Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207847.roa
File: AS207847.roa (raw, json)
Hash identifier: 5ttWod365kAvVjcPsS3mtt1O73BT3BuyvleS+p18k2c=
Subject key identifier: CA:53:FD:F9:52:11:4E:D2:E8:BC:D4:66:C9:84:9A:B0:F7:94:F1:43
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 56A6E8492A5132A71325DFEAD90367A54853EEF4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207847.roa
Signing time: Wed 10 Jun 2026 13:42:21 +0000
ROA not before: Wed 10 Jun 2026 13:37:21 +0000
ROA not after: Wed 09 Jun 2027 13:42:21 +0000
asID: 207847
IP address blocks: 178.83.121.0/24 maxlen: 24
2a13:9500:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a6:e8:49:2a:51:32:a7:13:25:df:ea:d9:03:67:a5:48:53:ee:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 10 13:37:21 2026 GMT
Not After : Jun 9 13:42:21 2027 GMT
Subject: CN=CA53FDF952114ED2E8BCD466C9849AB0F794F143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:2e:ca:80:78:b5:7b:97:44:8d:4a:e4:ac:
c5:f6:48:3b:ce:c9:89:b9:8f:b7:7b:20:db:5b:26:
ad:97:1c:7f:33:ea:f2:06:6a:a3:cf:67:f4:27:b3:
85:f2:20:46:56:7e:67:e9:9d:c7:f6:d2:94:13:3e:
d2:9d:52:b5:ca:ee:5a:94:cf:1a:49:a2:ed:23:63:
11:02:d5:8d:b5:28:8a:08:fa:b0:f5:9e:9f:85:7c:
c4:70:af:5c:5d:e7:20:be:6e:46:ac:1b:3c:0a:41:
47:9b:af:58:0e:df:3e:b6:24:6d:ba:36:9d:6a:cb:
ec:90:50:ba:a6:9e:a9:99:10:52:36:7a:9d:13:19:
38:3e:72:e8:74:59:fc:7b:e2:77:af:ca:5c:b7:5f:
e9:76:30:60:c5:01:e0:1b:5f:79:6a:75:0c:6b:4e:
e4:5e:b4:58:88:2c:24:7f:21:fa:f6:9c:26:d7:63:
10:25:5b:16:0b:f7:d6:ce:5e:03:a8:c9:c9:0d:cb:
28:6a:c5:1b:6b:50:96:67:42:bb:f6:f2:40:0e:6f:
aa:69:d2:c2:f6:48:bd:c9:f9:f6:88:c2:bc:60:63:
a4:f4:b9:1d:b3:22:bf:b1:1a:05:26:c3:33:fd:ec:
61:9b:85:69:73:e3:40:d9:19:31:49:98:d5:6e:2e:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:53:FD:F9:52:11:4E:D2:E8:BC:D4:66:C9:84:9A:B0:F7:94:F1:43
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.121.0/24
IPv6:
2a13:9500:3f::/48
Signature Algorithm: sha256WithRSAEncryption
62:fe:d9:01:25:5f:a6:1b:25:f0:24:f9:13:56:35:5c:9e:b9:
34:10:9b:24:0b:f9:56:05:e7:d3:7c:9f:07:21:06:ec:55:46:
32:32:07:42:84:60:1f:e3:94:05:7b:d1:70:78:93:38:a2:84:
59:4b:b3:b2:50:16:11:f0:5f:c7:87:84:3d:47:51:79:58:a4:
e8:ad:9e:22:13:5b:0c:ce:7d:d4:83:46:1d:4f:24:e3:d0:38:
47:20:6c:5f:59:4a:01:b7:92:64:f5:f6:ff:a8:46:2d:8e:fd:
b0:7d:aa:c9:c9:95:8f:76:73:e5:30:36:5b:70:fe:6f:ba:d0:
58:c1:24:38:dc:ea:67:da:61:ce:f9:69:a4:10:67:82:a2:6e:
a6:3a:89:7c:68:de:19:e8:88:fb:64:1a:c2:b1:75:9c:b7:d5:
d0:ac:58:b9:a5:33:5e:04:7f:fd:0c:77:87:5b:81:9b:c8:b4:
67:78:d8:68:f0:0c:1e:32:0e:f7:87:a9:41:ba:2a:bc:33:60:
40:98:bd:3d:1c:6b:b8:67:e0:7e:1f:d4:d9:b3:b1:f9:2d:68:
2c:af:ec:21:e1:36:48:32:ad:49:96:5a:75:fd:25:5c:e6:bd:
a0:38:15:6b:3c:a6:bf:35:4e:f8:38:0d:3a:70:94:57:47:01:
9b:58:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:47:30 2026 by rpki-client