Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212027.roa
File: AS212027.roa (raw, json)
Hash identifier: lq/PeeqLlVd3E9vTxxQdyrtJH3P7INfeJoHnOuCt4vQ=
Subject key identifier: B4:E2:F3:05:5C:E9:06:C9:72:EB:A3:C0:4B:C4:ED:94:B6:F0:48:E1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 04A8A2A451FD52FFDF21C74DBF8F25436C0263B3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212027.roa
Signing time: Thu 03 Jul 2025 12:22:33 +0000
ROA not before: Thu 03 Jul 2025 12:17:33 +0000
ROA not after: Thu 02 Jul 2026 12:22:33 +0000
asID: 212027
IP address blocks: 95.135.251.0/24 maxlen: 24
178.92.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a8:a2:a4:51:fd:52:ff:df:21:c7:4d:bf:8f:25:43:6c:02:63:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 3 12:17:33 2025 GMT
Not After : Jul 2 12:22:33 2026 GMT
Subject: CN=B4E2F3055CE906C972EBA3C04BC4ED94B6F048E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:20:75:e6:48:fc:30:34:3e:34:76:b9:31:
f6:10:b7:42:a4:2d:0e:22:85:ce:99:27:e2:b1:54:
bc:5f:35:7a:ed:ba:4a:81:60:bd:d2:2d:17:e2:67:
d2:45:01:6e:e8:10:c0:b1:92:b2:e2:88:af:56:8f:
ae:d3:ac:e6:90:28:c5:32:27:51:3f:3b:ef:b4:d4:
be:af:1e:bf:b8:c9:80:a4:bd:49:4d:10:2c:5f:40:
70:36:29:15:63:69:81:90:a7:26:53:3b:2e:01:89:
bd:bc:b2:58:e7:70:aa:b6:86:dd:39:ab:7e:b9:45:
1a:61:7b:75:4f:91:54:0d:5c:ed:ef:53:8d:51:cb:
e4:89:1f:81:18:73:50:69:fb:52:3e:f0:d5:50:a9:
a2:5e:b9:8a:ba:8a:6a:f5:c1:44:3d:b0:38:6a:1d:
80:91:bb:b1:2b:29:b8:9e:a2:ea:7b:d5:a7:3d:39:
6d:0b:36:c0:8a:d6:4e:ee:3e:e9:e3:f7:9c:08:48:
27:1a:b7:b8:45:50:d2:d2:a0:2f:9c:fa:ed:f8:6e:
d0:15:3b:07:69:92:fe:fe:ae:40:e2:f2:9b:6d:60:
e1:97:a7:78:80:ce:08:df:75:a0:fc:63:d2:58:68:
41:57:b8:e1:c2:bb:56:07:f6:d0:9e:92:fa:6d:00:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E2:F3:05:5C:E9:06:C9:72:EB:A3:C0:4B:C4:ED:94:B6:F0:48:E1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212027.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.251.0/24
178.92.28.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8a:77:1e:fa:d4:e9:de:7a:f9:b0:b5:94:c4:a1:c9:08:cf:
50:53:3b:42:71:84:8c:77:c3:54:1b:cd:0d:4f:69:51:63:0a:
08:a0:5d:0a:71:ec:08:29:40:81:a6:d2:a7:15:1f:c7:cd:83:
b2:18:27:00:13:c7:33:b2:91:42:cb:41:43:1d:60:42:bf:31:
fb:3d:0a:0c:36:43:f8:ce:c9:2d:56:28:a0:4e:19:5c:5b:ee:
b7:2b:5a:d5:3d:d8:c2:e5:4c:b4:09:b5:03:49:be:14:92:c7:
a3:80:f4:1e:c4:89:e4:d9:ee:af:73:6c:f2:ed:f7:99:19:51:
7f:d8:10:7a:06:2b:9a:b5:ef:6b:8d:5e:ce:68:6f:fe:0f:32:
65:30:17:1f:aa:5e:56:eb:a8:85:81:5d:03:f2:18:42:a7:80:
12:b7:26:81:63:8a:61:4e:a2:9f:f3:fb:18:ca:8d:4d:6c:58:
43:21:ee:b4:eb:4e:39:96:55:09:f3:9d:e6:12:f5:4c:ef:33:
b3:03:a9:df:e9:d4:26:4d:ae:6e:83:4e:f1:ac:ab:97:0e:3e:
26:17:94:e4:66:20:71:80:85:0f:75:ce:cb:57:85:80:41:96:
e3:e0:7f:9f:24:8b:1c:f3:cc:bf:82:99:9f:b5:0b:aa:f7:99:
21:fd:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:42 2025 by rpki-client