Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201907.roa
File: AS201907.roa (raw, json)
Hash identifier: RJJ2+rwVas6Cd8c+ScScbz5iBkVrLW1TXwCdNiHcaNk=
Subject key identifier: 0E:2E:64:8B:C5:6E:31:09:8E:06:13:32:0B:9E:27:8B:DF:69:BC:23
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1EF3A765C071446467BD692056F2DF919C50406A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201907.roa
Signing time: Mon 30 Mar 2026 13:49:15 +0000
ROA not before: Mon 30 Mar 2026 13:44:15 +0000
ROA not after: Mon 29 Mar 2027 13:49:15 +0000
asID: 201907
IP address blocks: 84.75.18.0/24 maxlen: 24
84.75.19.0/24 maxlen: 24
84.75.34.0/24 maxlen: 24
84.75.36.0/24 maxlen: 24
84.75.37.0/24 maxlen: 24
84.75.38.0/24 maxlen: 24
84.75.41.0/24 maxlen: 24
84.75.42.0/24 maxlen: 24
84.75.48.0/24 maxlen: 24
84.75.50.0/24 maxlen: 24
84.75.51.0/24 maxlen: 24
84.75.52.0/24 maxlen: 24
84.75.53.0/24 maxlen: 24
84.75.55.0/24 maxlen: 24
84.75.61.0/24 maxlen: 24
84.75.62.0/24 maxlen: 24
84.75.63.0/24 maxlen: 24
84.75.64.0/24 maxlen: 24
84.75.65.0/24 maxlen: 24
84.75.67.0/24 maxlen: 24
84.75.68.0/24 maxlen: 24
84.75.69.0/24 maxlen: 24
84.75.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f3:a7:65:c0:71:44:64:67:bd:69:20:56:f2:df:91:9c:50:40:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 30 13:44:15 2026 GMT
Not After : Mar 29 13:49:15 2027 GMT
Subject: CN=0E2E648BC56E31098E0613320B9E278BDF69BC23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:29:aa:a3:9d:91:1f:85:e7:2d:9e:77:be:
2b:6b:73:11:44:16:59:75:cb:13:5d:10:a3:af:c6:
51:c2:2f:66:15:a5:08:c0:11:95:f2:b4:ed:31:71:
fd:e6:fa:1f:b1:bd:e4:40:93:51:e6:ee:de:f8:d4:
e5:a5:c0:52:5c:2f:1b:6b:9a:b3:16:a0:59:e1:c3:
10:e1:15:c0:83:6f:40:7d:b1:71:64:a6:99:ea:26:
a6:c4:eb:b6:68:d6:81:3c:79:c0:a2:d9:33:52:e1:
24:30:01:ce:bc:65:10:65:10:af:7f:37:92:f2:c0:
5f:26:85:67:f0:39:a6:01:3c:97:53:e6:70:34:d0:
d3:43:6f:79:78:89:64:11:6c:c6:1c:8e:f4:86:2a:
30:61:36:ee:89:1f:27:b3:f0:48:60:46:32:d5:cf:
ad:d2:b5:e7:66:1b:b3:95:37:f9:19:93:04:33:81:
52:d8:15:a3:73:ed:cb:78:ac:ea:47:b9:98:7c:0e:
80:cf:05:ad:3a:1c:80:56:1d:99:39:4c:59:dd:6b:
f3:3c:62:9a:d0:19:51:d7:d5:5f:f9:a3:51:30:90:
38:b9:56:16:61:2b:ae:e7:74:6a:c5:bf:73:7f:59:
46:21:20:b8:b9:2c:43:00:8c:09:05:35:95:4f:c9:
06:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2E:64:8B:C5:6E:31:09:8E:06:13:32:0B:9E:27:8B:DF:69:BC:23
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201907.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.18.0/23
84.75.34.0/24
84.75.36.0-84.75.38.255
84.75.41.0-84.75.42.255
84.75.48.0/24
84.75.50.0-84.75.53.255
84.75.55.0/24
84.75.61.0-84.75.65.255
84.75.67.0-84.75.70.255
Signature Algorithm: sha256WithRSAEncryption
82:4b:0b:bf:62:e6:c7:49:3a:c7:20:f7:4d:e6:74:ae:c0:bb:
99:8f:b8:86:1b:74:3c:6c:5f:f6:9d:ba:8d:b9:47:f9:6c:67:
33:3b:66:c3:d6:64:78:65:52:e4:7f:20:2d:12:24:ac:c7:05:
86:5b:49:56:3a:82:3f:c9:fe:74:0e:9e:d3:cc:38:f2:e7:3b:
88:99:d4:45:92:8f:2d:a0:96:1c:14:3a:f9:52:94:c4:ba:19:
57:a6:f4:d0:28:ea:ae:fa:8a:eb:d0:fe:7d:cc:04:5b:b4:48:
83:cd:25:57:36:4b:1e:45:18:be:d5:a7:2a:c5:0c:04:a5:51:
61:35:18:af:33:67:1d:ca:03:37:2f:f4:c1:80:fe:17:98:49:
a7:87:f9:fa:b1:01:1f:95:f4:7d:57:1d:d7:ff:f8:a8:cd:d8:
13:4f:3f:59:6f:2f:8e:0b:fe:50:5e:66:a3:a8:83:2c:ea:62:
c9:9a:d6:9e:7a:b9:97:8a:9a:04:ff:52:44:1e:ca:65:69:8f:
d8:5f:d6:54:89:6d:f9:65:f1:52:87:c1:2e:8c:7f:e5:02:ce:
2d:b7:3b:81:b1:41:89:b1:e8:bc:df:72:a6:58:7b:10:3c:ed:
f6:b8:ff:82:86:c6:b0:75:27:6f:d5:d4:d1:19:67:f1:e6:80:
a9:4a:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:14 2026 by rpki-client