Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207071.roa
File: AS207071.roa (raw, json)
Hash identifier: KI2eHrlBLFI09acLQIY6Q8wdTu/ebhQvPMa1P4VSPIM=
Subject key identifier: 16:AE:33:F7:18:72:04:4A:2B:91:03:94:D3:D4:10:C2:9A:5C:0A:AA
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 019A20B3B806F308A6DC2565E68D92EF3C9DD417
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207071.roa
Signing time: Wed 04 Nov 2026 20:32:50 +0000
ROA not before: Wed 04 Nov 2026 20:27:50 +0000
ROA not after: Wed 03 Nov 2027 20:32:50 +0000
asID: 207071
IP address blocks: 2a0e:8f02:2280::/44 maxlen: 48
2a0e:8f02:f029::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:b3:b8:06:f3:08:a6:dc:25:65:e6:8d:92:ef:3c:9d:d4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:50 2026 GMT
Not After : Nov 3 20:32:50 2027 GMT
Subject: CN=16AE33F71872044A2B910394D3D410C29A5C0AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:08:5e:15:e6:c8:05:0e:64:41:1e:88:d8:
29:93:83:cb:d3:e6:2c:27:8f:0d:12:0f:2e:2c:cd:
93:4e:cc:54:07:19:06:bd:3a:52:ec:57:75:97:12:
96:c2:29:db:88:42:1b:ca:b7:55:57:72:6d:16:0c:
0b:79:90:bd:dc:52:73:af:75:21:3d:7d:40:3d:31:
9d:d8:4a:5f:b6:ac:4f:66:23:b4:1e:bc:6e:83:e2:
c7:c8:db:14:48:b7:e9:e2:ae:98:44:a2:f1:76:48:
02:87:8d:89:13:39:34:b0:33:82:a7:61:b8:6c:68:
02:85:10:eb:e6:02:c4:e1:5a:28:cb:a7:e6:5e:fb:
f5:15:a7:e5:eb:4a:de:d7:60:b0:6d:99:ea:2b:a7:
a4:d1:d5:fd:9c:85:e7:1f:00:81:0e:07:12:15:55:
cf:a7:bb:f9:8f:41:d4:30:4c:38:96:2d:21:e0:5b:
ba:11:3e:6d:01:be:30:fb:77:17:36:32:19:73:39:
eb:26:c9:c3:27:6b:69:e3:8d:55:2a:ba:2f:32:85:
5e:38:5a:bd:0a:da:60:c6:b2:1b:cd:67:5f:27:f7:
e9:e7:24:0c:ff:8a:0d:94:d5:bc:05:27:08:11:52:
94:be:e0:bc:ab:6c:94:e2:99:15:18:12:50:a6:ef:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AE:33:F7:18:72:04:4A:2B:91:03:94:D3:D4:10:C2:9A:5C:0A:AA
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2280::/44
2a0e:8f02:f029::/48
Signature Algorithm: sha256WithRSAEncryption
50:af:fd:2b:05:c7:9d:fa:cd:d1:01:a1:46:3a:77:82:88:6b:
c5:21:b1:39:37:4a:9e:e8:07:28:4a:d4:ef:8d:f2:08:75:ca:
38:8d:b8:87:32:5d:f1:7f:f9:b3:f9:73:c0:d5:1f:ba:71:b1:
0c:a6:a4:22:46:89:e4:50:b5:b9:62:96:61:28:00:9a:2d:82:
39:8f:c3:80:ae:61:20:b4:39:ce:c4:94:36:60:76:5d:6b:70:
6f:6d:0c:45:92:c3:ba:69:6a:0c:2b:dd:a4:08:1d:c4:c5:b6:
46:75:46:cc:23:2f:9c:9d:8b:e9:bc:54:25:60:53:d8:98:b3:
d7:60:78:69:8c:b4:69:30:e6:cf:dc:40:7b:f6:bf:6a:e1:00:
0d:ed:ef:b3:33:47:49:44:84:70:ca:81:e8:28:71:0c:bf:c1:
14:26:ef:d3:78:f1:40:ea:6e:64:d7:59:f6:11:0c:41:a9:27:
d1:0d:92:ae:a1:c9:e3:db:70:79:74:7f:ca:f5:9a:3b:ed:28:
cf:19:8f:5d:00:76:df:51:1a:83:bc:04:85:42:1d:c8:69:d4:
08:40:90:3d:7e:e0:8d:98:65:0e:3b:9d:f1:e4:41:91:2b:2c:
b2:17:92:e9:a9:a1:0f:4d:d8:61:87:0a:8c:68:a0:c5:9f:9d:
9a:e3:90:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:00:08 2026 by rpki-client