Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207609.roa
File: AS207609.roa (raw, json)
Hash identifier: gym1/T1QH0AKB3Gpd/eX2KXoFRrBv804JC02/4mBw2Q=
Subject key identifier: 93:25:41:1B:A8:68:3E:FC:70:C3:7B:AA:13:41:16:AB:A7:2F:9C:BA
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 72A8FA72D51B25A4D6224EF55CDD3FB6E9B0A80D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207609.roa
Signing time: Fri 26 Jun 2026 08:08:40 +0000
ROA not before: Fri 26 Jun 2026 08:03:40 +0000
ROA not after: Fri 25 Jun 2027 08:08:40 +0000
asID: 207609
IP address blocks: 2a0f:85c1:c080::/41 maxlen: 48
2a0f:85c1:c0d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a8:fa:72:d5:1b:25:a4:d6:22:4e:f5:5c:dd:3f:b6:e9:b0:a8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:40 2026 GMT
Not After : Jun 25 08:08:40 2027 GMT
Subject: CN=9325411BA8683EFC70C37BAA134116ABA72F9CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:67:b4:f0:31:c2:c5:2d:ed:d3:65:e9:30:
b2:e6:6f:d4:91:64:c5:c5:11:dc:53:cc:f8:bb:41:
16:17:33:37:7d:6d:0e:aa:df:bc:c3:25:82:ef:ce:
69:2c:53:ee:4e:f7:4f:d2:8a:25:08:f2:40:fd:4e:
2e:71:fe:25:dc:c5:97:d0:18:7e:bb:30:9f:a8:3f:
5a:61:67:b1:9b:ec:7f:73:2e:22:72:0a:35:86:31:
2f:c0:df:d0:cf:44:67:9e:93:00:41:02:0f:61:03:
58:85:ff:90:19:a7:4e:bd:68:07:ba:27:eb:e5:14:
35:39:10:fc:f9:e6:8b:cf:e7:79:ba:ff:61:9c:d9:
fa:95:d6:18:54:ec:d1:59:b8:aa:7d:f2:71:85:3e:
d1:c8:ce:0f:57:ad:0e:46:4a:d7:8e:23:b6:4a:0b:
df:f3:27:ec:67:8d:08:76:05:88:f4:63:02:f5:03:
8b:38:64:d5:83:30:99:f9:98:47:1c:06:86:6f:19:
42:af:af:71:7f:25:57:fa:b6:e0:89:ac:9d:06:85:
52:f2:f6:42:aa:cf:81:64:0b:34:f8:30:bd:12:10:
cd:ec:1a:75:71:c1:52:3f:f3:01:b5:27:9b:4b:87:
1e:42:07:2f:3d:59:f4:7a:92:78:b9:44:f3:64:01:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:25:41:1B:A8:68:3E:FC:70:C3:7B:AA:13:41:16:AB:A7:2F:9C:BA
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207609.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c080::/41
Signature Algorithm: sha256WithRSAEncryption
72:21:6a:38:b9:a4:9f:39:0a:dc:b1:ed:f9:38:13:d2:e6:ab:
0e:28:04:aa:23:14:a1:7b:2d:f6:6c:29:1b:91:46:ab:37:a1:
bf:e8:80:f7:ab:15:ac:b0:89:1f:dc:1a:90:f0:07:ea:7b:94:
17:6d:4d:27:a8:d2:38:7e:4b:64:96:e1:ae:e3:e7:24:3b:d1:
7f:90:bb:00:f8:c8:a9:4c:b1:0f:b2:da:9f:a0:61:1f:77:c8:
67:cf:0e:89:3e:5f:a8:ae:8e:5d:5a:8a:34:ea:ce:51:37:b1:
84:f9:ba:e6:8a:de:74:0f:82:5c:17:7e:49:15:f7:ea:ea:2e:
de:2c:91:b7:a0:84:97:7f:6c:86:8e:12:2a:cb:56:fe:97:60:
e8:fc:3d:3f:67:05:09:d7:ef:03:9a:7b:79:40:79:90:a8:74:
2f:30:db:f1:9b:37:4c:5b:b9:d5:fe:38:a0:4d:b6:c5:a4:8b:
82:45:83:04:77:ff:46:43:6e:f5:69:05:ee:28:1e:9f:8d:fa:
21:35:ec:f4:43:62:2e:8f:8b:f1:ff:e0:9f:41:d1:e9:0a:a8:
ac:f8:17:16:a2:5a:29:16:63:87:61:ce:89:fa:02:40:e1:d4:
bf:5b:1c:62:33:a9:dd:47:96:69:d0:0d:fd:f0:63:89:c7:0a:
f7:79:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:03 2026 by rpki-client