Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS207158.roa
File: AS207158.roa (raw, json)
Hash identifier: +SOc6Kkx77YzHPi4HqVzomLbWOEnGNVofn4ZbZt0y1A=
Subject key identifier: 5E:56:81:3E:B3:2C:68:87:F8:74:31:6F:10:5C:58:F8:C5:75:80:79
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2EAE7625D11A30D9D2F8F8FEA91134E95A35D194
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS207158.roa
Signing time: Sun 12 Jul 2026 07:25:05 +0000
ROA not before: Sun 12 Jul 2026 07:20:05 +0000
ROA not after: Sun 11 Jul 2027 07:25:05 +0000
asID: 207158
IP address blocks: 78.105.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ae:76:25:d1:1a:30:d9:d2:f8:f8:fe:a9:11:34:e9:5a:35:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 12 07:20:05 2026 GMT
Not After : Jul 11 07:25:05 2027 GMT
Subject: CN=5E56813EB32C6887F874316F105C58F8C5758079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:06:80:89:9e:9d:7e:c2:17:1d:11:c1:ef:
c3:73:97:b7:fc:83:39:49:af:ab:eb:23:c9:94:a9:
f1:c4:16:ae:80:09:7a:00:a5:0c:f8:31:05:49:14:
cf:e8:81:7b:4b:17:c7:b9:a0:fe:12:b4:9d:1f:d5:
cb:ff:6e:f2:ff:65:95:c4:02:76:01:8b:c8:72:ae:
46:f7:f8:55:0b:eb:2e:2c:df:6b:9c:73:41:67:a7:
59:c6:06:91:33:d7:d7:a0:f4:9a:45:11:7d:e7:25:
67:76:7e:fd:a1:ed:fa:6b:86:f6:7b:bb:ab:ef:9c:
d9:12:a6:52:9f:0e:89:bb:d8:77:70:5a:81:00:50:
0a:6d:b1:55:f6:55:26:03:e5:dd:eb:a4:88:42:93:
5b:2b:ad:aa:e9:0a:62:20:59:7c:2b:bd:45:d1:ce:
04:e7:50:ac:19:fd:57:90:d8:82:7f:b6:c4:a7:81:
9b:9e:61:52:2a:0a:ec:c1:06:2e:ae:c0:f7:40:46:
b3:4b:42:a3:8e:32:97:72:47:85:bc:55:a4:1e:32:
42:90:37:79:28:2f:2a:ee:e4:f6:d2:d0:e0:b3:cf:
0b:b9:c7:b0:e6:75:cc:e9:f1:eb:39:1c:0a:53:74:
3d:95:3b:ac:40:07:91:24:e1:01:2b:f8:02:21:fe:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:56:81:3E:B3:2C:68:87:F8:74:31:6F:10:5C:58:F8:C5:75:80:79
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS207158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ca:e4:14:19:db:73:8d:7b:69:4f:73:45:cf:6e:93:a5:14:
4b:3d:c7:e7:99:92:c2:df:03:1b:4a:aa:ed:c5:0a:60:b9:97:
3e:d9:db:a6:36:e9:e2:c6:71:08:ec:35:76:80:84:bd:72:59:
73:e3:b8:fc:84:63:f9:9b:1f:2f:29:3e:8e:9a:9b:ea:4b:82:
52:64:8c:f6:74:1d:d4:2c:33:f2:e5:37:8a:26:55:d4:1e:16:
a5:d5:ab:66:b6:35:64:60:85:1b:e6:48:ec:02:07:d1:cc:cd:
59:b6:0f:c9:3a:ca:03:8f:a2:16:93:77:d0:c7:29:e1:9e:7e:
bd:cd:3b:b8:26:76:7b:1f:7f:e1:d9:ae:1b:d1:3e:d5:e7:9d:
fe:74:b3:a8:94:a0:2c:78:24:ec:33:53:a4:60:38:a0:b1:6f:
8f:c3:12:ab:63:dd:f5:72:7e:9d:dc:06:c5:2b:e5:ce:84:7e:
97:7a:83:fb:70:4b:9d:3c:8f:a9:be:8f:3b:a1:4d:0f:55:bf:
cc:5d:df:f7:bf:1b:cb:07:f0:51:cb:45:51:f4:9d:51:1b:b6:
79:4b:86:46:97:06:96:f0:a6:cf:e8:a3:d2:8a:35:8c:89:41:
d1:7f:34:94:b1:f1:dd:0f:21:52:a4:2a:aa:c5:b1:cf:d6:69:
b8:eb:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:44:21 2026 by rpki-client