Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207847.roa
File: AS207847.roa (raw, json)
Hash identifier: Z1YkiZCVcGCPWDh+7Zw0hSA/LECAlKN0UrAMHoPWM1k=
Subject key identifier: AB:F0:C8:41:B3:2D:23:AF:99:9A:FB:51:B5:4C:CD:8C:39:4E:94:96
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 74E693FD2271DFF3E22ECC84B1F25770EEF63867
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207847.roa
Signing time: Tue 07 Jul 2026 07:48:57 +0000
ROA not before: Tue 07 Jul 2026 07:43:57 +0000
ROA not after: Tue 06 Jul 2027 07:48:57 +0000
asID: 207847
IP address blocks: 192.166.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e6:93:fd:22:71:df:f3:e2:2e:cc:84:b1:f2:57:70:ee:f6:38:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 7 07:43:57 2026 GMT
Not After : Jul 6 07:48:57 2027 GMT
Subject: CN=ABF0C841B32D23AF999AFB51B54CCD8C394E9496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:0d:3a:71:cf:61:aa:50:9b:01:03:de:6a:
27:57:e9:82:3a:61:73:04:b0:11:67:08:de:af:99:
5d:4f:cd:94:0e:0b:83:42:75:07:a2:05:ee:f2:0a:
57:c1:41:ec:1d:5c:a9:25:60:36:2c:74:2f:7d:76:
ba:ee:b8:ce:ff:ff:61:78:f8:5f:9c:50:b4:e0:c6:
a1:18:78:ee:ef:11:94:3c:99:11:12:e2:ea:cf:a1:
d2:b5:d8:56:16:fe:13:27:8e:a9:2f:af:b4:8b:64:
51:85:af:21:7d:48:7e:d8:de:56:e1:6b:2f:0f:5a:
54:90:94:33:4d:6c:44:ad:86:f8:3c:bd:f1:78:1e:
2c:89:09:0e:34:1b:49:6b:76:45:14:15:e1:d1:96:
e8:04:f0:58:c1:bc:fb:d9:10:3f:49:bd:ce:64:86:
6d:f9:29:21:02:f2:6c:bb:41:06:54:2b:24:09:2e:
c5:51:b3:ac:39:ed:7a:d8:49:c7:d9:bc:25:29:41:
6a:d8:04:6f:5a:c1:9f:92:b2:10:78:d7:ff:a2:77:
6e:7b:7a:01:63:e7:ce:9c:7a:83:93:83:e9:81:51:
69:7c:a0:6c:2f:88:5c:a0:17:48:e7:95:46:f1:44:
7c:44:8f:a6:8d:44:da:24:2d:29:ea:eb:86:a0:cc:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F0:C8:41:B3:2D:23:AF:99:9A:FB:51:B5:4C:CD:8C:39:4E:94:96
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:22:69:5e:ca:53:07:e8:0c:0f:dd:6e:3d:0f:12:9b:03:cd:
14:29:66:ed:59:92:f3:74:6f:79:eb:ce:ff:e6:b3:ba:5d:74:
f3:d4:aa:41:60:ac:96:68:38:e0:73:16:7d:2a:98:75:26:55:
ad:b2:89:b5:76:73:8e:6f:de:0d:91:39:11:74:17:fa:c1:95:
ff:9f:fc:f9:e0:32:a7:3c:b8:4b:e4:8f:d1:a9:96:7c:b7:c9:
3d:2a:d9:d1:36:a1:42:83:4e:94:21:a3:27:8c:8a:7b:05:76:
d7:72:6e:2e:61:43:6b:55:27:21:3f:1d:ad:d3:d0:64:6c:92:
d3:9a:60:f7:e8:37:be:33:e5:8d:a1:58:b9:45:98:0b:d3:61:
94:53:8f:37:2c:8e:7e:2c:42:2c:69:a6:86:37:c4:3e:b0:b9:
70:90:34:bd:85:f6:94:ef:41:a6:10:43:03:68:89:f1:88:7b:
c6:4f:41:2d:fb:77:04:ae:39:39:88:4b:e5:8b:06:ac:be:1a:
b2:65:74:a3:1a:77:e8:cc:85:11:b1:a9:4c:d3:d2:44:76:f0:
72:11:8d:f4:02:3c:c9:8c:dd:4a:c3:f4:31:da:80:da:48:aa:
ee:ff:d2:03:bc:b2:fb:7e:ec:51:cc:ac:bf:47:13:d5:b9:02:
7a:f6:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:42:37 2026 by rpki-client