Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207019.roa
File: AS207019.roa (raw, json)
Hash identifier: PD2z8cFud/uD+9eom1+7LpkRA8bBV5g895dCUmC2vXM=
Subject key identifier: 0F:95:4F:70:4C:C0:C8:91:98:E7:DF:B4:6D:45:DC:93:C8:EB:7E:4B
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 13648D2020C5EE9D84EB0D7E9CEEB431678F690B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207019.roa
Signing time: Mon 27 Oct 2025 05:06:23 +0000
ROA not before: Mon 27 Oct 2025 05:01:23 +0000
ROA not after: Mon 26 Oct 2026 05:06:23 +0000
asID: 207019
IP address blocks: 193.151.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:64:8d:20:20:c5:ee:9d:84:eb:0d:7e:9c:ee:b4:31:67:8f:69:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 27 05:01:23 2025 GMT
Not After : Oct 26 05:06:23 2026 GMT
Subject: CN=0F954F704CC0C89198E7DFB46D45DC93C8EB7E4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:23:cb:39:76:c3:0d:84:1c:5a:b2:f2:6d:
c3:27:26:1e:8d:a3:4a:c6:fc:fe:14:1a:46:f4:da:
73:b0:2d:ea:c8:c5:58:4b:0d:e4:b8:d9:a8:6a:4d:
33:e0:28:84:30:76:1d:8a:58:01:be:a9:0c:9b:3d:
39:34:b5:6f:78:c5:9d:5f:79:aa:0e:9d:5b:b1:29:
b0:ea:8b:9e:f6:a8:4f:3b:73:e4:12:ac:c2:09:46:
a3:78:01:3c:66:a4:4a:c6:e3:93:d7:b8:45:ee:fb:
38:8e:e5:e4:54:09:ec:a5:bf:09:cb:27:09:09:a7:
68:ee:1f:59:1d:b7:19:d6:56:bb:fe:34:1e:d7:21:
76:ca:12:5e:45:31:bb:36:77:82:49:5a:7a:e7:6f:
23:e8:00:99:e8:63:52:1c:fc:32:3f:fd:50:a6:70:
d6:56:3e:89:b5:39:1b:7e:8d:f2:3e:2d:e4:ac:9c:
12:1c:03:f4:88:ca:be:1c:d7:29:a7:60:24:6b:37:
7a:1a:56:cb:9e:25:79:70:d3:4d:ba:ff:31:29:22:
61:df:b3:c5:c5:cd:96:fe:db:d8:aa:68:bb:b0:f9:
19:7c:51:da:96:70:4f:41:0d:ef:3a:c9:fa:2c:47:
9a:fa:ac:31:05:a9:d2:2f:47:e5:c7:82:8d:82:a9:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:95:4F:70:4C:C0:C8:91:98:E7:DF:B4:6D:45:DC:93:C8:EB:7E:4B
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.181.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8a:49:8a:28:d1:2a:f9:64:27:19:06:fb:19:5c:4c:a9:a2:
e3:48:4d:e7:e8:93:a0:28:19:c3:8f:0d:b2:9f:1c:7a:60:f3:
1a:6c:53:00:5e:72:b1:ce:80:6a:77:93:1f:6f:53:e7:2d:f4:
6a:98:48:59:e9:db:2f:74:e9:31:b1:fa:fd:4d:87:3a:97:17:
d8:d6:b0:89:44:42:72:81:dc:a5:49:9a:8e:c3:11:2f:b4:28:
ce:9f:4a:b1:53:70:8c:af:65:cf:db:ec:98:d1:ea:2c:ce:2a:
81:dc:1c:41:e4:2a:6c:1e:7b:0a:e8:b3:f8:ff:5f:36:60:19:
14:76:a9:32:ba:89:16:76:fb:09:6a:ac:f7:96:5a:b0:01:2f:
b1:ca:0a:85:75:b1:cb:fa:4e:cc:45:6a:b6:07:c2:7c:e9:57:
d1:b5:8e:c4:6c:0d:bf:d5:fc:67:61:07:cc:c4:2f:4c:8f:d3:
0e:05:d0:37:cd:e9:4e:7e:4a:93:d0:aa:3b:64:a0:4b:9c:d0:
11:d8:82:00:ae:a8:4d:17:29:1e:ab:ea:9e:89:90:8f:af:ad:
1f:32:f9:b9:eb:34:9f:bb:f8:60:fd:a7:65:da:3d:49:e0:c3:
f7:e3:47:07:4e:f5:50:92:53:79:cb:66:dc:58:7f:6b:a5:86:
3b:7c:df:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUE2SNICDF7p2E6w1+nO60MWePaQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTEwMjcwNTAxMjNaFw0yNjEwMjYwNTA2MjNaMDMxMTAvBgNV
BAMTKDBGOTU0RjcwNENDMEM4OTE5OEU3REZCNDZENDVEQzkzQzhFQjdFNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh9iPLOXbDDYQcWrLybcMnJh6N
o0rG/P4UGkb02nOwLerIxVhLDeS42ahqTTPgKIQwdh2KWAG+qQybPTk0tW94xZ1f
eaoOnVuxKbDqi572qE87c+QSrMIJRqN4ATxmpErG45PXuEXu+ziO5eRUCeylvwnL
JwkJp2juH1kdtxnWVrv+NB7XIXbKEl5FMbs2d4JJWnrnbyPoAJnoY1Ic/DI//VCm
cNZWPom1ORt+jfI+LeSsnBIcA/SIyr4c1ymnYCRrN3oaVsueJXlw0026/zEpImHf
s8XFzZb+29iqaLuw+Rl8UdqWcE9BDe86yfosR5r6rDEFqdIvR+XHgo2Cqbb7AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUD5VPcEzAyJGY59+0bUXck8jrfkswHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjA3MDE5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZe1
MA0GCSqGSIb3DQEBCwUAA4IBAQBwikmKKNEq+WQnGQb7GVxMqaLjSE3n6JOgKBnD
jw2ynxx6YPMabFMAXnKxzoBqd5Mfb1PnLfRqmEhZ6dsvdOkxsfr9TYc6lxfY1rCJ
REJygdylSZqOwxEvtCjOn0qxU3CMr2XP2+yY0eosziqB3BxB5CpsHnsK6LP4/182
YBkUdqkyuokWdvsJaqz3llqwAS+xygqFdbHL+k7MRWq2B8J86VfRtY7EbA2/1fxn
YQfMxC9Mj9MOBdA3zelOfkqT0Ko7ZKBLnNAR2IIArqhNFykeq+qeiZCPr60fMvm5
6zSfu/hg/adl2j1J4MP340cHTvVQklN5y2bcWH9rpYY7fN+r
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:29:38 2025 by rpki-client