Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207719.roa
File: AS207719.roa (raw, json)
Hash identifier: X359aRbpSJ5WPe8g9bff5Q4PW9Zs1UZb7346GUlGn0o=
Subject key identifier: F2:F8:59:BE:EF:ED:8C:D7:D7:49:08:49:B0:39:4F:33:FF:AF:5D:75
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 31663A3C9EBB79D407B5D776F76DE67BF256A2D2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207719.roa
Signing time: Mon 09 Feb 2026 20:45:01 +0000
ROA not before: Mon 09 Feb 2026 20:40:01 +0000
ROA not after: Mon 08 Feb 2027 20:45:01 +0000
asID: 207719
IP address blocks: 2a14:7583:6969::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:66:3a:3c:9e:bb:79:d4:07:b5:d7:76:f7:6d:e6:7b:f2:56:a2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 9 20:40:01 2026 GMT
Not After : Feb 8 20:45:01 2027 GMT
Subject: CN=F2F859BEEFED8CD7D7490849B0394F33FFAF5D75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:60:99:34:5f:23:41:e1:0c:c3:5f:2a:62:
30:68:66:43:ce:00:c5:c7:5b:5b:a8:06:6e:43:16:
8a:3e:d4:84:d3:c0:68:68:d8:77:55:dc:29:d4:cb:
bf:eb:38:65:e8:56:a0:2e:89:9f:5a:b3:5f:78:00:
95:53:7b:af:72:c4:14:95:92:37:ff:7f:05:32:b8:
d5:e4:23:16:c9:0b:2c:84:89:53:25:32:a7:c2:6a:
0e:3e:72:97:6b:63:50:9f:b5:d4:45:5f:43:ae:1b:
1c:70:00:90:f5:e9:df:08:a4:06:d3:df:80:9b:78:
5f:75:6e:01:fe:11:6a:61:7f:48:6f:19:73:58:2a:
5b:a8:fd:cf:25:48:e1:d0:71:fb:99:2e:86:fb:87:
a6:bb:45:8f:e6:df:bc:ee:50:ee:5a:1e:34:af:2d:
79:f7:88:0f:3a:0b:09:e9:ba:21:1b:8a:d4:f1:a7:
36:69:f2:fd:b3:8b:2c:c1:5a:9c:c6:aa:ec:72:c2:
d6:4c:2d:7a:37:21:3f:57:42:5c:9d:c4:b5:30:51:
40:52:40:d3:d6:56:91:20:d8:cd:3c:ca:31:f3:35:
b6:d1:cf:cb:2c:91:b5:53:f2:6d:3c:12:56:4d:02:
6e:08:c5:cf:82:86:2d:c5:95:8e:5d:b5:b1:74:2b:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:59:BE:EF:ED:8C:D7:D7:49:08:49:B0:39:4F:33:FF:AF:5D:75
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207719.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:6969::/48
Signature Algorithm: sha256WithRSAEncryption
20:13:52:f2:51:93:fb:00:aa:23:c8:81:10:fd:a7:f0:60:57:
7c:c4:29:e5:04:8a:86:76:5f:94:8f:a8:cd:e5:14:2d:aa:0b:
42:62:69:78:70:83:0f:93:37:18:01:b2:01:3c:14:01:c7:c9:
dc:63:3d:91:ba:4a:9c:98:9f:69:a9:a4:fc:11:5a:ba:16:5f:
bc:9b:49:a3:50:61:c3:c0:b8:29:fa:f5:99:c8:62:b4:80:2e:
b9:c5:bb:72:e3:a4:f0:98:7b:1f:87:07:27:f6:74:89:55:93:
6e:da:15:b5:9c:32:c3:a7:9a:ca:66:ff:13:03:b1:0d:b8:50:
b5:09:3a:2d:c2:91:df:d3:5e:d6:51:23:4b:80:da:40:29:2c:
82:64:74:e2:44:53:36:30:61:8f:57:89:53:50:51:20:42:bc:
a4:91:83:a3:e8:b4:82:fe:aa:f3:37:56:a8:ea:50:3e:e5:71:
63:2c:38:ed:79:c5:5d:be:27:b6:d9:d3:5a:85:20:b5:93:e3:
e5:d3:65:e3:c9:08:8e:9e:81:73:c3:8f:98:9e:22:86:3c:78:
ac:5b:4a:e5:16:a5:97:c2:00:c1:07:61:cf:a2:bf:b4:56:f1:
1c:13:ec:0f:e4:39:b9:c2:99:9f:9c:f8:bb:f5:fc:a6:3e:c4:
3a:48:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:02 2026 by rpki-client