Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207550.roa
File: AS207550.roa (raw, json)
Hash identifier: mYWHPFxP+5Wf+QyySStfGGNDXvK2pJiZIIylwcDP/SE=
Subject key identifier: 16:49:51:4A:68:B3:14:75:A8:5D:31:A2:80:B3:AA:71:77:C1:26:55
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 46DCC37E1DABA7A6F556969303621D3E64279821
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207550.roa
Signing time: Fri 10 Apr 2026 08:36:51 +0000
ROA not before: Fri 10 Apr 2026 08:31:51 +0000
ROA not after: Fri 09 Apr 2027 08:36:51 +0000
asID: 207550
IP address blocks: 82.47.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 21:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:dc:c3:7e:1d:ab:a7:a6:f5:56:96:93:03:62:1d:3e:64:27:98:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 10 08:31:51 2026 GMT
Not After : Apr 9 08:36:51 2027 GMT
Subject: CN=1649514A68B31475A85D31A280B3AA7177C12655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:8b:39:67:bc:1c:4e:77:cd:59:f8:10:a2:
65:26:5f:f0:8f:54:c4:2f:14:52:86:c2:ea:68:f4:
c3:3a:5f:10:c4:49:14:43:6a:48:b1:54:17:83:18:
89:72:e2:db:f1:af:99:1b:d5:e9:27:fb:ba:bc:e5:
05:28:e3:d8:6d:27:06:a6:94:f8:86:21:33:eb:1a:
cc:a7:61:b5:6e:b8:e2:6c:ab:ad:ca:72:57:7b:ed:
87:e0:78:c6:e7:ea:07:2b:47:2c:f4:6b:d0:d7:98:
a1:a2:28:0b:28:10:5a:21:87:d2:93:53:83:95:7c:
09:86:76:b0:3c:a5:fe:6a:19:ed:c0:5c:d6:a4:41:
40:e8:c8:d4:6e:a8:0b:58:66:0b:9b:31:78:30:c8:
19:3b:da:a2:42:d7:24:6d:5e:46:1f:4f:14:c2:7f:
fe:49:2e:05:4e:ab:36:18:00:d2:70:ed:ea:08:d1:
c9:88:87:8f:52:d4:4f:74:08:fa:52:d3:59:44:94:
b9:0e:aa:97:18:7b:d9:b6:00:10:af:66:20:9b:2e:
60:d0:1a:b2:b1:33:30:39:f7:3b:40:7b:66:e3:82:
01:d0:f3:b6:c5:18:02:39:20:31:37:0c:0b:1d:4f:
ec:ae:cd:bc:8b:a5:c4:ac:b0:4e:2c:02:ef:cc:2a:
98:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:49:51:4A:68:B3:14:75:A8:5D:31:A2:80:B3:AA:71:77:C1:26:55
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.13.0/24
Signature Algorithm: sha256WithRSAEncryption
05:91:fc:a9:e4:63:48:57:aa:ff:01:15:00:07:f2:b1:e7:4d:
7e:06:b8:31:76:79:54:03:9f:f8:03:b4:45:49:fa:5d:74:b0:
0d:34:8c:c5:a2:0a:65:86:40:9a:95:dd:c0:9e:e6:a3:2a:2d:
74:e2:2b:80:b7:66:92:71:a7:f4:6f:6c:0e:2f:f7:e6:b3:66:
85:23:e8:99:65:aa:5b:21:d3:cc:35:83:22:c3:b9:41:29:ef:
ae:60:4b:1e:2c:e7:0e:14:a5:af:de:50:0f:85:db:aa:af:5e:
41:23:93:d1:d2:e9:1a:e6:d8:0f:d8:d5:f8:36:ad:63:0f:68:
fe:da:c0:40:7b:36:6a:64:21:08:0e:b8:96:cd:ff:9f:89:90:
e8:71:dc:5a:bc:ab:33:9c:0d:74:34:e5:ab:49:6a:6f:e5:02:
7d:8c:9c:eb:fe:81:2d:91:20:f8:ab:a4:0f:3b:08:b3:85:ec:
7a:d4:44:29:8a:af:b9:cc:84:a9:7b:d5:41:df:8c:f0:fc:ea:
c1:cf:47:39:7a:30:c1:9e:27:22:d1:44:3c:63:51:89:9d:42:
29:bf:dd:67:15:2b:e2:69:f0:ac:1d:dd:e7:c4:1e:31:60:9b:
8b:ed:c5:0a:3a:92:03:a8:ba:29:bc:b7:c2:8e:e2:7c:7f:f4:
58:6f:a0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 06:52:00 2026 by rpki-client