Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207907.roa
File: AS207907.roa (raw, json)
Hash identifier: P6NNFv7/k2wRn2lbiamCohOG3wZxOdjz9B8m+NhJb4U=
Subject key identifier: 3A:9D:59:51:35:AE:A9:52:84:E7:71:B1:EE:06:88:F8:23:32:18:31
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 743087E3E729A9B6A4F93C115FAB69470A934826
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207907.roa
Signing time: Wed 04 Nov 2026 20:32:49 +0000
ROA not before: Wed 04 Nov 2026 20:27:49 +0000
ROA not after: Wed 03 Nov 2027 20:32:49 +0000
asID: 207907
IP address blocks: 2a0e:8f02:2060::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:30:87:e3:e7:29:a9:b6:a4:f9:3c:11:5f:ab:69:47:0a:93:48:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:49 2026 GMT
Not After : Nov 3 20:32:49 2027 GMT
Subject: CN=3A9D595135AEA95284E771B1EE0688F823321831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:b7:79:c5:b3:56:09:9d:d0:28:ef:8a:15:
ef:5f:18:61:eb:61:95:bb:07:a7:f7:32:56:7b:81:
bd:38:f7:ad:4e:03:d8:3b:68:2d:78:90:f2:fc:50:
b5:60:5f:51:6e:84:c2:17:f4:6a:d0:27:3c:9f:c6:
1c:b4:7c:4e:db:35:5c:d4:98:8e:db:1c:8f:68:07:
a8:92:00:9c:77:fc:9e:04:4e:2f:a1:08:86:a2:3c:
6d:b6:b6:ee:f5:e2:54:2f:8d:7b:81:46:d0:06:a7:
39:7a:c2:ef:2b:2a:4b:ed:51:9e:67:1a:f1:67:5e:
f9:80:26:dc:89:19:1c:44:62:9a:36:03:8b:54:c8:
09:00:b4:2f:4a:e6:bf:e5:15:23:59:e8:45:b5:67:
d5:62:3f:d1:00:9c:72:4d:2f:9e:db:6f:cb:03:3c:
92:bf:59:1d:2b:94:10:e2:77:36:e6:f7:25:07:0d:
ae:62:ef:fa:61:68:85:9b:97:11:7e:ac:fc:f6:9d:
5c:55:1f:1a:c7:1e:c5:23:ac:1a:f0:7e:02:45:f9:
44:67:5b:4f:53:66:a8:d9:7a:6f:82:77:11:e7:28:
90:15:69:77:99:9e:bc:24:08:31:74:5e:eb:1e:34:
1d:5b:17:33:d3:1e:86:09:8f:1f:27:72:b2:4c:61:
be:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:59:51:35:AE:A9:52:84:E7:71:B1:EE:06:88:F8:23:32:18:31
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS207907.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2060::/44
Signature Algorithm: sha256WithRSAEncryption
a1:f2:e5:c6:9c:d7:f9:99:1f:2b:51:3a:d2:eb:7a:20:a5:15:
f5:46:36:64:f6:99:20:65:a1:e0:8c:5e:06:99:da:28:cc:ec:
a8:db:c6:80:14:a5:7e:c0:e2:84:c0:a8:96:79:44:7d:2d:95:
f9:13:ba:b1:a6:c8:fc:fb:a2:fe:69:ff:b9:d2:c3:ec:c3:d1:
ab:de:d0:7a:2b:11:09:87:c4:d7:20:d2:85:df:90:71:a6:93:
e0:5b:29:d3:91:76:d9:77:9f:6a:e8:75:a0:cd:e2:65:c5:5e:
9b:d0:5f:8d:1c:56:f9:9f:72:c9:2c:c1:f5:f9:25:38:33:8f:
4e:ea:e5:10:9b:29:8b:eb:9e:84:97:2e:00:ea:8d:e5:f3:be:
f0:15:17:27:c6:63:a4:4a:3c:93:ca:8d:17:51:19:f7:8c:05:
06:f4:bd:db:7e:53:a8:1a:dd:ce:b4:17:f9:06:34:27:2b:4e:
00:ff:4b:f4:38:29:89:c8:3e:36:fe:7d:ae:6a:52:97:83:e6:
e1:4d:fa:75:79:54:40:96:17:bb:3f:8b:c3:7c:e2:f0:7c:9c:
01:7a:db:7d:c4:1f:9f:82:16:18:6a:c5:38:2e:e5:34:60:5c:
0e:98:11:6f:4f:1f:29:99:bb:b0:0d:e3:0a:16:8b:07:01:31:
85:30:d3:0d
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUdDCH4+cpqbak+TwRX6tpRwqTSCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NDlaFw0yNzExMDMyMDMyNDlaMDMxMTAvBgNV
BAMTKDNBOUQ1OTUxMzVBRUE5NTI4NEU3NzFCMUVFMDY4OEY4MjMzMjE4MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYobd5xbNWCZ3QKO+KFe9fGGHr
YZW7B6f3MlZ7gb04961OA9g7aC14kPL8ULVgX1FuhMIX9GrQJzyfxhy0fE7bNVzU
mI7bHI9oB6iSAJx3/J4ETi+hCIaiPG22tu714lQvjXuBRtAGpzl6wu8rKkvtUZ5n
GvFnXvmAJtyJGRxEYpo2A4tUyAkAtC9K5r/lFSNZ6EW1Z9ViP9EAnHJNL57bb8sD
PJK/WR0rlBDidzbm9yUHDa5i7/phaIWblxF+rPz2nVxVHxrHHsUjrBrwfgJF+URn
W09TZqjZem+CdxHnKJAVaXeZnrwkCDF0XuseNB1bFzPTHoYJjx8ncrJMYb63AgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUOp1ZUTWuqVKE53Gx7gaI+CMyGDEwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIwNzkwNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoO
jwIgYDANBgkqhkiG9w0BAQsFAAOCAQEAofLlxpzX+ZkfK1E60ut6IKUV9UY2ZPaZ
IGWh4IxeBpnaKMzsqNvGgBSlfsDihMColnlEfS2V+RO6sabI/Pui/mn/udLD7MPR
q97QeisRCYfE1yDShd+QcaaT4Fsp05F22Xefauh1oM3iZcVem9BfjRxW+Z9yySzB
9fklODOPTurlEJspi+uehJcuAOqN5fO+8BUXJ8ZjpEo8k8qNF1EZ94wFBvS9235T
qBrdzrQX+QY0JytOAP9L9Dgpicg+Nv59rmpSl4Pm4U36dXlUQJYXuz+Lw3zi8Hyc
AXrbfcQfn4IWGGrFOC7lNGBcDpgRb08fKZm7sA3jChaLBwExhTDTDQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:37:00 2026 by rpki-client