Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207341.roa
File: AS207341.roa (raw, json)
Hash identifier: eiSvOcsaUuvLwiN0EGDU0R5WhbPbag4fyLz+2C/1OSI=
Subject key identifier: 94:F0:5C:2D:0D:F4:DA:56:7B:BE:F8:69:89:A2:36:F7:B3:3F:0C:32
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1A2CF3C36E5804BF1A62C8007AC0C244B731702B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207341.roa
Signing time: Thu 09 Jul 2026 11:08:49 +0000
ROA not before: Thu 09 Jul 2026 11:03:49 +0000
ROA not after: Thu 08 Jul 2027 11:08:49 +0000
asID: 207341
IP address blocks: 2a0f:85c1:cd1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2c:f3:c3:6e:58:04:bf:1a:62:c8:00:7a:c0:c2:44:b7:31:70:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:49 2026 GMT
Not After : Jul 8 11:08:49 2027 GMT
Subject: CN=94F05C2D0DF4DA567BBEF86989A236F7B33F0C32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:f3:ef:b0:c7:15:e5:ad:37:37:75:79:b0:
20:46:ce:ae:88:1d:bf:47:a7:02:1a:60:77:aa:9d:
4e:87:01:9a:f6:9c:19:af:a4:be:eb:81:4a:aa:74:
63:99:06:d5:83:f1:d5:b9:53:2a:c1:a1:9a:e6:21:
db:77:0b:0e:ec:30:88:64:07:fd:34:92:dc:2b:b2:
45:d9:ed:19:37:cb:51:dd:48:8c:35:d6:86:4d:d0:
1b:f2:c4:4a:af:88:f1:ef:b3:0f:90:3c:3a:4c:f8:
11:d0:11:b6:6a:57:90:e8:a4:29:1e:0b:bb:25:e5:
59:c8:ef:3c:4c:21:b6:9b:7a:2c:46:f2:5a:e0:9b:
0d:8f:62:2b:12:8e:bb:93:43:5a:8f:78:2b:df:37:
13:94:57:19:86:1a:2f:10:9d:6f:7c:0d:21:78:15:
cc:71:1f:f3:8c:63:83:0a:b2:6f:95:42:f4:cc:b1:
5f:0d:c7:54:70:f1:3b:4e:35:f8:99:36:2d:cd:05:
94:dc:04:a4:cb:46:d0:28:57:42:75:b9:8c:42:43:
1b:e4:21:3d:db:85:c6:69:10:74:e7:39:87:1c:ef:
a3:c1:32:00:11:28:66:51:35:9d:75:2c:2c:71:2b:
9a:7e:7e:2a:17:6c:01:8c:23:6e:99:01:cd:03:0b:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F0:5C:2D:0D:F4:DA:56:7B:BE:F8:69:89:A2:36:F7:B3:3F:0C:32
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cd1::/48
Signature Algorithm: sha256WithRSAEncryption
e3:7f:66:de:fb:76:37:20:c7:67:04:82:65:74:e0:24:47:ef:
de:54:8b:88:7c:40:e3:81:b5:87:b4:03:ce:20:3a:42:a0:c4:
c9:bb:34:67:4f:54:03:45:e0:00:f2:40:06:e4:26:c6:10:85:
82:e4:e5:04:fa:d9:ec:35:6d:b0:8e:f9:19:f1:57:00:e4:72:
70:4b:42:e1:8e:48:7c:b2:46:47:ef:a5:af:75:ef:65:d7:db:
8f:9e:e2:1f:63:c2:63:ae:1d:ce:4a:1e:56:27:60:7a:5a:d7:
71:f1:a5:ad:df:1f:96:8c:1d:f2:aa:58:e6:2b:ae:0b:c3:5c:
40:60:f2:29:95:d0:97:5d:f9:6e:7a:fd:f3:91:f3:55:73:48:
a8:1b:0c:0a:90:66:6d:1a:f7:cc:98:90:bd:67:c5:60:40:27:
48:02:83:2d:b1:99:4a:06:2d:f6:16:34:22:30:d9:ef:97:7a:
c2:63:3d:1c:f5:06:99:21:8f:e2:08:09:c8:6f:1f:cf:be:f8:
cc:ec:89:49:9e:ed:ca:6e:60:6a:bf:f1:b5:4a:20:b0:89:ad:
49:d5:ae:44:34:46:b1:f9:f2:e9:af:cd:ef:db:95:cf:3f:fa:
93:07:a7:50:cd:b0:f5:74:b3:b3:80:5d:69:50:a5:d9:9e:8e:
7b:b0:af:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:03 2026 by rpki-client