Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209771.roa
File: AS209771.roa (raw, json)
Hash identifier: eKtrZ/OL3QVOoJO4h+nEsRDuNo1ihFyHSNLz4tE0KsI=
Subject key identifier: BC:6D:E1:66:9D:77:E2:57:71:07:6B:81:5C:79:43:31:65:3D:ED:BC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 27814E9014C61D671A74D2376459C4867C75A07C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209771.roa
Signing time: Thu 15 May 2025 18:56:52 +0000
ROA not before: Thu 15 May 2025 18:51:52 +0000
ROA not after: Thu 14 May 2026 18:56:52 +0000
asID: 209771
IP address blocks: 2a13:9500:44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:81:4e:90:14:c6:1d:67:1a:74:d2:37:64:59:c4:86:7c:75:a0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 15 18:51:52 2025 GMT
Not After : May 14 18:56:52 2026 GMT
Subject: CN=BC6DE1669D77E25771076B815C794331653DEDBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:36:3d:1b:56:21:f6:04:fa:5c:b6:cb:f6:
17:03:f5:19:b2:dc:9c:68:cb:66:46:1b:17:06:4a:
56:c2:33:b3:a1:54:58:dc:d4:84:dc:93:2a:a1:98:
e7:33:08:18:8a:55:2e:64:da:f7:c3:6e:0d:04:a4:
1b:4c:17:ae:4e:4e:5c:0e:ff:c8:b7:19:e0:dd:2c:
32:af:73:b3:69:d6:b5:65:e2:f3:be:cb:28:98:98:
f1:f3:7f:af:66:d4:63:55:e3:c5:94:0a:80:3b:32:
88:36:ed:6f:a6:a9:8c:c9:a3:ce:13:79:d8:85:87:
d9:10:e8:d0:5d:2c:1d:de:de:f1:1d:59:0e:9a:b8:
e0:bb:a5:07:5e:ab:d0:f0:c2:2e:d1:ef:aa:e9:50:
78:24:cf:be:08:a1:36:a1:6e:9c:0d:0a:57:3b:aa:
58:47:0a:ef:94:b9:57:2c:a3:74:d9:55:b5:41:2b:
f9:3f:a1:cb:9e:ea:55:87:ae:57:84:0f:d9:d6:8a:
43:be:22:14:06:28:e2:18:dc:b2:15:14:47:e4:51:
d1:a4:09:c1:45:86:18:dc:49:e4:19:75:2e:2e:02:
9e:db:cc:65:f3:11:00:31:b9:00:9b:fb:92:ab:37:
d6:2a:2f:47:b7:f8:54:79:c0:be:1b:a1:2c:eb:36:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6D:E1:66:9D:77:E2:57:71:07:6B:81:5C:79:43:31:65:3D:ED:BC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:44::/48
Signature Algorithm: sha256WithRSAEncryption
06:1c:ff:f8:96:07:e8:ca:2d:5c:3d:74:69:dd:9f:ac:95:4d:
25:7d:c8:93:df:aa:59:df:59:aa:b4:96:66:2d:97:cc:b9:b2:
36:2e:31:29:f7:8c:5d:94:7f:ed:37:73:17:02:99:12:c6:2e:
a4:5a:62:83:0b:ee:72:e2:24:97:30:61:d0:5b:85:02:dd:9c:
50:0b:cc:b3:50:4a:6b:c0:89:d6:b2:4a:50:50:94:61:e5:96:
68:96:12:dc:45:e8:54:6d:a4:42:f9:ab:87:2a:12:9f:bc:ae:
e1:38:19:26:e1:13:55:a6:ef:f9:24:02:23:c2:72:9c:eb:18:
2c:d8:5b:c8:dd:1e:54:cc:f2:02:1b:d9:6f:88:0a:7d:d6:83:
74:94:7d:22:f4:d2:17:a8:eb:96:d4:cb:96:99:d2:13:69:18:
1a:9a:48:e5:2a:67:9f:39:99:6a:eb:bb:0b:d2:c7:24:c2:54:
35:62:30:17:46:42:9f:18:c7:79:5c:99:5f:77:5d:31:c9:d9:
71:fd:8c:4f:33:0c:bd:ba:46:17:52:14:53:b2:ec:24:a9:b8:
38:43:b5:6c:e0:9f:12:57:62:46:bb:c3:bc:c5:90:df:97:cb:
28:54:e9:18:44:7c:c0:75:d5:73:d7:68:68:8d:58:31:72:7f:
f1:26:b7:83
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUJ4FOkBTGHWcadNI3ZFnEhnx1oHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA1MTUxODUxNTJaFw0yNjA1MTQxODU2NTJaMDMxMTAvBgNV
BAMTKEJDNkRFMTY2OUQ3N0UyNTc3MTA3NkI4MTVDNzk0MzMxNjUzREVEQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNzY9G1Yh9gT6XLbL9hcD9Rmy
3Jxoy2ZGGxcGSlbCM7OhVFjc1ITckyqhmOczCBiKVS5k2vfDbg0EpBtMF65OTlwO
/8i3GeDdLDKvc7Np1rVl4vO+yyiYmPHzf69m1GNV48WUCoA7Mog27W+mqYzJo84T
ediFh9kQ6NBdLB3e3vEdWQ6auOC7pQdeq9Dwwi7R76rpUHgkz74IoTahbpwNClc7
qlhHCu+UuVcso3TZVbVBK/k/ocue6lWHrleED9nWikO+IhQGKOIY3LIVFEfkUdGk
CcFFhhjcSeQZdS4uAp7bzGXzEQAxuQCb+5KrN9YqL0e3+FR5wL4boSzrNu5tAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUvG3hZp134ldxB2uBXHlDMWU97bwwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA5NzcxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AABEMA0GCSqGSIb3DQEBCwUAA4IBAQAGHP/4lgfoyi1cPXRp3Z+slU0lfciT36pZ
31mqtJZmLZfMubI2LjEp94xdlH/tN3MXApkSxi6kWmKDC+5y4iSXMGHQW4UC3ZxQ
C8yzUEprwInWskpQUJRh5ZZolhLcRehUbaRC+auHKhKfvK7hOBkm4RNVpu/5JAIj
wnKc6xgs2FvI3R5UzPICG9lviAp91oN0lH0i9NIXqOuW1MuWmdITaRgamkjlKmef
OZlq67sL0sckwlQ1YjAXRkKfGMd5XJlfd10xydlx/YxPMwy9ukYXUhRTsuwkqbg4
Q7Vs4J8SV2JGu8O8xZDfl8soVOkYRHzAddVz12hojVgxcn/xJreD
-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:12 2025 by rpki-client