Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207992.roa
File: AS207992.roa (raw, json)
Hash identifier: 9cNtj01V4KmnkKtukKqzUQjeetEzkYSAwhvi/gDcZ64=
Subject key identifier: E4:FE:47:4F:9B:AD:79:DE:FB:78:13:69:07:AD:D6:51:F9:CB:C7:B2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6C64183006A0779EF4302CD2F8D2D15908902F33
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207992.roa
Signing time: Fri 25 Jul 2025 11:20:58 +0000
ROA not before: Fri 25 Jul 2025 11:15:58 +0000
ROA not after: Fri 24 Jul 2026 11:20:58 +0000
asID: 207992
IP address blocks: 2a13:9500:4f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:64:18:30:06:a0:77:9e:f4:30:2c:d2:f8:d2:d1:59:08:90:2f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 25 11:15:58 2025 GMT
Not After : Jul 24 11:20:58 2026 GMT
Subject: CN=E4FE474F9BAD79DEFB78136907ADD651F9CBC7B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:8a:61:da:fe:42:58:c0:05:29:2b:bd:65:
c7:97:53:98:0c:b4:b9:d0:5c:29:b0:f0:42:1a:e1:
d1:6d:9f:8d:e2:03:55:f8:b3:10:61:f0:0d:aa:a1:
4b:28:72:bf:35:64:7d:0a:e3:c1:3e:05:48:da:68:
d6:cb:a6:90:43:9c:bd:fd:65:71:3a:9e:48:35:cb:
2e:9c:0d:61:2c:3c:48:08:90:79:95:bd:15:53:17:
90:af:ff:df:6f:f6:40:56:c4:d7:7a:16:9a:b7:3c:
b6:a1:72:e2:b3:d3:34:ae:e8:11:9f:fe:52:42:e1:
74:40:68:96:f2:f5:96:02:78:be:53:e5:da:cc:70:
38:3c:06:06:2e:79:4c:ee:44:eb:e9:ce:b9:14:c0:
fa:21:21:de:22:da:cb:1b:63:fe:4b:6d:86:d0:f9:
14:62:ae:f9:32:68:22:05:1c:1e:79:2e:45:f8:09:
0c:39:be:51:78:fb:de:0a:e5:06:b9:c5:7f:24:2d:
6b:f9:1e:31:b2:83:0a:cd:88:30:c7:e9:68:fd:e0:
1d:d1:b7:be:ef:c3:64:dd:37:72:6c:94:b7:b6:19:
f2:b8:0a:41:dc:74:97:9b:57:11:33:65:44:b9:02:
05:9f:8f:79:87:15:43:f4:34:9e:77:cd:2e:b6:19:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FE:47:4F:9B:AD:79:DE:FB:78:13:69:07:AD:D6:51:F9:CB:C7:B2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:4f::/48
Signature Algorithm: sha256WithRSAEncryption
9b:f1:d1:d8:b3:fe:be:aa:eb:4d:d0:36:99:79:c9:41:52:f7:
24:c8:6f:49:15:c5:73:4d:b7:3b:7f:73:25:1d:87:d9:1d:e1:
0a:7d:c0:af:08:1b:ee:da:ec:ce:a6:bb:d6:02:68:e0:65:1d:
b3:63:ac:6c:3c:0f:ea:e0:5f:f1:cb:72:3d:c4:85:8d:77:e7:
92:74:6e:54:a9:dc:99:e0:a9:19:cf:6f:59:29:b9:39:6a:34:
36:ef:dc:cb:c8:1a:49:52:0f:77:a3:74:90:8c:2b:04:a3:ae:
81:e3:83:a6:4d:b0:f6:3f:b7:32:bb:46:83:de:1a:e8:b4:78:
38:a8:51:c8:24:a2:0e:25:6d:b2:5a:b0:71:52:df:74:78:6d:
c3:36:8e:98:d2:46:2f:44:35:50:48:ac:7a:eb:38:86:ef:54:
2c:89:98:bd:3c:e6:bc:b8:ac:69:cd:c6:2a:7e:ec:3c:7e:57:
e9:5b:4f:d3:1c:51:ae:de:5f:49:92:71:66:03:0b:6c:27:0f:
ad:f5:3e:56:39:5a:7a:e5:e5:d7:4d:8d:6b:3d:e7:d0:a1:96:
97:58:6c:7f:94:cd:15:fb:44:48:54:84:9b:1f:3f:25:23:6e:
c9:e5:75:0b:0c:fb:65:b2:d5:af:c9:13:35:15:45:d0:81:93:
0d:6c:2f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:39:21 2025 by rpki-client