Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207847.roa
File: AS207847.roa (raw, json)
Hash identifier: EaOVADt+1fniObqWiLleQ4+eD+0Vgzs92eZhnq4NMUE=
Subject key identifier: 6D:C6:B7:FF:EB:9F:51:EA:3E:FB:6F:B5:67:B6:52:73:DB:22:97:A5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0D7B135227E89B64C3A76FFF1003D283EBDCD13D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207847.roa
Signing time: Sun 13 Sep 2026 14:40:30 +0000
ROA not before: Sun 13 Sep 2026 14:35:30 +0000
ROA not after: Sun 12 Sep 2027 14:40:30 +0000
asID: 207847
IP address blocks: 178.83.121.0/24 maxlen: 24
178.83.122.0/24 maxlen: 24
2a13:9500:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:7b:13:52:27:e8:9b:64:c3:a7:6f:ff:10:03:d2:83:eb:dc:d1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 13 14:35:30 2026 GMT
Not After : Sep 12 14:40:30 2027 GMT
Subject: CN=6DC6B7FFEB9F51EA3EFB6FB567B65273DB2297A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:17:b3:f4:37:94:25:03:c9:1f:09:4a:df:
98:90:fb:14:db:d4:23:e6:df:18:bb:51:90:7b:f8:
1f:86:9e:af:99:80:a8:08:e2:b7:44:6a:96:7f:26:
e9:20:24:78:06:16:a0:71:bc:75:25:af:df:75:f5:
2a:00:d6:17:ed:b4:1f:d1:53:8f:fd:22:7e:47:6e:
35:90:c4:de:87:a4:26:28:5e:c9:c4:8d:df:dc:22:
bb:e1:2a:a6:dc:a4:61:51:4e:45:0e:60:05:86:f1:
95:e0:e0:26:7b:29:e1:8f:4a:06:52:a3:7b:98:4c:
71:d2:24:19:b6:d0:c7:9d:ce:d1:2a:45:28:9f:8a:
a4:97:62:77:c1:53:c2:11:2e:58:cb:16:34:4f:b9:
fd:eb:3b:f9:44:f4:16:a4:fd:a9:63:55:8f:6c:6b:
31:8b:50:ca:8d:49:20:32:89:c6:6c:7d:23:97:f0:
9d:66:11:bc:bc:d2:b1:92:54:e8:11:6b:d1:6a:78:
79:00:74:5c:83:05:4e:89:05:51:9b:6c:b9:c1:dd:
34:5a:11:76:3f:cb:95:34:f8:00:00:e3:4c:d1:a0:
e1:0c:cb:bd:60:f3:30:9b:4d:52:33:56:76:c3:3e:
f4:d1:a1:fe:2d:07:e3:f0:2a:f7:d3:65:e9:11:8e:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C6:B7:FF:EB:9F:51:EA:3E:FB:6F:B5:67:B6:52:73:DB:22:97:A5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.121.0-178.83.122.255
IPv6:
2a13:9500:3f::/48
Signature Algorithm: sha256WithRSAEncryption
12:01:87:48:5b:69:a2:ad:92:93:da:50:c1:38:dc:84:70:b6:
3c:92:f6:7a:0d:04:b9:de:64:ab:f3:0b:01:b5:94:75:94:f6:
45:81:b8:c8:98:78:8d:0b:e9:4e:97:ab:33:52:79:54:09:78:
82:b5:b8:7a:7e:9c:d2:7f:c8:aa:02:06:c8:c7:c4:09:9b:06:
86:c4:1f:0f:3c:61:d3:f7:96:8e:a2:53:58:99:99:16:9e:c6:
97:86:99:1f:ea:0d:f9:a6:57:ac:83:93:c4:05:13:fd:21:ea:
9b:dd:ad:6f:a2:c3:f5:2c:ce:48:92:00:49:7b:89:2c:e4:8e:
9c:67:0c:77:aa:21:cf:e3:e0:4c:af:a4:e1:b3:fb:ee:ef:28:
51:c3:62:f9:f0:1c:a3:44:64:f5:75:b1:70:b5:88:da:db:bf:
4c:0a:3c:e4:73:a9:84:df:93:df:66:17:a2:82:55:ed:78:b5:
37:0d:4c:a2:5f:86:76:6b:68:c0:16:9d:e0:47:5c:b8:be:e0:
60:07:a4:2b:d3:22:bf:a4:ca:a6:64:e8:3c:95:2b:47:05:cc:
f7:96:aa:cc:16:e5:d6:27:7f:97:e3:1c:48:62:e5:b4:c4:78:
56:83:91:76:80:8c:27:4c:16:48:7b:e4:0c:a6:6c:4c:a0:8f:
f9:10:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:14:55 2026 by rpki-client