Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207847.roa
File: AS207847.roa (raw, json)
Hash identifier: 0I4E3yFDYWlEAg2oED2D4Bzr/VG7O54rNRRgk75Agrk=
Subject key identifier: 52:34:82:1B:B3:13:87:74:14:AD:99:01:D6:5E:23:33:86:AB:CC:DE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4CA551F79CAB783A141C48A22DD63AD72F0CA193
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207847.roa
Signing time: Tue 05 Aug 2025 12:58:56 +0000
ROA not before: Tue 05 Aug 2025 12:53:56 +0000
ROA not after: Tue 04 Aug 2026 12:58:56 +0000
asID: 207847
IP address blocks: 2a13:9500:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a5:51:f7:9c:ab:78:3a:14:1c:48:a2:2d:d6:3a:d7:2f:0c:a1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 5 12:53:56 2025 GMT
Not After : Aug 4 12:58:56 2026 GMT
Subject: CN=5234821BB313877414AD9901D65E233386ABCCDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:72:4e:93:2b:ba:de:75:3b:1b:e3:34:80:
87:70:d3:34:83:d0:a0:d9:bb:eb:08:91:f1:75:81:
45:03:89:83:8c:3f:0b:a1:4b:c3:19:25:54:6f:76:
fa:4f:c4:b5:86:d2:9a:bc:da:c2:f0:8d:d3:93:3a:
aa:87:6f:03:3b:a7:04:c7:1d:df:44:36:df:65:3a:
f4:cb:e6:e2:a4:d7:1a:3f:fe:9c:6e:90:b9:9b:20:
6c:e9:98:ce:7f:44:0a:82:87:81:6e:fb:80:95:13:
59:9f:f0:d0:76:8e:f3:c0:86:92:16:c7:de:6e:00:
da:a4:2a:a2:67:be:5b:68:1a:75:8c:d3:0e:46:4c:
44:a3:0e:b7:63:89:2e:3c:6d:5e:c4:5f:62:2d:e4:
3b:c1:8f:40:ac:5b:12:f7:c0:e3:c8:d1:e8:e2:6a:
99:95:bd:39:e7:46:b2:99:5f:73:15:a1:d4:4d:80:
3d:21:4e:0c:34:e7:ef:9e:5f:5f:d7:76:66:7d:42:
4d:25:c2:4a:56:80:2c:42:91:60:20:17:22:88:2d:
a4:4a:1d:1d:23:9c:1c:09:13:d4:cc:53:cc:8a:e3:
6d:9a:d8:cc:0a:05:ee:e9:50:d9:0c:dc:2f:e3:4d:
23:d0:ea:9c:c1:9a:09:35:f1:2c:63:56:b1:f2:37:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:82:1B:B3:13:87:74:14:AD:99:01:D6:5E:23:33:86:AB:CC:DE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:3f::/48
Signature Algorithm: sha256WithRSAEncryption
23:04:c2:3e:39:68:25:7a:82:c3:3d:dd:81:3c:23:ea:5d:36:
43:15:f2:b7:fe:87:53:c2:19:d1:2b:12:ab:0f:13:00:00:8a:
58:69:4e:da:32:5b:22:ec:4f:28:e4:49:b4:fd:e5:2f:34:91:
31:95:73:56:07:7c:91:2c:e9:52:3d:bc:8a:c1:10:7d:ea:bc:
de:8e:5b:ed:36:77:5f:79:83:cd:6e:08:a0:ea:fa:57:80:63:
8c:77:b6:3e:41:e8:58:03:4d:b3:9f:60:0c:a5:da:d4:a7:23:
f7:3a:da:06:e6:79:c5:96:fb:8f:85:16:7a:c2:1f:ac:30:0b:
05:99:8e:83:ad:38:4e:b5:49:22:c9:e2:7d:de:29:a0:f9:b2:
dc:34:e4:57:5a:8a:c4:17:52:58:ba:65:0d:7b:4e:a9:8f:70:
be:c4:dc:14:b3:56:a2:8d:02:f1:b7:61:1c:09:c4:2a:11:e4:
ec:ff:1b:bf:10:16:14:dd:1b:6e:aa:54:61:3a:8f:69:65:a1:
a1:13:7b:dc:ae:11:f2:2c:f1:23:48:71:b8:08:19:f2:1d:56:
36:db:78:5c:6b:87:72:16:15:4b:99:cb:28:6c:d0:eb:d2:1e:
69:6c:48:19:5a:27:a2:e2:07:bd:c4:8f:5a:75:54:92:08:ac:
6d:d5:6b:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUTKVR95yreDoUHEiiLdY61y8MoZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA4MDUxMjUzNTZaFw0yNjA4MDQxMjU4NTZaMDMxMTAvBgNV
BAMTKDUyMzQ4MjFCQjMxMzg3NzQxNEFEOTkwMUQ2NUUyMzMzODZBQkNDREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYXJOkyu63nU7G+M0gIdw0zSD
0KDZu+sIkfF1gUUDiYOMPwuhS8MZJVRvdvpPxLWG0pq82sLwjdOTOqqHbwM7pwTH
Hd9ENt9lOvTL5uKk1xo//pxukLmbIGzpmM5/RAqCh4Fu+4CVE1mf8NB2jvPAhpIW
x95uANqkKqJnvltoGnWM0w5GTESjDrdjiS48bV7EX2It5DvBj0CsWxL3wOPI0eji
apmVvTnnRrKZX3MVodRNgD0hTgw05++eX1/XdmZ9Qk0lwkpWgCxCkWAgFyKILaRK
HR0jnBwJE9TMU8yK422a2MwKBe7pUNkM3C/jTSPQ6pzBmgk18SxjVrHyNwh5AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUUjSCG7MTh3QUrZkB1l4jM4arzN4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA3ODQ3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAA/MA0GCSqGSIb3DQEBCwUAA4IBAQAjBMI+OWgleoLDPd2BPCPqXTZDFfK3/odT
whnRKxKrDxMAAIpYaU7aMlsi7E8o5Em0/eUvNJExlXNWB3yRLOlSPbyKwRB96rze
jlvtNndfeYPNbgig6vpXgGOMd7Y+QehYA02zn2AMpdrUpyP3OtoG5nnFlvuPhRZ6
wh+sMAsFmY6DrThOtUkiyeJ93img+bLcNORXWorEF1JYumUNe06pj3C+xNwUs1ai
jQLxt2EcCcQqEeTs/xu/EBYU3RtuqlRhOo9pZaGhE3vcrhHyLPEjSHG4CBnyHVY2
23hca4dyFhVLmcsobNDr0h5pbEgZWiei4ge9xI9adVSSCKxt1WtZ
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:50 2025 by rpki-client