Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207258.roa
File: AS207258.roa (raw, json)
Hash identifier: EJniEzQGxU3G16A+W5LgcmO19rmDLeasyoMdMgT96g4=
Subject key identifier: 8A:FE:DA:EA:77:27:61:71:97:F7:83:57:EC:98:CE:73:9B:F3:26:AA
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7DB7F614DE2A925414E134B5ED87CA97FE71C0A7
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207258.roa
Signing time: Tue 15 Sep 2026 21:09:10 +0000
ROA not before: Tue 15 Sep 2026 21:04:10 +0000
ROA not after: Tue 14 Sep 2027 21:09:10 +0000
asID: 207258
IP address blocks: 2a0f:85c1:d68::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b7:f6:14:de:2a:92:54:14:e1:34:b5:ed:87:ca:97:fe:71:c0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 15 21:04:10 2026 GMT
Not After : Sep 14 21:09:10 2027 GMT
Subject: CN=8AFEDAEA7727617197F78357EC98CE739BF326AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:74:9e:56:6a:0a:89:26:37:2a:a4:6b:af:
56:74:e7:13:38:6d:68:13:21:77:38:31:7e:ec:f0:
ee:4b:bd:8d:65:be:d6:ef:47:35:08:0d:fb:32:d5:
58:1a:20:bb:69:68:0f:2e:41:0f:6c:ce:c6:bb:20:
e1:c0:40:f7:ae:03:b3:44:48:a3:44:5e:14:a5:1d:
72:41:e8:d9:51:c4:15:0b:9c:a4:53:8b:cd:10:7a:
5d:b6:7d:6c:26:dc:b8:d6:1a:8b:df:4e:e6:46:0b:
2f:88:bd:16:43:83:fd:9a:e8:c2:00:60:fe:b9:83:
46:8d:d8:c6:0d:f0:5c:f3:6d:19:93:b0:b6:51:c5:
aa:2d:4f:44:3e:d3:75:b1:2b:6a:e9:83:ca:c1:e3:
93:94:63:49:b4:d3:0d:40:d7:f6:3d:8b:d0:53:7d:
e4:e1:db:b4:e8:87:1a:73:18:51:ad:23:37:5c:ff:
28:37:59:8f:af:72:37:ac:32:da:dd:48:34:14:45:
a0:5f:e1:ef:6d:5f:35:0d:c6:a7:dd:2e:6a:10:dc:
2a:3a:a3:14:a1:5c:09:63:87:7a:15:b9:04:6c:9b:
2f:73:7b:fd:ab:ec:68:f1:4c:94:f5:4c:bb:0a:6f:
b9:aa:4e:98:c0:ee:c0:3a:7c:6f:53:c0:8a:69:03:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:DA:EA:77:27:61:71:97:F7:83:57:EC:98:CE:73:9B:F3:26:AA
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207258.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d68::/48
Signature Algorithm: sha256WithRSAEncryption
c8:2f:8d:9b:26:7b:77:92:fc:63:31:b7:f2:d7:9f:00:6a:c5:
b7:11:0d:66:1e:06:04:03:69:c4:da:90:13:24:ba:15:21:00:
64:bc:74:11:6e:47:dc:9b:a1:98:30:3c:70:5e:9a:f0:18:3f:
41:f6:0f:9b:71:11:2d:78:7e:23:84:48:4a:e6:e3:be:14:88:
ba:1e:cd:13:16:e4:85:0b:53:fa:2a:ee:33:1a:99:39:c9:1f:
d7:38:f7:2d:dd:6b:45:01:3a:9e:23:1e:b5:29:7d:33:ba:49:
66:e9:a1:66:42:22:fc:06:57:79:18:c0:d4:60:35:b8:bc:41:
6a:a7:75:34:0a:bc:11:f5:4f:27:50:87:26:fa:b9:c4:88:a7:
e0:df:ac:81:05:d8:8b:85:35:25:f4:7f:66:be:a6:da:b3:de:
10:7c:17:75:dc:b1:99:4c:61:c6:d5:76:48:94:e9:25:51:40:
9b:99:e4:99:9a:1b:20:e7:42:b1:dc:5b:ad:fd:dd:49:8b:a1:
e7:80:ea:fa:bf:77:f1:d6:ce:ca:30:bf:88:60:3a:f3:8c:63:
eb:b0:0d:0b:aa:2f:6c:d1:75:2d:30:2e:e2:ad:f3:a5:bc:2f:
7c:02:b9:00:a1:64:fe:38:e3:02:dd:46:79:c3:0b:5c:e6:ff:
93:b7:07:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:03:13 2026 by rpki-client