Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207158.roa
File: AS207158.roa (raw, json)
Hash identifier: dWtm7cjzfj17hw/2ysk0s9Y0otdSo35tR8wSsGcYhpg=
Subject key identifier: C2:EB:9D:AB:81:85:CE:07:96:B7:D7:A6:D1:04:F7:21:78:DA:CE:E2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0F0DC1503C204B74CD93EBF32764D6243C0DB83D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207158.roa
Signing time: Fri 12 Jun 2026 07:38:19 +0000
ROA not before: Fri 12 Jun 2026 07:33:19 +0000
ROA not after: Fri 11 Jun 2027 07:38:19 +0000
asID: 207158
IP address blocks: 82.39.138.0/24 maxlen: 24
82.47.2.0/24 maxlen: 24
82.47.133.0/24 maxlen: 24
82.47.138.0/24 maxlen: 24
82.47.165.0/24 maxlen: 24
84.75.142.0/24 maxlen: 24
84.75.143.0/24 maxlen: 24
84.75.149.0/24 maxlen: 24
84.75.197.0/24 maxlen: 24
178.83.29.0/24 maxlen: 24
178.83.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:0d:c1:50:3c:20:4b:74:cd:93:eb:f3:27:64:d6:24:3c:0d:b8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 12 07:33:19 2026 GMT
Not After : Jun 11 07:38:19 2027 GMT
Subject: CN=C2EB9DAB8185CE0796B7D7A6D104F72178DACEE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:c7:82:3e:ce:a5:7d:dc:e3:91:4b:ee:cf:
45:04:69:c5:40:00:8f:3d:f6:82:e8:78:e1:81:e2:
11:a1:29:a4:a3:78:df:20:03:8d:19:e3:d3:b0:53:
9f:7c:7a:48:9f:4d:83:ec:66:f2:88:b7:57:de:68:
7a:40:b9:a5:57:36:25:f7:8a:34:61:72:59:2c:87:
d8:f9:f6:f7:b9:02:61:77:38:b3:79:54:7b:93:b3:
2c:5d:3d:25:2d:d3:9d:d8:35:41:78:fa:76:9f:21:
7f:95:07:2a:97:21:9b:91:f3:06:27:77:7a:58:d8:
50:1b:29:c4:54:56:39:14:17:dd:a7:8f:3a:74:1f:
7e:f9:5b:98:71:ef:0d:5a:32:55:5e:e0:28:00:01:
45:6c:d1:43:b1:bb:62:c7:bd:60:a7:80:01:6f:d0:
c2:e8:60:9f:0b:96:9a:95:61:98:6c:56:a7:41:be:
75:a7:17:b0:87:6d:ab:f0:bb:fa:c0:7d:fc:c9:1d:
a8:0d:d8:86:f2:97:d8:c9:d9:74:b8:20:b5:bc:5f:
31:c0:35:46:e9:12:1a:86:3b:98:fd:99:ff:d7:94:
ac:31:b3:2e:a9:ad:a2:d1:7d:f7:ee:32:87:bd:67:
28:36:10:75:96:3a:ff:6e:85:1d:9f:2d:da:f1:29:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EB:9D:AB:81:85:CE:07:96:B7:D7:A6:D1:04:F7:21:78:DA:CE:E2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.138.0/24
82.47.2.0/24
82.47.133.0/24
82.47.138.0/24
82.47.165.0/24
84.75.142.0/23
84.75.149.0/24
84.75.197.0/24
178.83.29.0/24
178.83.200.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d0:b0:9a:19:13:8d:41:19:18:d4:cb:3f:f9:f1:70:be:96:
99:4e:62:14:5f:c1:b3:da:e3:6e:49:7b:c9:66:48:d0:6c:de:
39:1c:63:43:d0:2e:37:de:b9:22:a4:cb:05:41:67:6c:18:c5:
3f:11:bc:4c:5f:1b:0f:c6:fe:99:01:e8:d1:82:3f:9a:98:7c:
5b:a5:40:07:bd:4c:26:07:aa:7b:d4:49:b9:c0:f2:08:b3:20:
4f:b5:15:37:67:37:a9:92:78:92:63:43:58:96:27:43:b1:f6:
2f:d2:ff:92:18:4d:56:47:1f:01:73:3a:24:67:4a:26:65:9d:
5e:13:47:dd:9e:70:b5:c3:40:e1:6b:8a:6a:4b:80:8f:65:35:
21:76:bf:6a:cc:ed:28:04:8c:0d:0e:2a:c1:fa:e1:c0:ca:f4:
81:61:3e:ce:03:d8:2e:b2:32:f4:54:cc:f6:df:1b:c9:8a:18:
5e:b2:d3:31:18:82:0c:71:7c:03:90:a0:bd:56:ff:3e:da:4d:
8f:f9:6b:5b:88:42:9c:1d:08:5c:25:97:19:2e:95:2c:24:1c:
27:c0:8b:45:d4:c2:0c:de:e7:d3:ac:3a:e6:3b:d7:36:f5:18:
ff:8e:8f:2c:e1:ac:e3:49:64:7d:94:1d:5f:b5:a6:af:fc:8e:
5b:d0:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:54 2026 by rpki-client