Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207208.roa
File: AS207208.roa (raw, json)
Hash identifier: 4Q55OCRS7+Ysie15bYYHhbqFKA9y1UM72DSpiOJyYAI=
Subject key identifier: E5:57:AD:74:11:BC:03:14:61:2B:6F:66:3B:B4:97:B0:6D:82:7F:1E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2F7DCB785969DC2B797C413EFD86AE425143642E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207208.roa
Signing time: Mon 05 Oct 2026 13:33:44 +0000
ROA not before: Mon 05 Oct 2026 13:28:44 +0000
ROA not after: Mon 04 Oct 2027 13:33:44 +0000
asID: 207208
IP address blocks: 178.95.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:7d:cb:78:59:69:dc:2b:79:7c:41:3e:fd:86:ae:42:51:43:64:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 5 13:28:44 2026 GMT
Not After : Oct 4 13:33:44 2027 GMT
Subject: CN=E557AD7411BC0314612B6F663BB497B06D827F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:af:31:60:60:2c:1e:c4:e8:17:de:23:15:
d8:b1:f9:ce:b7:e1:e4:b9:e9:36:63:73:ca:10:d6:
97:1f:22:a1:cf:9c:a5:1d:67:0e:d0:63:e2:12:22:
54:01:76:e8:c3:24:09:82:ef:d3:cd:b5:48:45:ee:
61:55:6b:0a:99:06:bc:8e:4e:ac:f9:e2:c1:be:49:
9d:c7:fd:fd:48:93:d0:ca:74:af:0f:44:c0:f0:7b:
92:b6:82:6a:be:53:f1:4e:28:35:d3:f9:7d:1f:bf:
0f:4a:7c:3f:01:93:6c:f9:93:ed:2e:17:12:70:f7:
17:69:63:4b:ae:89:8e:07:66:68:68:b3:33:97:0c:
66:4e:13:7a:c2:ec:99:e9:5a:6d:16:b0:c2:30:6b:
9f:85:f6:b1:26:a5:a2:e7:6b:e0:a4:6a:7e:4e:ee:
92:9c:09:e9:d6:11:df:27:ae:f0:6c:d5:ba:b6:c6:
7e:45:a7:39:93:71:22:86:1a:a3:1e:a9:96:5d:dc:
dc:20:db:43:09:46:41:41:db:b8:f2:a2:80:14:ce:
72:ca:e3:33:b1:16:14:7d:f1:b5:39:c6:a3:8f:bb:
b2:34:52:da:93:b6:84:69:64:82:4f:1f:00:b4:b8:
59:24:2a:72:6f:4e:06:0b:e1:91:34:b1:ee:ca:93:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:57:AD:74:11:BC:03:14:61:2B:6F:66:3B:B4:97:B0:6D:82:7F:1E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:69:8d:ab:9f:44:fa:7f:26:2b:02:90:8b:1a:28:d2:70:d2:
24:f7:51:e4:f8:8f:ee:11:b3:2f:db:cc:4c:b0:93:ed:33:1d:
f5:e0:60:bf:40:c9:91:08:52:f2:80:3d:6d:49:fb:00:09:e1:
a7:e4:4c:74:fd:22:1d:5f:a0:56:25:2a:93:a8:56:96:9e:7e:
bc:eb:f7:5d:3e:4b:3e:38:8d:24:17:ee:6d:3e:68:2d:2d:ed:
ad:c3:47:67:8e:6d:5b:01:69:ab:5e:07:a8:3a:20:37:28:74:
18:28:57:8d:92:51:d8:aa:02:1a:a0:4f:d0:30:e1:ed:24:aa:
a1:ca:46:9e:ef:e8:b7:ce:86:00:94:cb:89:95:61:1c:cc:ba:
9f:a3:e2:26:da:62:08:ac:ed:00:eb:fe:12:4c:2d:5d:64:a0:
e0:da:a8:df:c2:bb:0b:60:c6:2a:c6:29:b4:de:81:67:9d:3e:
ce:b3:fc:e1:b6:9e:9c:77:f2:68:9d:1c:3c:06:e2:90:61:5e:
8f:56:18:17:8a:29:5b:6c:2a:8a:21:89:e0:21:bc:d4:d9:81:
fb:d5:20:bc:31:2b:9b:88:f6:a6:c3:43:f1:d2:7c:23:96:77:
d9:8e:6f:7c:8f:3f:48:da:31:55:f1:b5:51:a6:40:d8:1d:4d:
6f:dd:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:34:10 2026 by rpki-client