Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207738.roa
File: AS207738.roa (raw, json)
Hash identifier: c82B1xbR4XNLOrGKAvQ6giu+6QYTq9w/Z/uSPvEzWtk=
Subject key identifier: 6C:AF:CD:66:82:01:D2:DE:00:A6:F9:EF:B9:7B:F1:A1:0D:9B:C7:F4
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 143577E8E7A4F3228AB16102DE1E9E70849A56BE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207738.roa
Signing time: Fri 16 Oct 2026 02:09:20 +0000
ROA not before: Fri 16 Oct 2026 02:04:20 +0000
ROA not after: Fri 15 Oct 2027 02:09:20 +0000
asID: 207738
IP address blocks: 2a0f:85c1:d97::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:35:77:e8:e7:a4:f3:22:8a:b1:61:02:de:1e:9e:70:84:9a:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 16 02:04:20 2026 GMT
Not After : Oct 15 02:09:20 2027 GMT
Subject: CN=6CAFCD668201D2DE00A6F9EFB97BF1A10D9BC7F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:aa:77:ec:72:60:32:e9:3f:e7:f3:19:14:
3a:dc:d1:29:fd:57:b3:ca:ea:de:e3:3e:e6:6a:64:
69:bd:ea:13:f5:f7:6c:6f:ed:4c:11:ba:54:17:df:
6f:8b:cf:8c:05:b2:97:e9:92:fe:1b:d8:9c:04:d3:
61:e1:5f:d2:fc:08:a6:4d:bc:3c:4c:b7:44:72:41:
34:73:ad:13:49:8f:5f:ac:82:df:d0:a8:97:37:b4:
1a:d8:3b:17:e3:6d:a0:22:71:0c:42:5e:4a:af:c9:
17:54:06:15:20:81:7f:2f:bb:b0:d2:b4:66:8d:c7:
0e:77:54:e0:3a:e5:a6:a7:3b:7b:26:af:6e:8a:52:
c0:dd:eb:ea:d3:31:cc:2e:5f:8c:77:d5:76:41:e0:
c2:e5:90:83:be:4e:9e:d2:e5:0e:aa:24:66:55:60:
56:9d:bb:02:47:91:15:7b:79:13:c6:06:26:b3:bb:
26:4d:a5:46:6b:ee:2a:72:3b:0b:e1:ba:00:0a:f6:
f5:e5:ed:aa:62:e8:bf:54:75:60:9d:d8:cd:64:87:
eb:4d:65:cf:29:41:b9:ec:1e:8f:47:a7:81:fa:fa:
b2:72:04:5f:95:a5:49:f9:ba:a3:4a:e6:31:19:ad:
75:de:44:d1:58:f7:e9:04:2f:3d:97:e3:c2:e4:cc:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AF:CD:66:82:01:D2:DE:00:A6:F9:EF:B9:7B:F1:A1:0D:9B:C7:F4
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d97::/48
Signature Algorithm: sha256WithRSAEncryption
71:84:cf:6b:92:a6:93:d0:a7:14:19:c0:f3:21:16:fc:99:45:
d0:cd:e5:fb:e9:b2:b4:d6:78:de:b5:cb:3b:79:ef:bc:60:d1:
f6:ca:1c:82:82:51:4b:20:b4:4f:87:52:22:f1:da:8c:89:d0:
fc:ef:d1:29:03:fb:56:e0:2a:60:03:4a:b5:fb:7a:2c:bb:d8:
83:fb:2b:03:53:5e:94:52:82:a8:e7:da:73:93:0d:e1:85:91:
4a:24:d0:44:7a:3c:1e:7b:f5:3c:c4:1e:01:d1:ef:74:5d:65:
fb:df:21:5e:74:6d:42:5c:35:fa:68:38:7f:e9:3b:49:ba:72:
ff:6a:86:ca:52:ca:2e:0e:4c:2b:42:47:55:90:20:50:fe:f2:
b9:5b:ce:45:ee:30:f5:86:9b:51:5b:08:cd:9a:1e:dc:b5:08:
94:a7:d0:7b:62:c3:db:fb:e7:70:76:88:97:d6:71:fe:6b:68:
f9:e4:5b:91:05:ea:9d:44:83:7e:9c:49:e2:39:b0:8f:3f:1f:
3f:48:79:c0:97:fe:85:84:08:e0:39:f3:ad:3f:73:a6:22:d3:
00:43:84:7c:c0:b7:83:25:90:80:89:02:d4:4c:13:1d:1e:bc:
a7:6b:7a:3e:42:88:90:f6:74:ca:08:6a:0c:da:9b:80:d8:b4:
d4:11:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 10:04:10 2026 by rpki-client