Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216121.roa
File: AS216121.roa (raw, json)
Hash identifier: 8O8nWHbQ9ytH/aTq+FLu1J7Wd+5OCWK7AuHdyXyP0JQ=
Subject key identifier: 06:CD:B1:07:41:1F:20:BB:CC:81:33:73:FA:BE:71:77:B5:BF:4D:0F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4B33AC85B87FB8E7CAE3CB56111B97D154F31979
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216121.roa
Signing time: Tue 26 Aug 2025 21:54:12 +0000
ROA not before: Tue 26 Aug 2025 21:49:12 +0000
ROA not after: Tue 25 Aug 2026 21:54:12 +0000
asID: 216121
IP address blocks: 143.14.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:33:ac:85:b8:7f:b8:e7:ca:e3:cb:56:11:1b:97:d1:54:f3:19:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 26 21:49:12 2025 GMT
Not After : Aug 25 21:54:12 2026 GMT
Subject: CN=06CDB107411F20BBCC813373FABE7177B5BF4D0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:61:49:2a:42:79:9b:fe:af:fd:4d:55:ef:
e7:63:34:05:44:56:5e:e2:44:0d:72:77:f1:c0:5d:
72:90:b8:8f:44:5a:c0:c1:cc:cd:df:4f:bc:b2:99:
90:e0:27:e1:65:a9:bd:2e:f0:d4:e6:8a:73:97:b3:
27:b8:c9:3c:8d:da:5d:ef:43:f4:f7:96:7a:5f:e1:
d6:00:03:68:b9:74:d7:90:2b:20:7d:49:01:70:e9:
9e:f8:a2:6d:03:fd:58:6a:53:a6:39:7f:d2:93:f3:
e5:92:f7:bf:ad:63:db:4e:45:ff:25:be:67:e4:bc:
98:47:a9:78:ea:2a:94:87:c5:00:2f:5b:c8:83:40:
d1:40:d1:66:38:27:95:92:46:cd:23:c1:e6:24:e6:
3f:43:6f:59:46:63:cb:9b:d9:fb:b8:30:42:f8:bc:
a0:cc:04:94:f7:e4:df:03:4f:22:da:ee:66:13:cd:
8d:16:6d:e9:43:23:0a:28:c5:9c:42:93:46:77:0b:
d0:16:00:04:82:22:d7:99:4d:00:21:82:a2:6b:c4:
a2:45:03:46:06:05:1c:ca:ad:f5:a7:bb:d4:95:99:
14:76:99:45:17:0f:8f:c9:22:e6:72:fb:2d:6a:3e:
6f:9d:01:27:81:9a:40:a8:53:9b:38:25:2d:17:46:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CD:B1:07:41:1F:20:BB:CC:81:33:73:FA:BE:71:77:B5:BF:4D:0F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216121.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f0:54:c7:c6:51:43:c0:e6:db:bb:dc:a2:c7:53:48:4d:5d:
31:69:f8:04:82:a8:ed:b6:36:d4:d0:75:75:3a:ca:17:01:9e:
32:45:87:8e:a1:c1:40:d6:43:a5:f7:59:de:f8:77:ab:5d:1c:
a5:40:68:57:5c:1d:91:ef:f8:b4:32:a3:d8:51:8c:8f:96:e4:
28:cb:57:cf:03:33:a6:eb:30:81:12:f6:ed:b9:66:62:52:ae:
a7:6b:a6:03:ec:2f:e5:d9:5f:38:cb:2f:9e:2a:2d:d2:c9:ab:
96:29:cb:b6:f5:94:05:30:df:d5:b8:c3:69:9c:41:70:59:0b:
ca:db:01:63:2f:6c:27:14:a7:57:8d:ae:b2:24:74:cc:05:05:
94:71:fc:ae:ca:88:25:8c:bc:11:c7:02:5a:f6:e1:36:58:62:
bc:1e:fd:cf:3e:8b:a3:94:c3:1c:2c:83:04:42:56:ee:53:ff:
b3:ab:22:57:0f:18:9c:ae:e7:16:4b:f9:3d:f4:09:44:c1:44:
33:2c:fd:45:cc:7c:72:91:6e:2c:05:8d:03:da:f2:aa:63:64:
d9:bc:8a:ec:e0:c3:e8:93:70:cc:58:94:b7:d1:cd:fb:0b:44:
75:0a:bd:88:8f:93:a3:a1:ef:47:98:9a:da:0a:a0:96:12:8c:
de:ba:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:45:08 2025 by rpki-client