Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207911.roa
File: AS207911.roa (raw, json)
Hash identifier: uswle6ze1i+l4ljNwYuHxMkuYGnWvDi+BmYUwwDe66k=
Subject key identifier: 25:87:68:53:0C:F9:23:D4:D7:18:B0:C1:FD:17:0D:E3:4B:CE:17:D7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3EAFB716F8BEF856737D6E6D2052939E39C63A18
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207911.roa
Signing time: Thu 09 Jul 2026 09:49:07 +0000
ROA not before: Thu 09 Jul 2026 09:44:07 +0000
ROA not after: Thu 08 Jul 2027 09:49:07 +0000
asID: 207911
IP address blocks: 82.25.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:af:b7:16:f8:be:f8:56:73:7d:6e:6d:20:52:93:9e:39:c6:3a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 9 09:44:07 2026 GMT
Not After : Jul 8 09:49:07 2027 GMT
Subject: CN=258768530CF923D4D718B0C1FD170DE34BCE17D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:eb:e3:27:82:9b:b7:e7:bd:60:ad:06:74:
be:13:99:d6:31:44:ea:eb:41:10:d5:d3:6f:11:6c:
61:e7:b3:0c:c0:81:dc:64:5e:83:fb:8f:ba:0e:67:
ee:12:1b:35:9f:6e:33:e2:ab:7d:a6:33:36:11:c1:
6d:53:0c:9e:ad:f2:3a:47:9c:07:11:d3:bd:67:7d:
d5:d1:0a:f8:ab:62:69:4f:5f:a7:18:94:38:ed:5d:
c9:9e:a3:0e:ee:ff:b0:cb:9d:bb:b9:de:e3:fb:4e:
f8:a3:5e:44:e0:fd:29:48:16:8a:4a:4e:7b:19:68:
2e:a4:42:9b:64:a5:86:27:7a:65:fd:4c:14:d2:2e:
e9:96:04:af:dc:02:72:b3:57:c1:c9:39:fb:8c:62:
4d:a3:33:8f:2c:a1:ea:c8:cc:54:f1:f7:2a:2a:f1:
4c:bc:c3:f0:40:a9:7f:20:2f:e1:5b:93:99:fc:d6:
de:7e:c7:56:04:5b:80:44:34:e3:f6:e4:57:26:8e:
53:6e:8a:87:1d:8a:02:a7:21:f4:15:0e:e3:d7:e7:
39:1b:f5:c9:46:de:52:cf:6c:8a:bc:dd:f5:b4:dc:
3b:4d:98:92:96:74:c7:42:a2:c1:83:10:c3:e4:e9:
32:3c:ae:ce:3c:7f:5e:fa:3f:1a:a5:32:91:cc:cf:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:87:68:53:0C:F9:23:D4:D7:18:B0:C1:FD:17:0D:E3:4B:CE:17:D7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.135.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4f:00:c7:f9:11:46:40:ea:f0:80:df:57:62:ab:0e:27:a2:
63:29:7c:01:95:d3:f2:ac:dc:ca:67:0e:5a:5e:f7:23:1e:64:
b6:1e:53:f6:71:a3:01:d3:42:1c:e5:7e:f4:d2:69:62:90:b5:
1d:39:8c:18:d4:94:2d:38:91:fa:95:67:c0:d5:60:48:55:90:
b3:e6:14:ee:2c:19:9c:49:5a:88:3e:36:8e:96:ba:da:fc:08:
37:9f:1f:33:ad:fe:87:cf:bd:11:17:5b:ef:e6:8f:10:42:30:
72:57:57:3e:3a:ce:f3:fd:c0:81:ed:10:e2:6c:d8:b7:61:04:
bf:d8:c8:e4:6b:f3:be:69:93:c7:9c:50:b5:7f:68:f2:25:c5:
1c:18:30:d5:11:d2:eb:2b:e8:78:fd:2e:06:81:b5:f3:7d:b8:
38:d8:aa:f1:bc:6f:35:77:2b:ce:f9:51:54:37:0f:e8:5e:78:
b9:cf:de:2f:be:df:d0:82:73:81:70:9f:75:40:dc:12:f9:85:
00:09:d7:06:5c:fb:1c:9c:65:aa:a9:ee:3f:90:55:e2:84:11:
ab:29:6c:67:37:8e:dc:85:fc:28:0e:3d:f8:28:45:ca:7e:43:
f8:1b:39:02:be:f1:95:b9:ef:8e:50:38:e2:f5:00:03:6c:c1:
25:74:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:46 2026 by rpki-client