Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212770.roa
File: AS212770.roa (raw, json)
Hash identifier: XMPnlvlxLTR7U7VsAQ2iIJgUhrS5aVuiyyv4MOiCscs=
Subject key identifier: CE:4F:E6:B8:D0:ED:E0:0B:AD:4D:F1:89:2F:D5:16:64:34:24:B8:87
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7232F3340D27C605B0F0A7AE8BC322671E3B56CA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212770.roa
Signing time: Wed 09 Jul 2025 20:38:33 +0000
ROA not before: Wed 09 Jul 2025 20:33:33 +0000
ROA not after: Wed 08 Jul 2026 20:38:33 +0000
asID: 212770
IP address blocks: 2a0f:85c1:bab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:32:f3:34:0d:27:c6:05:b0:f0:a7:ae:8b:c3:22:67:1e:3b:56:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 20:33:33 2025 GMT
Not After : Jul 8 20:38:33 2026 GMT
Subject: CN=CE4FE6B8D0EDE00BAD4DF1892FD516643424B887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:7f:f9:45:87:6b:4f:ed:93:0d:63:80:7e:
f6:1b:17:3f:c8:1e:02:4b:69:bc:79:ea:bd:d5:4b:
ee:13:09:8e:55:e4:d1:87:7a:b6:6e:ec:ed:12:da:
c3:d6:fc:68:e9:6d:d0:e7:3b:57:7d:bb:26:45:25:
c2:14:df:79:26:18:06:5e:03:71:16:88:c0:c8:db:
4f:ea:1b:7c:8a:d2:02:b6:3d:5e:a4:6d:76:76:1d:
ca:5a:71:b1:ad:e6:18:96:65:ba:55:24:d3:78:26:
91:bf:0b:c5:8c:17:e5:d6:82:0d:d9:ca:56:ad:5d:
33:9b:fb:16:d9:ce:bc:8d:ff:af:5b:cc:16:eb:99:
e0:77:df:28:47:5c:eb:2b:fc:e9:cf:b7:e8:d2:f0:
c2:c0:0c:21:9e:bb:41:9d:eb:32:09:24:a0:10:99:
b1:dc:ff:47:dc:c8:7f:ca:94:83:33:9f:0a:16:33:
41:cb:f6:4d:00:a4:79:5f:45:cc:53:16:c9:f5:e6:
26:4a:3a:65:eb:ae:e4:56:5e:2d:e3:b8:16:c8:ca:
d9:05:28:18:83:d3:78:1f:b3:3b:d3:93:bf:bf:54:
a9:56:14:5c:a1:10:a2:ab:17:e0:bb:87:df:88:5f:
a8:27:67:36:74:72:6c:a7:5d:62:5c:2f:14:21:73:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4F:E6:B8:D0:ED:E0:0B:AD:4D:F1:89:2F:D5:16:64:34:24:B8:87
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bab::/48
Signature Algorithm: sha256WithRSAEncryption
00:98:55:37:3b:48:2a:09:2f:d1:60:fe:2f:04:1e:24:1c:1c:
00:71:af:f4:0b:0b:83:3b:fb:bf:4d:bd:84:16:c4:df:a8:39:
f1:dc:7c:26:36:ff:e2:41:81:2b:c8:42:cc:d5:34:05:6d:05:
cc:d5:7c:84:0f:f3:a8:9e:38:b1:e0:46:7d:be:af:4e:9f:ed:
55:93:0a:10:89:1c:26:ab:80:d0:e6:97:b7:d7:5c:69:de:89:
12:41:2a:5c:83:a4:f3:95:b3:83:fe:5f:cf:cd:e6:e6:0d:59:
91:ff:d9:20:23:83:f2:2f:d9:9c:a8:f9:ad:69:63:07:42:37:
d4:5d:ab:35:ae:49:d4:c1:f9:ee:00:30:94:fe:3f:5c:c8:11:
33:40:bd:a5:17:c0:e2:e2:2b:fc:15:1f:b1:1c:06:13:06:ac:
cd:d8:16:46:5d:48:7d:4b:32:0b:74:48:32:28:07:94:f7:b8:
57:4f:10:8b:60:1c:45:5c:e4:c5:75:7a:6a:74:31:2d:40:03:
ee:40:bf:71:53:4d:1b:56:16:7c:db:ec:f5:e6:f6:bb:05:fa:
93:bb:cb:22:41:f0:4c:4f:20:5d:f7:e2:c1:6e:3d:b5:3e:0e:
be:3c:0d:c4:f5:d4:b5:7b:f8:22:cc:b3:3a:f2:dd:3c:c8:ab:
bc:0e:ea:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 01:49:16 2025 by rpki-client