Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207940.roa
File: AS207940.roa (raw, json)
Hash identifier: x1FPojyblts1x0Rdecfx4AdHm+iJlccWw0xm9iFmfwQ=
Subject key identifier: 84:49:C2:66:69:EF:D9:D6:EB:F8:87:7D:F7:B4:CD:B3:1A:6F:53:2C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 06A82B2F9EEA414E0A0ABDC0B1DDCA2C24204415
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207940.roa
Signing time: Wed 16 Sep 2026 02:09:11 +0000
ROA not before: Wed 16 Sep 2026 02:04:11 +0000
ROA not after: Wed 15 Sep 2027 02:09:11 +0000
asID: 207940
IP address blocks: 2a0f:85c1:d67::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a8:2b:2f:9e:ea:41:4e:0a:0a:bd:c0:b1:dd:ca:2c:24:20:44:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 16 02:04:11 2026 GMT
Not After : Sep 15 02:09:11 2027 GMT
Subject: CN=8449C26669EFD9D6EBF8877DF7B4CDB31A6F532C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:04:e1:a7:2a:72:89:0d:a0:4f:9d:7d:37:
0c:e3:b6:68:73:19:e2:ba:45:b6:94:80:70:27:f6:
0c:97:c7:d6:dd:5c:b5:64:94:0b:39:a5:c4:57:d5:
ee:46:19:98:27:af:b4:07:9b:68:6d:a2:9b:80:e4:
5b:56:ef:cd:f1:5f:f1:a5:fd:42:49:94:c3:06:a2:
e5:e0:e6:ee:e3:c3:af:ba:b9:1c:62:e9:ab:74:0a:
54:93:88:c4:8f:3a:b9:b8:2d:e0:56:f5:ea:11:c9:
45:4a:34:35:dd:1c:44:9e:16:e2:79:a1:d4:77:1a:
8a:16:85:2c:d1:dc:bb:a8:6c:ec:14:e1:fb:74:98:
34:3c:2b:1e:0c:a2:b1:33:b6:e8:d2:71:23:e7:ab:
6a:4a:21:a7:f4:34:f4:fc:51:92:be:c4:12:7c:35:
a9:e4:b1:d6:75:2b:ac:12:ba:16:b3:ae:78:3e:ad:
a0:4b:48:b4:99:f1:46:77:4f:9b:dc:b4:db:c2:1b:
a2:8f:6d:f0:00:7a:8b:0f:da:63:07:17:5d:1f:91:
23:c5:64:d5:d1:64:1a:6b:fa:9d:1d:b5:29:cc:f2:
4d:4d:88:30:98:a5:2e:a5:e3:d2:0b:d5:da:9b:f8:
fe:50:0d:1f:b8:77:84:9e:7b:44:05:09:05:b6:c5:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:49:C2:66:69:EF:D9:D6:EB:F8:87:7D:F7:B4:CD:B3:1A:6F:53:2C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207940.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d67::/48
Signature Algorithm: sha256WithRSAEncryption
7a:4d:62:91:76:8f:15:f1:53:80:26:36:17:05:33:dc:13:06:
4c:99:24:d9:74:e5:22:d5:8d:48:af:78:6d:e9:c2:ba:51:26:
dc:e9:d4:45:31:03:c0:81:9b:14:45:3c:30:5c:a6:3e:a7:9e:
5e:9c:33:56:41:81:66:13:1e:36:13:a8:28:6c:39:72:d5:94:
06:5d:c3:ae:13:f7:41:42:8c:58:b0:e2:9e:28:92:d1:78:49:
d6:b3:11:46:ef:15:3d:c2:54:14:30:8d:f6:13:d2:ad:f4:07:
e0:f3:9d:b8:5e:53:41:40:03:f7:c3:0a:a8:0a:05:6a:c8:e3:
f6:e1:56:5e:e5:49:40:4d:00:3a:08:a4:47:b8:e8:fa:ef:ff:
e5:3b:d3:84:91:9a:54:a0:3d:15:95:ee:32:71:9b:5d:05:93:
26:b6:db:5b:2d:72:df:9e:08:ff:64:d9:5f:a5:03:06:de:89:
b2:7c:fa:72:0c:43:f5:98:c8:dc:2f:4b:b0:ad:79:d9:da:be:
40:cc:bf:50:83:e3:3e:70:3a:98:f5:6c:27:98:41:10:11:46:
12:f7:75:56:d3:a5:29:6c:1e:cd:56:b3:50:1f:ca:66:20:02:
9d:ef:1f:eb:57:bc:e3:c5:da:56:45:67:39:a6:38:49:30:28:
53:61:67:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:48:45 2026 by rpki-client