Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207842.roa
File: AS207842.roa (raw, json)
Hash identifier: Bjml+4OOgectfOZMzlyloCzoFYCjTSW5hbzIgA0Oj04=
Subject key identifier: 42:64:76:3B:9B:45:65:C8:25:16:BF:9E:FA:FA:6F:C7:86:74:69:48
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1C20CD06B7D407E7DE8789198C5A9A5F48474673
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207842.roa
Signing time: Fri 26 Jun 2026 08:08:41 +0000
ROA not before: Fri 26 Jun 2026 08:03:41 +0000
ROA not after: Fri 25 Jun 2027 08:08:41 +0000
asID: 207842
IP address blocks: 2a0f:85c1:220::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:20:cd:06:b7:d4:07:e7:de:87:89:19:8c:5a:9a:5f:48:47:46:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:41 2026 GMT
Not After : Jun 25 08:08:41 2027 GMT
Subject: CN=4264763B9B4565C82516BF9EFAFA6FC786746948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:b3:30:c7:5d:17:5c:4b:26:50:43:af:b4:
a5:be:6f:d1:82:4b:5b:a6:33:d3:8a:0d:08:f0:8d:
74:09:c4:b5:7a:fc:a1:17:fb:30:38:ad:f9:a4:59:
94:b5:64:7f:62:14:6c:eb:b5:3c:bf:8d:13:89:61:
93:99:38:6a:e9:1d:2b:06:58:10:8f:4d:6d:df:e4:
7c:9a:bc:f7:44:42:3e:c0:d9:59:72:a6:47:3f:4d:
ff:95:82:ff:c7:d8:17:61:82:04:61:c1:f9:cb:cc:
84:8f:74:bb:aa:33:34:de:da:4a:33:f3:19:26:d7:
5c:40:c0:32:7a:10:07:cd:e3:7c:8a:f8:78:cc:db:
9c:ea:37:5d:19:0d:dc:f9:d6:7b:a8:f3:15:a7:c6:
df:f8:3b:02:5f:9d:d8:57:46:07:fd:3b:7d:78:5e:
68:ee:6c:c7:bf:c9:88:66:f9:2e:bf:2f:07:af:11:
e5:c0:1c:b4:69:0b:c3:98:6c:d6:37:97:1b:bb:f9:
05:8d:17:9b:c3:6e:50:ee:c6:28:e3:ef:65:20:96:
88:dd:a9:62:02:4d:65:ac:f9:14:94:96:cb:c8:12:
65:18:f0:d8:2f:6b:3f:c1:f2:40:1a:74:c0:be:01:
cc:33:f1:8b:53:6d:42:e5:72:95:88:b1:19:13:a7:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:64:76:3B:9B:45:65:C8:25:16:BF:9E:FA:FA:6F:C7:86:74:69:48
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:220::/44
Signature Algorithm: sha256WithRSAEncryption
d9:71:1b:e6:69:13:57:dc:d4:a6:5d:5e:6e:15:34:07:cb:68:
e5:a5:a8:c0:07:8b:9b:87:b6:0f:66:6a:07:48:6a:84:81:de:
4a:12:10:a0:a1:a8:18:33:9e:a8:1d:37:29:a2:5c:cf:48:2a:
f9:78:07:43:c9:61:4f:f4:cd:84:d6:23:8d:0b:89:1b:fd:6a:
19:7f:3d:53:27:ff:ab:24:c4:d9:b3:b0:09:65:87:29:00:5c:
59:80:8e:05:1a:0b:a2:69:ad:46:10:34:00:cb:94:7b:59:27:
42:d5:eb:37:b7:9f:78:b6:3a:51:83:d8:61:44:7e:9a:62:c0:
b2:d7:ee:53:6c:4c:2a:ae:3c:9a:7c:50:2d:df:9c:b5:4a:73:
06:df:8c:7e:53:b7:df:b0:74:35:24:7a:b3:20:84:ef:6e:1b:
67:72:64:90:cb:4e:26:14:ef:7c:a4:0f:f7:ec:c7:3f:3b:cc:
c6:8d:4a:49:43:9f:14:a8:46:a5:fc:7a:e9:26:c6:77:11:92:
ab:16:b3:7e:52:f2:c1:6e:67:33:ab:53:cd:83:e7:6d:e2:1f:
6e:67:bc:44:c4:c5:4b:fc:fb:fc:cb:e8:d0:0f:5f:9a:7c:d7:
09:11:e7:30:53:b0:7d:6d:5a:8b:90:2d:f8:51:80:87:79:88:
93:83:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:06 2026 by rpki-client