Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216075.roa
File: AS216075.roa (raw, json)
Hash identifier: Je7mxyF5TLtnWa4yRlW77d+td+mYjVKbqmbenBm5UNw=
Subject key identifier: F4:50:33:24:19:81:60:83:FD:4A:A3:FB:E6:EE:54:1B:1A:47:5A:CA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 011331BEB34604B4E3E9D36E6254573AE08C34CE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216075.roa
Signing time: Tue 08 Jul 2025 06:03:02 +0000
ROA not before: Tue 08 Jul 2025 05:58:02 +0000
ROA not after: Tue 07 Jul 2026 06:03:02 +0000
asID: 216075
IP address blocks: 2a13:9500:a9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:13:31:be:b3:46:04:b4:e3:e9:d3:6e:62:54:57:3a:e0:8c:34:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 8 05:58:02 2025 GMT
Not After : Jul 7 06:03:02 2026 GMT
Subject: CN=F450332419816083FD4AA3FBE6EE541B1A475ACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:cf:3e:65:36:62:ac:aa:c1:1c:ea:97:6b:
1b:25:8f:91:92:9e:61:e3:8f:51:54:d2:bc:aa:20:
40:b6:25:fd:8a:b1:0c:89:52:02:b5:e5:e4:b8:71:
16:0b:80:7c:e9:8a:dc:7d:13:a0:70:11:d0:5a:91:
be:66:5e:29:40:16:14:4a:d7:93:5b:97:e4:5e:1e:
be:d2:30:8a:10:e3:64:77:50:05:05:47:77:b3:73:
2e:d0:06:f9:2e:c3:ec:38:8b:44:64:95:fd:c8:f6:
6e:c0:7e:ea:51:a2:31:52:52:2b:10:bd:48:d0:b9:
a3:62:f0:76:85:4e:1a:c8:1d:7d:88:62:7f:78:4a:
45:e9:31:00:76:bb:bc:88:dc:03:af:ad:85:c3:21:
47:56:21:45:9c:2f:f1:9c:bb:51:a9:64:1e:fd:31:
96:83:45:1d:a9:02:26:b6:1a:8f:41:51:15:8d:72:
23:b1:b1:b8:11:fa:02:3e:0e:8d:2c:03:7a:ea:4b:
2b:cf:bb:b1:af:1b:fd:40:90:0a:84:1a:17:9b:ee:
d7:94:27:ee:8e:c2:f6:89:9b:90:39:c8:9e:1f:60:
70:fd:c1:77:cf:95:9e:ce:b2:51:80:53:f8:5d:23:
ef:ad:f0:82:bf:21:b2:38:0b:ce:11:a2:23:31:e8:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:50:33:24:19:81:60:83:FD:4A:A3:FB:E6:EE:54:1B:1A:47:5A:CA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:a9::/48
Signature Algorithm: sha256WithRSAEncryption
43:68:61:2e:5f:99:bf:79:0b:4c:3a:82:87:3d:0e:e5:95:53:
c5:2b:2e:ca:32:e2:27:49:57:e6:44:9b:f1:d0:76:d1:39:b5:
d7:ce:41:7e:e4:c6:40:e4:5e:64:25:20:7f:43:e1:08:ba:1b:
98:8f:2f:2f:7e:3b:e4:51:2b:2b:59:55:80:0b:1d:b9:6a:d0:
6f:ad:d3:42:2b:a6:f4:87:56:d4:09:a7:82:4c:3a:57:9b:61:
e0:08:9f:86:eb:d8:cf:03:59:4b:63:79:a6:ef:54:42:61:42:
ea:86:72:22:42:44:25:4e:84:7a:f2:0b:43:b6:c8:9b:eb:3f:
ef:80:a6:50:15:c8:3c:ca:67:02:1b:35:63:b7:83:e5:70:ea:
f7:bd:a5:a7:39:bd:38:08:83:2f:e3:71:40:3c:19:ef:03:64:
5c:4d:23:19:42:87:70:e4:eb:ab:59:f2:33:ef:ca:ac:0c:73:
47:bd:70:f6:ab:a4:76:ac:25:36:34:ac:67:57:46:4a:91:2f:
6b:99:c2:fb:e5:5f:be:6a:6a:49:f4:20:3e:fb:68:d5:f6:d3:
4a:20:bb:3f:0d:51:ac:55:f6:6b:e3:93:16:dc:2c:22:62:d0:
69:1b:31:48:b7:3d:4e:c7:06:ca:34:94:1a:5d:b1:98:93:af:
0d:1d:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:49 2025 by rpki-client