Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207764.roa
File: AS207764.roa (raw, json)
Hash identifier: bG3jj2RqxRp8vh+S/NG7iicSEHqR+vm8yMXhS7YK61w=
Subject key identifier: 36:F8:20:8D:6C:58:31:4A:00:47:D5:2B:77:9F:72:14:F2:8E:6A:33
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5AE3837EC7C0DE9F7EF8953A0C018D9E69F820C0
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207764.roa
Signing time: Fri 26 Jun 2026 08:08:46 +0000
ROA not before: Fri 26 Jun 2026 08:03:46 +0000
ROA not after: Fri 25 Jun 2027 08:08:46 +0000
asID: 207764
IP address blocks: 2a0f:85c1:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e3:83:7e:c7:c0:de:9f:7e:f8:95:3a:0c:01:8d:9e:69:f8:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:46 2026 GMT
Not After : Jun 25 08:08:46 2027 GMT
Subject: CN=36F8208D6C58314A0047D52B779F7214F28E6A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:e1:52:1a:be:7c:d3:dd:e4:11:31:e3:0e:
16:ed:db:80:d0:d7:64:bf:34:6e:0f:c9:8f:84:3b:
fb:66:72:9b:f1:ed:d4:e9:e3:5f:12:cc:75:17:86:
74:90:7c:5a:8e:5e:74:58:24:26:6b:02:6f:66:bc:
23:56:2e:a2:50:d6:3a:66:d9:1b:1a:b5:f1:a7:6b:
f2:0b:c1:3a:f2:ba:ce:e7:81:b5:15:ca:8a:13:b2:
b8:e7:2c:c5:d5:12:10:e9:4c:db:6f:94:ad:ef:ed:
77:32:cb:76:c5:49:1d:d5:6e:53:94:0f:61:36:ec:
95:46:6b:0c:6c:46:2f:b6:14:cc:b0:a1:82:49:56:
8e:ac:ea:03:8e:bb:91:81:72:f7:34:bc:42:cf:90:
a6:43:72:d6:31:0e:dc:b4:1e:95:1b:24:32:14:2f:
cf:56:11:f1:63:47:38:e6:83:d1:ec:26:0c:22:0f:
65:7d:3f:0e:83:a9:d0:ac:cd:e9:07:95:f2:42:29:
9b:ac:75:39:23:d4:ae:f5:d8:f3:0e:ac:18:8d:a3:
72:9d:7c:ce:f0:60:a1:4a:58:32:4c:cd:52:fa:ba:
ee:d3:1f:cd:d1:62:90:4e:ed:1b:4a:fc:94:b1:6c:
cb:d0:5b:38:6b:ab:31:f0:44:13:8d:7a:96:f2:18:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:20:8D:6C:58:31:4A:00:47:D5:2B:77:9F:72:14:F2:8E:6A:33
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:20::/48
Signature Algorithm: sha256WithRSAEncryption
c5:aa:b3:f7:db:02:ae:61:76:71:f2:ab:7f:b8:e0:46:14:fb:
17:39:94:0a:fc:10:65:57:20:98:42:d3:cb:b5:68:24:0e:19:
f7:23:95:56:94:b7:34:30:33:fe:9d:70:d3:00:27:b2:6e:d6:
b6:d4:3e:a1:98:a5:c7:34:32:e9:9c:4f:70:0d:34:c0:a9:bc:
3f:3b:08:c4:60:89:6b:3f:9c:71:8d:54:07:0c:5e:dc:ab:12:
0b:1f:2d:90:a8:62:a2:ec:a0:e7:81:a3:34:92:37:20:d9:c4:
1c:ad:ee:f0:cd:d2:f2:b2:b1:03:00:4c:e9:68:7c:a8:65:20:
7c:26:d3:ca:f9:83:e8:28:00:75:01:cb:03:98:8c:94:5e:68:
6e:89:24:fe:6a:37:39:28:70:2b:8c:ed:de:84:d1:51:16:a8:
08:69:c8:0f:df:fe:61:a0:47:c9:67:09:5a:a9:24:b1:2a:d0:
08:99:36:01:69:f6:f3:81:0a:b5:be:4d:33:a6:e9:25:1a:5b:
7f:d1:80:0d:9d:9d:93:08:85:23:59:df:60:7f:de:91:8d:56:
09:c1:ed:fe:ab:4c:2c:ff:4d:71:5d:a6:91:7d:69:77:7f:e7:
5e:23:7b:60:54:ca:b3:4f:ef:a0:d4:14:e8:33:82:08:a5:92:
df:ba:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:46 2026 by rpki-client