Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212477.roa
File: AS212477.roa (raw, json)
Hash identifier: 5cu4yiIRS9LDnyIaGpVlFwUpsmkrmTZYm4qjZxbS6x0=
Subject key identifier: E7:FA:7C:B6:14:11:0E:09:9B:7E:AB:05:9B:35:2D:B5:C3:A5:A6:32
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1CD3016A94A45891E8581351FDDD37BC02755FEB
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212477.roa
Signing time: Thu 10 Jul 2025 17:23:50 +0000
ROA not before: Thu 10 Jul 2025 17:18:50 +0000
ROA not after: Thu 09 Jul 2026 17:23:50 +0000
asID: 212477
IP address blocks: 2a03:8b80::/29 maxlen: 29
2a03:f100::/29 maxlen: 29
2a04:7a80::/29 maxlen: 29
2a04:f3c0::/29 maxlen: 29
2a04:f700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d3:01:6a:94:a4:58:91:e8:58:13:51:fd:dd:37:bc:02:75:5f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 10 17:18:50 2025 GMT
Not After : Jul 9 17:23:50 2026 GMT
Subject: CN=E7FA7CB614110E099B7EAB059B352DB5C3A5A632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:c1:09:c7:ea:be:f4:0e:d2:c8:55:99:52:
e2:e9:b5:9d:30:b7:91:a3:b7:e8:1f:bc:af:0a:2c:
31:d9:c5:55:55:03:6f:d1:ea:5f:ee:ed:8b:9a:d9:
96:78:0f:5e:87:58:e0:fc:28:93:94:71:9f:68:8c:
11:b4:4f:53:ee:1e:7e:fb:51:91:9e:4c:71:74:b2:
99:c9:67:42:31:c4:fe:47:d2:fd:f6:48:3f:a3:47:
75:7d:71:7b:e6:02:c1:4f:c1:de:3f:7c:e0:57:e8:
d6:eb:22:27:80:d1:6b:34:b0:1a:e4:df:ff:24:b3:
6f:be:e3:de:f0:1a:8b:ab:75:c1:49:75:16:23:25:
08:71:65:79:c8:7c:69:5a:e1:42:a0:1d:6f:03:37:
83:fc:34:ce:44:90:b8:be:e0:75:72:e8:c2:ae:27:
6a:fc:4c:35:d7:73:20:8e:50:25:16:12:f2:f2:d5:
f6:cf:d9:1a:19:c1:a3:77:a8:94:24:b9:b0:5b:d4:
dd:3e:1e:5e:80:1c:9f:9a:ef:97:dd:a1:15:6e:9d:
1e:ed:bb:50:d2:e8:8f:7a:b5:2f:88:9b:0a:41:67:
88:19:a5:0e:0e:52:07:f7:a0:ba:aa:b6:ef:7c:8c:
84:10:ae:14:ca:c1:2d:81:4b:55:8c:41:eb:1c:72:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FA:7C:B6:14:11:0E:09:9B:7E:AB:05:9B:35:2D:B5:C3:A5:A6:32
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212477.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:8b80::/29
2a03:f100::/29
2a04:7a80::/29
2a04:f3c0::/29
2a04:f700::/29
Signature Algorithm: sha256WithRSAEncryption
b8:dd:cd:83:8e:d8:78:60:ff:d1:cd:7a:64:4e:46:ad:be:31:
dd:16:0b:14:7b:f5:4f:4f:7b:ec:51:4a:d4:b4:44:a6:e4:50:
3b:1b:5c:42:9a:d8:70:f2:f8:cc:13:20:f4:70:7f:6a:d1:97:
cf:d1:bc:12:40:de:d4:6a:72:cc:52:5f:a0:0d:89:28:3c:df:
17:9e:fd:8b:8a:f2:0b:31:12:1a:da:3a:d4:19:ea:92:98:8a:
f0:be:30:64:0b:a4:a8:08:de:0b:17:c4:84:00:30:df:ce:d9:
dd:36:e7:d4:ae:6a:bd:bd:81:68:72:a6:e0:93:74:c1:09:a6:
b0:f6:20:bb:35:bd:60:e4:5d:b8:f8:a5:08:62:72:5a:91:a8:
3e:a3:72:99:5f:1f:7b:eb:b1:d9:3a:6c:5a:df:57:c9:d9:cd:
22:f6:41:3f:12:9f:03:fb:1c:14:38:61:a2:0a:1d:33:1d:40:
40:fe:59:43:f3:a2:8b:ba:dd:a8:8c:09:5b:30:97:06:0e:fa:
5b:d6:19:1a:44:27:f6:ea:51:f4:b1:f6:23:7a:f0:57:97:b5:
b3:07:b9:85:08:88:d5:21:f4:7c:5b:e3:04:69:de:22:24:5e:
1b:fc:74:80:f0:60:51:27:20:4a:44:37:5e:ad:c2:0f:dc:07:
d3:bf:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:55:28 2025 by rpki-client