Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207019.roa
File: AS207019.roa (raw, json)
Hash identifier: h5j2sWHokF6HhTpdtmCLA161xZU6Bn0f9eLw0zEFM4Q=
Subject key identifier: CE:1F:F5:9E:A3:95:56:8E:59:87:3C:14:0D:BF:FB:32:95:F6:DD:97
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7B96217D7E5B81D2ADFF195394E53351616D6F8B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207019.roa
Signing time: Tue 01 Sep 2026 04:18:17 +0000
ROA not before: Tue 01 Sep 2026 04:13:17 +0000
ROA not after: Tue 31 Aug 2027 04:18:17 +0000
asID: 207019
IP address blocks: 46.203.72.0/24 maxlen: 24
46.203.81.0/24 maxlen: 24
92.112.164.0/24 maxlen: 24
95.134.194.0/24 maxlen: 24
178.92.94.0/24 maxlen: 24
178.93.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:96:21:7d:7e:5b:81:d2:ad:ff:19:53:94:e5:33:51:61:6d:6f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 1 04:13:17 2026 GMT
Not After : Aug 31 04:18:17 2027 GMT
Subject: CN=CE1FF59EA395568E59873C140DBFFB3295F6DD97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:14:8a:bf:38:91:10:c4:f8:4a:cd:eb:2c:
d1:30:a1:ce:93:ea:f1:6d:d0:e4:85:ee:8a:ef:c5:
e2:5e:50:a6:8a:fa:8a:17:0a:1e:6b:2a:32:bf:b9:
83:1f:c4:e4:c4:99:f7:fb:f1:07:94:78:af:73:a0:
e7:c5:ad:e6:21:c8:fd:7d:ef:87:ab:02:c4:9f:a6:
98:28:54:6d:54:bf:86:f6:93:ca:72:89:ef:dc:67:
9a:34:62:6a:c2:41:b1:6f:be:c1:b2:10:c4:01:50:
c8:13:da:38:29:b9:df:95:e6:94:77:68:77:c0:d9:
7a:a0:b4:d5:2b:80:3a:8d:4f:89:a9:36:bb:96:dc:
c1:71:a6:f3:05:bb:8c:b1:23:ec:49:cd:2c:41:d4:
1e:8e:1d:fe:3e:91:d5:f2:01:26:7f:4f:6d:d8:01:
9b:0a:54:92:d6:92:8d:66:9e:da:00:dc:ad:93:25:
f9:63:e1:e4:23:1b:2d:c4:4b:15:e2:c8:f9:24:34:
cd:0c:26:c1:05:63:0b:e8:b6:20:ff:3c:14:13:50:
ea:58:7a:a8:73:c3:17:13:1a:18:5b:6a:60:dc:0e:
0f:0e:85:bf:0f:59:48:17:39:69:36:d9:9a:1a:88:
90:76:14:77:d2:33:5d:0f:f5:ec:5e:13:98:fe:98:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1F:F5:9E:A3:95:56:8E:59:87:3C:14:0D:BF:FB:32:95:F6:DD:97
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.72.0/24
46.203.81.0/24
92.112.164.0/24
95.134.194.0/24
178.92.94.0/24
178.93.38.0/24
Signature Algorithm: sha256WithRSAEncryption
53:5d:f6:cd:c6:ea:4e:45:41:19:97:45:c2:21:75:a6:7e:0a:
c6:f5:85:4f:38:97:52:26:47:58:61:e7:04:fd:bc:4e:1c:4f:
64:88:ff:bc:4a:f1:c4:1a:06:7a:84:0e:d1:ba:00:70:01:79:
02:a6:87:d4:55:5d:88:cc:76:e6:ee:6d:f3:8e:37:59:8e:8e:
4c:90:e2:1b:43:50:46:40:b4:db:73:bf:25:25:87:17:f9:49:
f7:84:fe:36:5b:23:1f:04:82:ba:3a:f0:a2:7d:aa:1a:02:d0:
56:e1:a1:d4:e2:e9:0e:a7:4c:07:cc:96:99:69:44:c2:5b:2e:
9d:b0:10:05:20:fc:19:82:df:8f:5d:ba:ee:37:df:3e:2f:3b:
4d:23:56:c0:34:cb:8f:59:30:0f:b4:f1:c7:1c:0a:a0:88:7e:
cd:b2:ce:e8:94:5b:c0:d1:36:25:a6:e7:db:6c:20:fe:0a:20:
b6:44:94:8e:5e:d8:02:25:01:be:7e:01:e8:b5:bd:8e:eb:ca:
85:58:ab:2d:6a:cb:e4:d7:dc:d7:c8:3c:f4:d5:c0:92:fd:87:
64:cf:b9:0d:a0:e1:94:e9:0e:4b:11:2f:72:52:85:c9:74:e9:
db:34:7a:24:27:0d:f4:c9:8b:93:f2:87:2d:a2:4e:6a:d1:37:
d0:fb:0f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:30 2026 by rpki-client