e3:1f:db:c2:df:72:38:0c:89:a1:cc:96:
18:f4:2a:11:9b:ec:b6:d8:e0:9d:3b:e5:ee:72:bd:ce:0a:d6:
57:ea:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:37 2026 by rpki-client