Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207529.roa
File: AS207529.roa (raw, json)
Hash identifier: 9s2dw3XcvjED2ORiVoZPp9fg45Cb7jYoS+UtonSwyRs=
Subject key identifier: F2:C2:AA:5A:5F:93:BB:6B:5D:BC:D9:9D:1F:1E:B7:29:BD:80:80:B7
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6E77E4737A4FD26F0FEE9DF7678F7DAB01DA9C48
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207529.roa
Signing time: Wed 11 Jun 2025 11:07:06 +0000
ROA not before: Wed 11 Jun 2025 11:02:06 +0000
ROA not after: Wed 10 Jun 2026 11:07:06 +0000
asID: 207529
IP address blocks: 2a14:7580:fff5::/48 maxlen: 48
2a14:7581:3000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:77:e4:73:7a:4f:d2:6f:0f:ee:9d:f7:67:8f:7d:ab:01:da:9c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 11 11:02:06 2025 GMT
Not After : Jun 10 11:07:06 2026 GMT
Subject: CN=F2C2AA5A5F93BB6B5DBCD99D1F1EB729BD8080B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:66:4d:c0:f1:17:00:ad:87:99:8e:a2:d5:
67:11:e9:de:be:3b:c1:7f:15:56:93:a2:18:22:41:
3f:7b:49:e9:d5:99:9a:77:f6:31:8c:19:99:bd:be:
90:74:91:ae:4d:3e:b6:1d:8a:5b:de:3e:e7:b1:f6:
c4:1d:c5:87:04:51:4a:01:50:ca:bd:27:a6:d2:48:
ad:db:45:d0:ad:ac:a7:a1:f7:2d:ee:79:fa:19:f2:
5a:47:35:bf:67:19:4f:6c:b8:b9:d6:9d:50:b4:8f:
8a:9b:6d:86:75:76:ca:c1:11:6c:78:98:8b:33:e7:
de:b3:20:69:3a:f5:54:5f:db:d7:20:ab:a5:5f:ac:
48:0f:a0:36:1c:72:ba:91:a0:36:48:35:fb:98:aa:
67:f5:2c:ee:3a:3f:2d:71:3b:c1:b0:25:e5:84:86:
16:b6:98:7f:45:3c:82:43:9b:2a:a9:3c:37:2f:03:
c3:9f:33:8b:9d:55:a2:f4:11:24:05:e0:a4:eb:ee:
bb:a6:59:4f:da:e2:68:c8:34:6e:08:f4:bd:47:58:
2e:6d:8d:6f:d6:3c:3f:d0:2c:22:f7:1f:8f:f9:fb:
aa:d2:4d:f5:8c:3d:b9:6c:a5:14:a1:7f:3f:aa:9a:
b5:d2:02:26:dd:83:a3:6a:7b:fe:86:42:22:fb:6f:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C2:AA:5A:5F:93:BB:6B:5D:BC:D9:9D:1F:1E:B7:29:BD:80:80:B7
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff5::/48
2a14:7581:3000::/40
Signature Algorithm: sha256WithRSAEncryption
1d:ab:5f:25:70:75:75:eb:fe:f0:96:5c:83:8c:da:2b:a0:e7:
58:d1:c3:36:42:6a:d5:98:db:a7:ff:6f:77:17:8a:8a:88:6c:
1e:99:bb:52:03:95:b7:f6:f3:e6:35:95:11:e0:70:fd:34:b9:
67:4c:73:51:07:23:be:ed:22:13:ef:ca:9b:f0:44:51:24:17:
07:c1:8d:ab:d6:f3:27:62:17:7e:7f:da:f8:07:ea:b7:1e:29:
09:8d:2e:59:9f:6c:c1:e6:bf:8f:3d:25:19:37:6e:d0:22:9b:
3a:94:3c:8c:f8:43:62:d9:47:c7:82:08:65:13:ba:5a:86:ad:
7a:d3:bb:1c:cf:aa:0b:4b:06:65:ca:56:1f:01:cc:a0:fe:21:
b0:50:ca:db:66:49:bf:de:4e:60:63:e4:a3:e6:e8:32:4e:ad:
4d:35:eb:5e:6f:f5:8b:ac:e2:f9:ff:a6:e9:3d:75:f7:0f:ee:
a8:20:30:d3:f8:85:a7:a9:eb:89:76:b5:da:8e:03:f5:a0:24:
d0:67:5e:aa:11:89:81:7e:0e:85:69:b1:57:bb:37:2d:7f:19:
f0:df:22:30:4f:e7:b9:b2:87:36:75:64:5d:f2:09:38:ae:8d:
bd:4d:41:d5:30:1c:72:ea:d4:b0:a6:3c:a9:21:8c:6d:5b:01:
a2:43:bb:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:30:26 2025 by rpki-client