Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207972.roa
File: AS207972.roa (raw, json)
Hash identifier: FTb6GJbIxFkiVxg90KzNglPBtLi2Dj8tZrbRRjVPspQ=
Subject key identifier: 02:5B:AB:B0:14:34:F6:9B:76:BA:C9:13:FC:79:C4:47:17:7E:74:3C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0F17E2BDB7D2A91549FEE19DC6770A43F43CBBCF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207972.roa
Signing time: Tue 10 Jun 2025 23:02:41 +0000
ROA not before: Tue 10 Jun 2025 22:57:41 +0000
ROA not after: Tue 09 Jun 2026 23:02:41 +0000
asID: 207972
IP address blocks: 2a0f:85c1:c4d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:17:e2:bd:b7:d2:a9:15:49:fe:e1:9d:c6:77:0a:43:f4:3c:bb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 10 22:57:41 2025 GMT
Not After : Jun 9 23:02:41 2026 GMT
Subject: CN=025BABB01434F69B76BAC913FC79C447177E743C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:71:e9:75:69:76:c8:ba:d6:44:29:84:69:
99:82:cc:0e:f8:6e:f8:38:e4:6c:4c:fe:30:a8:bb:
2b:ef:66:f4:e0:5d:c1:e5:93:7a:36:d1:01:5e:c5:
2f:47:21:03:fa:9c:18:70:47:14:5e:45:8e:2d:7f:
b6:0f:8e:6a:d2:78:60:76:a8:1f:e3:62:21:3e:09:
89:7a:bf:ee:10:cf:c6:2c:2c:48:ba:91:7b:3f:06:
a2:76:ae:8f:0e:71:7c:53:35:a9:a6:ea:df:4d:db:
57:10:25:4d:39:58:05:23:40:b0:c3:ed:eb:71:3f:
8e:7d:e9:18:9a:4c:6b:4c:94:af:9a:3a:ea:8c:48:
df:59:ae:aa:1f:0a:c9:90:10:b6:e6:88:ef:07:80:
48:63:da:b5:bd:d4:0a:5c:1e:52:93:da:63:e3:5a:
ee:b7:60:13:ec:3f:31:ba:d7:04:04:5a:c9:a7:d5:
7b:ee:59:46:7a:33:74:34:a7:bc:4b:a1:0e:96:61:
d8:db:a0:5b:53:30:a9:54:f8:3f:a1:3d:7b:56:9a:
7c:2d:73:06:30:68:14:95:c1:ce:20:06:97:17:6f:
fd:7d:1a:5b:47:fb:7a:e6:95:a7:0a:b3:3a:4b:06:
27:5e:d5:47:5b:c5:19:4f:e3:87:f2:3d:70:0d:2a:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5B:AB:B0:14:34:F6:9B:76:BA:C9:13:FC:79:C4:47:17:7E:74:3C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207972.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c4d::/48
Signature Algorithm: sha256WithRSAEncryption
1d:2d:d9:96:39:b6:6d:be:84:bb:37:e4:1e:5f:6c:14:df:bb:
b0:29:23:4c:51:7b:c2:8f:29:c1:5d:79:20:91:31:2d:de:47:
a9:e0:79:da:02:cb:fa:94:b9:a6:0f:a1:a5:98:d0:5d:62:7d:
99:97:75:5a:89:82:2a:e1:c9:2e:3a:ec:3e:25:9f:60:13:cd:
68:65:33:2c:10:ff:27:a0:70:be:4f:92:72:01:be:58:f4:17:
eb:38:2a:56:30:ee:4c:89:b1:88:01:be:cb:7f:4f:42:53:40:
8b:9d:08:c3:3d:e3:4a:e8:38:4b:68:21:54:01:79:70:f1:2c:
8e:6c:eb:97:0c:61:5d:71:b2:15:3d:a2:dc:22:a3:03:58:e3:
8d:35:55:52:1e:76:e6:a8:6e:3e:99:f9:0f:54:89:a2:c1:5d:
6f:9d:f9:ad:d7:06:2d:8a:27:e5:93:87:1a:b5:69:e9:73:39:
58:68:fc:ea:95:2c:e6:62:83:60:d0:e1:20:7b:30:f1:74:83:
a8:eb:f7:b8:73:43:42:81:72:85:33:6e:0a:34:fa:eb:c3:3c:
17:95:db:f9:1e:b0:50:da:1e:73:34:2d:31:2d:1f:6f:13:5b:
df:9e:b3:79:28:57:7d:47:7e:2f:b8:fa:70:bd:7f:52:13:3b:
55:95:49:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUDxfivbfSqRVJ/uGdxncKQ/Q8u88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA2MTAyMjU3NDFaFw0yNjA2MDkyMzAyNDFaMDMxMTAvBgNV
BAMTKDAyNUJBQkIwMTQzNEY2OUI3NkJBQzkxM0ZDNzlDNDQ3MTc3RTc0M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW53HpdWl2yLrWRCmEaZmCzA74
bvg45GxM/jCouyvvZvTgXcHlk3o20QFexS9HIQP6nBhwRxReRY4tf7YPjmrSeGB2
qB/jYiE+CYl6v+4Qz8YsLEi6kXs/BqJ2ro8OcXxTNamm6t9N21cQJU05WAUjQLDD
7etxP4596RiaTGtMlK+aOuqMSN9ZrqofCsmQELbmiO8HgEhj2rW91ApcHlKT2mPj
Wu63YBPsPzG61wQEWsmn1XvuWUZ6M3Q0p7xLoQ6WYdjboFtTMKlU+D+hPXtWmnwt
cwYwaBSVwc4gBpcXb/19GltH+3rmlacKszpLBide1UdbxRlP44fyPXANKjg7AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUAlursBQ09pt2uskT/HnERxd+dDwwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA3OTcyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQxNMA0GCSqGSIb3DQEBCwUAA4IBAQAdLdmWObZtvoS7N+QeX2wU37uwKSNMUXvC
jynBXXkgkTEt3kep4HnaAsv6lLmmD6GlmNBdYn2Zl3VaiYIq4ckuOuw+JZ9gE81o
ZTMsEP8noHC+T5JyAb5Y9BfrOCpWMO5MibGIAb7Lf09CU0CLnQjDPeNK6DhLaCFU
AXlw8SyObOuXDGFdcbIVPaLcIqMDWOONNVVSHnbmqG4+mfkPVImiwV1vnfmt1wYt
iiflk4catWnpczlYaPzqlSzmYoNg0OEgezDxdIOo6/e4c0NCgXKFM24KNPrrwzwX
ldv5HrBQ2h5zNC0xLR9vE1vfnrN5KFd9R34vuPpwvX9SEztVlUnU
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:25:18 2025 by rpki-client