Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207821.roa
File: AS207821.roa (raw, json)
Hash identifier: mU7eLqj3lsYJQxzAXLiK7sv3zuzdmWqA3CcJJi4rfBU=
Subject key identifier: AC:23:37:48:47:06:6A:2C:C8:E6:3C:8D:ED:51:82:09:BC:BB:F8:00
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4145C46DE2B7479A29913A1C8BA1D954764876F3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207821.roa
Signing time: Tue 08 Sep 2026 00:00:36 +0000
ROA not before: Mon 07 Sep 2026 23:55:36 +0000
ROA not after: Tue 07 Sep 2027 00:00:36 +0000
asID: 207821
IP address blocks: 147.79.11.0/24 maxlen: 24
147.79.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:45:c4:6d:e2:b7:47:9a:29:91:3a:1c:8b:a1:d9:54:76:48:76:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 7 23:55:36 2026 GMT
Not After : Sep 7 00:00:36 2027 GMT
Subject: CN=AC23374847066A2CC8E63C8DED518209BCBBF800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:8b:f5:aa:61:de:35:06:80:b3:c4:79:28:
8f:69:d7:40:43:64:3f:ab:ff:fb:6d:75:f7:47:94:
e4:d1:fd:dc:35:eb:94:08:d6:e6:a9:82:d5:85:88:
76:7e:f1:61:e7:8b:65:b9:02:eb:bf:c3:ff:ff:98:
72:04:e4:e4:41:1f:a8:a2:66:f5:02:bb:35:e5:4a:
ca:3b:a2:dc:b7:12:5e:42:ef:c1:3e:a6:51:dc:c6:
2e:75:b4:a4:e2:95:96:f3:be:76:7c:81:3d:fc:62:
eb:30:ee:88:65:44:06:f1:9e:53:be:81:78:4c:eb:
ac:be:e3:78:ea:d1:a7:f6:4b:d6:88:aa:62:67:51:
d1:5f:10:d4:91:c7:50:b9:84:45:08:8e:30:67:fd:
f1:57:74:4d:da:e1:77:8a:41:fc:79:1f:59:ee:1c:
36:76:fd:8a:3b:ba:c6:c3:89:ce:0b:d3:2c:3b:35:
f1:95:a5:d8:8f:55:b9:f0:6d:ba:c6:aa:62:da:c5:
a8:30:02:a5:45:94:e9:c8:8d:cc:8b:a9:00:8f:f9:
12:00:3e:c6:9d:21:8d:0d:3d:08:a7:dc:e5:5a:dd:
ec:44:a8:30:a6:e4:65:46:32:9e:5b:a1:fb:15:2f:
ef:41:39:ad:2c:ee:0c:64:79:c3:f9:bb:e7:98:59:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:23:37:48:47:06:6A:2C:C8:E6:3C:8D:ED:51:82:09:BC:BB:F8:00
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207821.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.11.0/24
147.79.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c2:d5:c3:5d:9b:7c:5b:76:86:be:5a:36:58:a6:06:3e:96:
4a:93:0f:6c:63:bd:14:26:a2:f8:46:25:10:1e:66:d5:e0:df:
dc:6a:b4:64:e4:b8:93:27:df:6d:d2:57:28:1a:e0:fe:be:16:
76:34:69:6e:57:65:c5:2e:ac:8f:8b:ac:59:b2:08:7b:1e:67:
0c:e4:df:16:91:c7:27:54:10:46:45:cb:bb:fc:28:ca:8c:00:
e9:0b:3b:97:a7:11:75:b8:0a:bb:af:e0:6a:d4:23:12:7a:d9:
9b:80:de:9c:42:56:64:04:9e:13:b9:b4:95:a0:e0:35:60:29:
ad:92:dd:02:80:33:c5:3e:09:e9:0c:09:20:51:df:07:19:a1:
56:ce:e8:79:3a:bd:13:0c:ad:89:2c:b5:94:1f:72:6f:8b:d3:
bd:92:bb:b6:b8:fe:80:90:ae:03:e4:8a:7e:26:ee:0a:12:b7:
5a:4b:30:f2:5a:d1:67:d6:6b:e2:1f:a4:fd:94:43:38:fd:d8:
80:53:b0:89:e5:03:6d:12:ac:fd:23:aa:82:40:2a:d4:b2:4d:
53:62:22:45:87:b5:df:81:4b:2e:a5:c8:82:ee:4f:eb:02:80:
bb:f0:a3:49:0d:5d:f4:fb:eb:29:5b:10:21:53:d6:8d:4d:c4:
e3:43:18:0f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUQUXEbeK3R5opkToci6HZVHZIdvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MDcyMzU1MzZaFw0yNzA5MDcwMDAwMzZaMDMxMTAvBgNV
BAMTKEFDMjMzNzQ4NDcwNjZBMkNDOEU2M0M4REVENTE4MjA5QkNCQkY4MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/Iv1qmHeNQaAs8R5KI9p10BD
ZD+r//ttdfdHlOTR/dw165QI1uapgtWFiHZ+8WHni2W5Auu/w///mHIE5ORBH6ii
ZvUCuzXlSso7oty3El5C78E+plHcxi51tKTilZbzvnZ8gT38Yusw7ohlRAbxnlO+
gXhM66y+43jq0af2S9aIqmJnUdFfENSRx1C5hEUIjjBn/fFXdE3a4XeKQfx5H1nu
HDZ2/Yo7usbDic4L0yw7NfGVpdiPVbnwbbrGqmLaxagwAqVFlOnIjcyLqQCP+RIA
PsadIY0NPQin3OVa3exEqDCm5GVGMp5bofsVL+9BOa0s7gxkecP5u+eYWf0DAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUrCM3SEcGaizI5jyN7VGCCby7+AAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA3ODIxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk08L
AwQAk08PMA0GCSqGSIb3DQEBCwUAA4IBAQBrwtXDXZt8W3aGvlo2WKYGPpZKkw9s
Y70UJqL4RiUQHmbV4N/carRk5LiTJ99t0lcoGuD+vhZ2NGluV2XFLqyPi6xZsgh7
HmcM5N8WkccnVBBGRcu7/CjKjADpCzuXpxF1uAq7r+Bq1CMSetmbgN6cQlZkBJ4T
ubSVoOA1YCmtkt0CgDPFPgnpDAkgUd8HGaFWzuh5Or0TDK2JLLWUH3Jvi9O9kru2
uP6AkK4D5Ip+Ju4KErdaSzDyWtFn1mviH6T9lEM4/diAU7CJ5QNtEqz9I6qCQCrU
sk1TYiJFh7XfgUsupciC7k/rAoC78KNJDV30++spWxAhU9aNTcTjQxgP
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:50:06 2026 by rpki-client