Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207295.roa
File: AS207295.roa (raw, json)
Hash identifier: OPibIVuQn3lxe1TPucsjG95o9I5fJRV35AXu6HWKKRU=
Subject key identifier: 5A:3B:A2:1D:D8:05:43:3B:08:53:18:57:F7:8B:BD:D5:B3:FB:BA:86
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 35BEE8C41B0255F82989A59FD400C3FD5089EFA8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207295.roa
Signing time: Mon 20 Jul 2026 21:08:53 +0000
ROA not before: Mon 20 Jul 2026 21:03:53 +0000
ROA not after: Mon 19 Jul 2027 21:08:53 +0000
asID: 207295
IP address blocks: 2a0f:85c1:cc8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:be:e8:c4:1b:02:55:f8:29:89:a5:9f:d4:00:c3:fd:50:89:ef:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:53 2026 GMT
Not After : Jul 19 21:08:53 2027 GMT
Subject: CN=5A3BA21DD805433B08531857F78BBDD5B3FBBA86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:7b:4c:c1:32:68:2b:5e:af:15:e8:86:0d:
70:16:fe:de:0a:3e:a4:b4:15:32:9e:fc:01:19:7d:
8f:7b:7b:2a:e5:f4:72:1f:3a:09:ba:bd:d1:13:af:
eb:20:da:ff:1f:e3:87:02:9d:1a:28:d4:75:97:2e:
4b:2c:a3:fb:fa:3b:0b:09:dc:63:de:a9:af:88:1f:
5a:e3:68:08:ed:a2:49:43:36:6e:e8:f9:9b:17:e9:
b7:53:b3:dc:f9:c1:71:69:7e:11:e2:8c:2e:e3:5b:
9d:c0:00:44:4c:6d:12:7f:67:c9:c7:2f:87:fa:28:
31:bd:d1:bf:07:22:4c:74:a2:32:b8:d4:3a:55:95:
20:08:d2:c5:cd:61:cc:fe:a8:e0:3e:af:f5:eb:5b:
2c:43:7e:b9:bf:0a:42:35:f3:70:df:02:96:9a:74:
93:2c:57:6d:6e:46:bc:25:da:7e:93:3a:21:66:37:
7d:78:d3:1f:50:c7:55:ec:fa:2d:af:3f:23:04:3c:
a7:5c:fd:2f:ff:30:cd:a8:d8:b3:d2:d2:79:62:0e:
4b:6e:3c:f0:3d:27:d4:7f:68:ed:e8:b2:8e:4f:bf:
4f:d0:5f:4d:af:41:c6:9f:10:2d:c5:b6:d8:b8:9d:
b0:c2:a9:50:9e:3c:74:4f:23:25:5b:f5:61:55:88:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:A2:1D:D8:05:43:3B:08:53:18:57:F7:8B:BD:D5:B3:FB:BA:86
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207295.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cc8::/48
Signature Algorithm: sha256WithRSAEncryption
4b:e2:01:fc:2f:17:94:4b:01:de:08:0d:a9:fb:3f:ae:2c:79:
6c:66:62:26:dd:31:4d:b6:e0:08:6f:a6:74:6b:38:32:e6:e4:
30:f8:37:7b:30:2e:8d:70:31:d4:02:2d:a2:a9:1d:d2:b1:03:
c4:79:3f:43:ac:e6:f1:fd:e3:03:76:56:87:51:10:2e:ec:29:
fb:b9:d3:5d:b1:ff:82:de:67:e1:da:c7:89:c7:c5:dc:47:d6:
01:46:b7:f1:ff:b8:a3:1a:c0:66:25:14:99:be:8a:00:4a:37:
30:2d:c3:ff:6e:64:e5:8a:12:83:38:ab:86:a8:42:26:0c:50:
b7:dd:b0:c8:56:4f:7b:5f:2b:a2:24:33:2f:9e:ca:83:39:83:
4b:46:1c:83:e9:77:67:5d:6c:9d:a7:f8:fd:99:13:8c:de:eb:
ff:ec:4a:48:a0:20:ee:45:35:d0:6f:e3:36:5e:2f:ef:19:d1:
c2:0f:4b:be:91:4f:d1:24:62:3b:3b:bf:90:22:56:35:41:9a:
1f:fb:7d:b5:a2:8c:93:82:af:36:c9:27:13:e6:9e:86:be:a2:
0c:59:fd:21:d6:95:54:65:4b:e4:65:90:b2:5f:98:2f:1b:78:
16:94:b9:86:ce:4f:72:a5:d4:88:12:40:f8:ad:51:d9:10:51:
db:19:d8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:42 2026 by rpki-client