Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216121.roa
File: AS216121.roa (raw, json)
Hash identifier: +sudrPa4s4tLT04YCWktZYugHx9MDAGVyDwm1/4UE7w=
Subject key identifier: 51:C0:B5:EF:4F:A6:D6:B4:4D:93:F4:E3:9D:5C:CD:9A:19:86:C9:CC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0602149F463E7C57E9003AE06F99DA2113F5F683
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216121.roa
Signing time: Thu 02 Oct 2025 08:14:50 +0000
ROA not before: Thu 02 Oct 2025 08:09:50 +0000
ROA not after: Thu 01 Oct 2026 08:14:50 +0000
asID: 216121
IP address blocks: 143.14.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:02:14:9f:46:3e:7c:57:e9:00:3a:e0:6f:99:da:21:13:f5:f6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 2 08:09:50 2025 GMT
Not After : Oct 1 08:14:50 2026 GMT
Subject: CN=51C0B5EF4FA6D6B44D93F4E39D5CCD9A1986C9CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3c:89:0e:c6:c8:bd:b9:89:cf:ce:7c:e4:94:
e1:8d:f3:31:bb:21:f9:71:31:99:6b:3a:b1:12:1f:
3d:2c:17:6b:bb:22:b2:b8:fc:6f:43:8e:4d:9b:04:
d0:4a:f3:e5:81:b8:d9:2b:45:f8:f6:68:e7:1c:12:
6e:62:14:66:5c:43:c4:c5:a6:b4:7c:2c:65:25:66:
dd:6b:b7:0c:1b:cf:44:1b:78:87:72:97:89:6d:a5:
32:a2:7f:6e:49:b6:fb:c3:cc:e4:54:0e:e1:e8:d4:
a0:89:3f:b3:01:52:20:3c:49:d8:d5:67:7e:69:6f:
99:1d:cd:90:23:65:2c:80:61:bd:38:d6:19:13:fa:
20:75:d4:86:c6:a6:48:c0:07:ba:23:14:9c:24:2f:
52:65:bf:b8:6c:99:50:50:c0:f7:ca:91:f5:2e:29:
f4:d2:67:f6:77:f6:83:7d:3d:43:86:80:ea:e0:01:
b7:73:13:39:ca:37:cd:4b:6f:89:72:72:e0:b1:9d:
0a:90:d7:84:94:b0:11:dc:23:c5:c7:1a:aa:21:15:
1f:42:5f:8b:5f:20:d4:d0:b3:18:b5:94:33:d7:99:
f2:73:17:9c:8b:42:52:20:bc:82:54:32:0f:30:04:
dd:be:16:a9:a6:85:f0:e6:1c:9e:97:bb:67:8d:f5:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C0:B5:EF:4F:A6:D6:B4:4D:93:F4:E3:9D:5C:CD:9A:19:86:C9:CC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216121.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.89.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:23:47:3c:18:ed:7f:29:d3:5f:c5:16:2c:5b:6b:de:9d:e9:
74:67:31:9a:f1:40:76:13:da:86:81:52:07:cf:36:96:2d:3f:
d2:e4:e6:71:56:60:58:0b:fa:2b:79:99:93:93:b8:08:f4:fd:
73:15:b1:34:19:16:f0:b9:ae:d5:30:e7:77:06:77:f9:dc:ec:
ba:16:f8:7b:dc:54:39:2b:75:be:cc:de:30:87:48:5d:64:3e:
e0:26:03:a7:19:5f:4c:61:72:cf:6f:45:69:11:a3:a4:38:c9:
0c:55:92:a2:e7:a9:e2:77:ce:40:02:25:15:fa:aa:2e:1a:da:
44:78:c5:54:94:cd:64:1c:02:af:4c:8d:c8:c9:53:79:34:c7:
02:ee:35:f7:09:9f:a6:61:d8:b4:75:55:49:34:32:6a:9e:65:
fe:c7:bb:22:91:48:67:91:11:1b:63:69:30:20:23:09:5b:e3:
fa:56:1e:65:ac:c7:10:71:b6:72:7f:f9:80:2a:5f:59:e6:91:
92:74:fc:36:c3:a5:8a:4a:c9:d2:a0:df:92:e6:6c:9d:ef:8f:
52:67:b9:eb:d3:cc:b9:b4:cb:3f:34:30:3d:a3:3d:bf:8a:18:
3f:ad:f2:c8:2a:92:e8:f7:ec:ff:5f:12:47:5c:3c:4b:ef:35:
bc:73:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:58:46 2025 by rpki-client