Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211750.roa
File: AS211750.roa (raw, json)
Hash identifier: fz78hHcdQQTSR3vJFWZhg1hTv6Z7mXOKEKbIYnoMyrI=
Subject key identifier: 95:C9:64:CC:29:BF:5F:8A:62:0F:36:A2:62:A9:F5:D5:F2:4B:2C:3B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 06188E036CDF47584309D7A2C16C6817924D782D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211750.roa
Signing time: Wed 16 Jul 2025 17:54:13 +0000
ROA not before: Wed 16 Jul 2025 17:49:13 +0000
ROA not after: Wed 15 Jul 2026 17:54:13 +0000
asID: 211750
IP address blocks: 140.233.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:18:8e:03:6c:df:47:58:43:09:d7:a2:c1:6c:68:17:92:4d:78:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 16 17:49:13 2025 GMT
Not After : Jul 15 17:54:13 2026 GMT
Subject: CN=95C964CC29BF5F8A620F36A262A9F5D5F24B2C3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:15:ce:e5:c9:96:ee:27:77:88:f3:ba:97:2c:
83:d7:0e:43:f8:13:ae:54:b7:84:25:fd:bb:b7:d6:
2c:c3:5b:46:1d:d2:19:12:49:c0:b7:68:48:8b:77:
c8:9c:c6:48:32:54:83:37:3e:a7:fa:da:e1:6b:ea:
7a:43:74:6e:fe:bb:19:19:0b:43:c6:71:70:f0:52:
3e:94:d1:98:ad:38:71:57:a2:61:c1:e1:35:5a:5b:
df:2e:97:79:74:5d:2d:65:6f:ee:23:90:b7:3c:39:
7f:f2:aa:d9:c8:01:c6:c9:73:de:eb:a9:85:11:11:
e7:80:3a:58:2e:a4:84:7e:f8:dd:10:2f:07:92:7f:
6f:ac:74:17:23:39:22:50:18:a1:20:f9:6d:24:a6:
d4:a9:3b:98:58:28:33:62:4b:48:7b:5b:88:93:55:
54:0e:55:cb:c5:c2:c5:38:8a:b4:78:c2:56:4a:f8:
dc:69:81:3b:e9:79:dd:89:73:a2:49:29:06:b7:e3:
99:02:5b:c8:5f:70:48:48:e3:a0:a6:04:79:a3:00:
f6:76:80:12:77:6e:64:a8:0e:c7:56:cf:c2:01:3b:
01:0b:1d:84:e2:a7:5a:51:a9:9a:1f:5a:5b:9c:58:
52:10:8c:5b:01:56:89:1c:27:18:ae:7b:ac:7a:17:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C9:64:CC:29:BF:5F:8A:62:0F:36:A2:62:A9:F5:D5:F2:4B:2C:3B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211750.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.164.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f7:73:7e:92:5a:e6:ed:fc:f0:a1:0b:4f:ec:2f:82:25:b8:
af:49:f8:cf:24:23:fe:4c:44:dd:49:ca:7b:66:e0:05:46:59:
2a:78:83:c8:a8:fa:28:f2:bc:97:76:f3:91:a2:d7:80:f4:93:
89:36:76:3e:00:e7:59:1d:c3:46:86:e8:06:bc:2c:a2:09:45:
35:09:d2:0f:ce:d7:e6:d2:cf:f9:d9:4c:e6:22:40:d2:e7:14:
73:6c:75:23:3d:71:86:e2:10:e7:6b:60:29:91:31:f5:f3:bf:
16:17:8b:0c:0f:a4:e9:f8:bb:4d:ac:25:7a:8e:41:aa:3f:b1:
5c:6a:3f:a0:78:d5:39:2f:77:8b:e8:56:24:02:40:7b:90:89:
d6:e0:1e:e4:ec:55:a2:2e:56:6f:f3:dc:41:e1:b3:32:c8:94:
1e:eb:92:a7:24:41:f1:c0:4a:e8:78:da:cf:92:78:e5:fa:7b:
47:a8:cc:b0:d5:2e:98:4e:ab:80:80:b6:bb:a7:1b:86:25:bd:
ff:10:e3:42:a7:de:1b:05:ae:10:bc:39:e5:51:ce:9c:24:8e:
68:2a:8a:b1:56:ac:e3:9a:81:93:21:ae:4d:35:31:64:ec:23:
5b:32:0d:38:b7:7c:49:97:34:e0:43:e8:45:c7:f1:7f:1a:5b:
e1:44:0e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:15:07 2025 by rpki-client