Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207841.roa
File: AS207841.roa (raw, json)
Hash identifier: mI3f+j8/MZf8Ti8o1PpenmVsjzm4xJ4vlS0yL/3TIwc=
Subject key identifier: 01:BD:28:D5:00:B5:F6:D2:E3:EC:32:6A:E3:11:A5:F0:DD:22:10:85
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5F45427C3A11F775B25A99C890799AA225CB0F59
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207841.roa
Signing time: Sun 12 Apr 2026 03:08:31 +0000
ROA not before: Sun 12 Apr 2026 03:03:31 +0000
ROA not after: Sun 11 Apr 2027 03:08:31 +0000
asID: 207841
IP address blocks: 62.164.141.0/24 maxlen: 24
193.57.144.0/24 maxlen: 24
193.57.159.0/24 maxlen: 24
193.57.168.0/24 maxlen: 24
2a0f:85c0::/48 maxlen: 48
2a0f:85c0:1::/48 maxlen: 48
2a0f:85c2::/32 maxlen: 48
2a0f:85c2::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:45:42:7c:3a:11:f7:75:b2:5a:99:c8:90:79:9a:a2:25:cb:0f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 12 03:03:31 2026 GMT
Not After : Apr 11 03:08:31 2027 GMT
Subject: CN=01BD28D500B5F6D2E3EC326AE311A5F0DD221085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:a3:e2:00:84:70:cc:d5:63:13:94:15:df:
2b:b3:cb:54:5e:2c:6f:f1:bf:3c:ae:14:2f:df:5f:
bd:06:23:73:44:e1:f3:ef:6a:f8:53:6e:11:63:b3:
e9:e7:b6:b2:68:d6:04:46:0d:f0:ec:04:9c:2f:4b:
38:e7:f2:93:4f:cf:14:16:fd:27:2e:3b:b7:7a:6c:
bd:20:62:52:4f:a3:f1:e2:7c:79:1f:bc:3f:1e:09:
e1:7b:6c:e6:3b:ff:2b:23:85:12:2d:a1:2d:55:9c:
56:0c:ad:ce:b1:4f:6c:9c:41:cd:c2:3a:6f:a8:ef:
99:73:53:6c:4c:39:f6:74:10:e1:7e:66:0c:61:e1:
7a:3d:ca:47:b7:8e:b4:9e:90:e3:01:37:12:e1:ed:
98:e5:32:a4:83:f2:cf:b0:62:ac:46:cf:f8:aa:79:
31:6e:65:e3:3f:4a:32:fb:1d:b1:35:1b:bf:4b:d0:
85:2e:ef:ce:32:4c:91:c0:5f:f9:1a:07:ab:7d:ff:
c4:cf:28:97:03:98:11:2c:6d:f7:84:20:1c:4d:46:
39:1f:f0:c7:6e:68:a9:f2:40:6e:d2:84:25:61:a2:
ff:24:04:e6:19:e4:6b:72:51:c9:f7:fa:c9:7f:73:
2c:36:54:46:8d:9b:ce:92:89:2a:5f:3a:ba:90:1b:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BD:28:D5:00:B5:F6:D2:E3:EC:32:6A:E3:11:A5:F0:DD:22:10:85
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.141.0/24
193.57.144.0/24
193.57.159.0/24
193.57.168.0/24
IPv6:
2a0f:85c0::/47
2a0f:85c2::/32
Signature Algorithm: sha256WithRSAEncryption
e6:e5:6d:aa:1d:4d:92:3b:49:31:41:24:c0:86:57:37:15:b8:
07:38:b2:79:26:0e:cd:a5:4b:86:34:58:8c:6d:6b:0f:39:2b:
c9:bf:3f:41:82:97:41:24:81:4a:04:53:21:18:d6:1d:60:87:
7f:4c:52:27:9b:a2:38:70:9e:2e:3d:5a:8c:db:99:24:9f:15:
5d:09:7f:3a:10:07:bd:fa:59:e6:9c:b5:57:70:22:9c:55:77:
9f:d0:eb:2e:aa:b5:ef:bd:e1:4c:46:44:e3:28:91:43:12:ef:
69:b9:b7:ce:82:f4:55:04:d2:34:f6:cc:a3:84:78:c5:65:b4:
d7:7e:47:0f:f2:bf:ab:92:0b:1b:b4:c6:83:dc:a9:a3:84:70:
65:64:8c:13:9a:a8:a4:19:07:1e:9c:2a:fa:61:d8:01:fd:6c:
da:b7:2b:55:c6:36:4c:17:5f:48:f0:e9:fe:4c:70:0a:46:bd:
6d:37:84:81:77:78:36:6e:a8:1d:40:ac:39:9e:e2:f7:45:ba:
34:0e:34:a2:43:ee:58:15:74:dc:26:b8:c6:c8:ab:18:61:99:
7c:dd:79:41:c9:c4:f7:99:17:2a:ea:ce:01:1b:c0:80:62:be:
5f:9e:cd:b0:d1:d7:e9:92:31:99:5e:ea:01:06:81:18:ac:dc:
32:65:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:56:30 2026 by rpki-client