Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207019.roa
File: AS207019.roa (raw, json)
Hash identifier: w5b/E3GYs+8oej9UexI7caaPsZtOXKgU69JLxTd8UDA=
Subject key identifier: A4:E7:9F:A8:5D:2D:C8:C8:AB:AE:11:06:09:4E:EF:05:1E:DA:69:6D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 70468390080EAFB9FE59FF7597DB84E8D697C7B5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207019.roa
Signing time: Wed 30 Sep 2026 10:03:28 +0000
ROA not before: Wed 30 Sep 2026 09:58:28 +0000
ROA not after: Wed 29 Sep 2027 10:03:28 +0000
asID: 207019
IP address blocks: 92.112.164.0/24 maxlen: 24
178.92.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 22:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:46:83:90:08:0e:af:b9:fe:59:ff:75:97:db:84:e8:d6:97:c7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 30 09:58:28 2026 GMT
Not After : Sep 29 10:03:28 2027 GMT
Subject: CN=A4E79FA85D2DC8C8ABAE1106094EEF051EDA696D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:a6:1a:17:bf:9d:56:85:20:08:dd:d5:72:
c1:86:70:d8:03:33:b9:8f:16:fe:ed:5d:6d:9c:0f:
68:d1:ec:49:0d:c3:32:c3:e0:db:a2:32:6a:fc:3d:
b9:09:cb:1d:af:22:1e:a2:c7:07:2a:71:c1:62:a6:
64:33:8b:bd:f6:d1:35:77:80:54:32:8d:c7:52:b5:
37:37:29:dc:e8:c3:ea:8f:6a:83:20:47:43:a8:f0:
1d:ee:d5:44:51:72:62:51:1d:47:54:34:c4:93:1f:
69:0a:f1:7e:8d:6b:a3:68:b6:d5:4f:9b:d8:0d:44:
1c:76:09:a1:1c:21:da:25:1c:c7:52:e2:69:76:1c:
51:d6:72:8b:b3:57:e8:4b:9a:97:8a:19:a0:7f:f5:
3b:27:c6:bd:78:59:ac:7d:45:df:a6:35:f1:2e:ca:
14:67:ff:27:61:81:d6:95:c7:ac:8b:73:33:e3:a2:
c7:01:e7:be:df:a8:84:0c:6c:32:91:4c:5d:66:4d:
a3:b1:f5:6c:2a:9c:5a:69:70:81:69:e2:6a:6b:da:
19:0d:d7:bb:36:3b:4e:b8:e1:e5:b3:ed:41:b4:fd:
dc:2c:b3:85:06:56:e4:21:99:9c:d6:58:31:de:2c:
a1:7a:3b:5a:be:27:d4:27:9c:ed:a4:c7:ec:1d:5e:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:9F:A8:5D:2D:C8:C8:AB:AE:11:06:09:4E:EF:05:1E:DA:69:6D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.164.0/24
178.92.94.0/24
Signature Algorithm: sha256WithRSAEncryption
63:07:b8:7b:06:bd:33:e0:ed:7b:a5:4a:06:e3:86:42:9e:db:
27:3c:64:6a:2c:26:2e:1b:44:7e:31:dd:70:09:7d:84:d4:36:
62:1c:2a:46:83:a0:89:54:c4:62:57:13:a4:b6:42:ca:25:ed:
a9:2e:d3:0f:64:e2:d3:08:91:d7:81:39:0f:8a:c1:67:1a:ce:
19:2b:22:a8:44:14:a5:36:62:34:c4:ea:1b:59:4f:ee:cb:8e:
77:5d:cd:c5:94:d8:30:38:25:bf:4c:7f:28:57:58:89:c2:69:
af:45:46:d4:15:21:ae:e8:5e:43:c4:0f:37:cd:07:d7:50:95:
41:ef:f8:43:8e:e0:62:7a:92:da:b3:f6:5b:7f:9b:5a:89:1a:
70:ea:ab:81:35:14:0d:f6:b5:69:6c:5a:74:3f:59:a3:36:94:
2f:59:92:ba:83:37:61:63:81:20:0d:ff:df:00:83:00:c6:1b:
fd:4e:e2:51:bd:16:15:20:3d:b6:23:43:55:d7:7c:fa:bd:25:
1e:3e:1d:a9:ae:ae:76:09:b0:89:62:4c:4f:64:1e:4a:29:fb:
c7:10:ca:4e:28:54:5d:26:57:c4:1c:76:9c:e2:ac:7a:e5:01:
30:59:29:56:5a:ab:19:43:af:fe:f8:76:a3:fe:38:11:a8:5e:
11:d4:d7:70
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUcEaDkAgOr7n+Wf91l9uE6NaXx7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MzAwOTU4MjhaFw0yNzA5MjkxMDAzMjhaMDMxMTAvBgNV
BAMTKEE0RTc5RkE4NUQyREM4QzhBQkFFMTEwNjA5NEVFRjA1MUVEQTY5NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCco6YaF7+dVoUgCN3VcsGGcNgD
M7mPFv7tXW2cD2jR7EkNwzLD4NuiMmr8PbkJyx2vIh6ixwcqccFipmQzi7320TV3
gFQyjcdStTc3Kdzow+qPaoMgR0Oo8B3u1URRcmJRHUdUNMSTH2kK8X6Na6NottVP
m9gNRBx2CaEcIdolHMdS4ml2HFHWcouzV+hLmpeKGaB/9Tsnxr14Wax9Rd+mNfEu
yhRn/ydhgdaVx6yLczPjoscB577fqIQMbDKRTF1mTaOx9WwqnFppcIFp4mpr2hkN
17s2O0644eWz7UG0/dwss4UGVuQhmZzWWDHeLKF6O1q+J9QnnO2kx+wdXvXlAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUpOefqF0tyMirrhEGCU7vBR7aaW0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA3MDE5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXHCk
AwQAslxeMA0GCSqGSIb3DQEBCwUAA4IBAQBjB7h7Br0z4O17pUoG44ZCntsnPGRq
LCYuG0R+Md1wCX2E1DZiHCpGg6CJVMRiVxOktkLKJe2pLtMPZOLTCJHXgTkPisFn
Gs4ZKyKoRBSlNmI0xOobWU/uy453Xc3FlNgwOCW/TH8oV1iJwmmvRUbUFSGu6F5D
xA83zQfXUJVB7/hDjuBiepLas/Zbf5taiRpw6quBNRQN9rVpbFp0P1mjNpQvWZK6
gzdhY4EgDf/fAIMAxhv9TuJRvRYVID22I0NV13z6vSUePh2prq52CbCJYkxPZB5K
KfvHEMpOKFRdJlfEHHac4qx65QEwWSlWWqsZQ6/++Haj/jgRqF4R1Ndw
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:23:29 2026 by rpki-client