Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207529.roa
File: AS207529.roa (raw, json)
Hash identifier: QB1ypjN6FivrwMiaos3HRu6oBKMcOTIr3gqWjp36TP4=
Subject key identifier: 21:0F:57:E0:A9:7B:A3:62:8C:73:74:3C:FA:01:31:1D:3E:6B:F2:7A
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6ED46C55037BEC347D66A2E949C56C06524DD887
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207529.roa
Signing time: Sun 24 Aug 2025 00:18:33 +0000
ROA not before: Sun 24 Aug 2025 00:13:33 +0000
ROA not after: Sun 23 Aug 2026 00:18:33 +0000
asID: 207529
IP address blocks: 2a14:7580:fff5::/48 maxlen: 48
2a14:7581:3000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 13:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d4:6c:55:03:7b:ec:34:7d:66:a2:e9:49:c5:6c:06:52:4d:d8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 24 00:13:33 2025 GMT
Not After : Aug 23 00:18:33 2026 GMT
Subject: CN=210F57E0A97BA3628C73743CFA01311D3E6BF27A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:99:05:75:fd:c4:e3:51:3e:ae:61:7b:cc:
bb:3f:ad:96:27:f4:06:08:f2:74:9d:69:6a:06:c3:
05:c0:00:ed:64:6f:44:ba:b7:18:d4:d2:1a:78:c0:
67:c6:a4:84:57:8c:7c:ae:f8:be:6a:e5:00:57:3b:
31:21:e4:f8:88:8b:00:87:34:8c:4e:7a:ad:ed:ca:
0e:3a:4d:5d:ff:6a:49:66:d6:e7:35:f5:5a:7b:c6:
55:bb:fe:fd:90:34:93:69:b5:c0:c2:22:c8:23:1e:
23:ea:04:fc:a2:02:b8:57:fc:62:c3:e2:f2:4a:1f:
25:95:11:9e:2e:d7:99:30:92:3b:c8:26:d3:26:ac:
85:7f:d3:f5:06:43:9c:d1:66:9e:ec:92:95:38:33:
0e:4b:89:82:8b:be:ca:50:e3:51:d4:69:a8:1f:3a:
82:85:b8:bb:00:ee:1f:e2:aa:a3:d4:42:99:f5:eb:
d7:db:19:0c:c9:e9:98:76:a5:ee:01:8d:a5:61:3c:
86:b8:0c:a7:4d:fe:54:ef:e6:e6:b4:13:84:7c:b1:
19:7b:f3:47:23:55:8c:c8:64:e8:41:5e:95:41:f6:
0b:6a:53:47:78:5e:01:f0:1f:e9:f1:b0:9b:89:ea:
ca:61:86:3b:9a:bd:1d:3c:e1:c1:a7:b9:68:11:98:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:57:E0:A9:7B:A3:62:8C:73:74:3C:FA:01:31:1D:3E:6B:F2:7A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff5::/48
2a14:7581:3000::/40
Signature Algorithm: sha256WithRSAEncryption
3d:4f:ab:44:46:d3:70:51:cf:98:b6:83:76:5c:e1:9d:44:51:
ae:ad:8f:fd:43:db:10:bb:62:43:76:bc:54:21:44:19:ab:75:
82:43:18:d4:68:6b:44:23:e3:cc:ab:71:d0:e7:da:43:f2:b3:
af:af:a6:e5:7c:2d:90:1d:44:79:fe:ca:15:87:4a:f0:05:a8:
40:31:4e:f3:ae:5b:27:15:fd:a2:c0:91:72:4e:45:67:b1:7a:
12:11:8b:19:19:a1:b4:f3:8b:16:59:76:bb:33:05:c1:1d:31:
6e:7c:18:61:34:34:d4:0b:14:40:ae:7a:91:43:e9:7f:76:46:
65:70:6e:f2:da:00:15:7a:43:38:a9:a3:8a:50:b0:96:f7:0f:
52:29:48:94:f1:26:4a:26:16:26:16:b6:c4:f7:1f:87:9c:33:
9a:5d:70:d2:bd:76:59:6e:f8:32:0b:3f:9c:37:a2:43:25:1a:
28:e8:54:12:09:60:3d:c6:ce:5b:b9:94:f8:a6:43:0f:84:f6:
61:cb:7a:57:e0:00:f0:31:68:84:4d:41:51:c9:9d:36:dd:2a:
bf:c0:2b:aa:e6:50:b8:35:52:74:59:63:3b:3f:33:f0:7c:56:
6f:6d:96:a4:0f:be:b5:ac:2d:34:a9:73:78:82:f7:5c:7b:20:
c1:0c:76:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 7 02:22:56 2025 by rpki-client