Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210030.roa
File: AS210030.roa (raw, json)
Hash identifier: cyuADH3h/cNKZF6mJ0tmlkUcBcEfbUQSOfBBMLINdAA=
Subject key identifier: 06:74:66:D3:B1:6E:0B:51:D6:85:7A:8C:DC:6F:00:F4:DD:F9:C0:7F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 69E9FB2DDFA436631D5838BAF9C03210E5DCCC89
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210030.roa
Signing time: Wed 10 Sep 2025 12:18:25 +0000
ROA not before: Wed 10 Sep 2025 12:13:25 +0000
ROA not after: Wed 09 Sep 2026 12:18:25 +0000
asID: 210030
IP address blocks: 2a13:9500:dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e9:fb:2d:df:a4:36:63:1d:58:38:ba:f9:c0:32:10:e5:dc:cc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 10 12:13:25 2025 GMT
Not After : Sep 9 12:18:25 2026 GMT
Subject: CN=067466D3B16E0B51D6857A8CDC6F00F4DDF9C07F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:49:49:8f:ea:7b:66:9f:67:f2:68:9a:fc:
19:ba:8a:cb:ac:28:aa:95:d4:cd:90:b7:7c:63:30:
2b:0e:fa:d8:e6:3c:98:7d:10:55:db:ea:6e:a9:ec:
53:5b:6c:57:13:52:a4:8c:c8:6e:8b:d8:c3:ee:23:
e4:c3:78:03:b9:e7:63:cd:27:b4:46:90:63:c2:3b:
c8:2b:14:ca:32:2b:4c:13:7a:c3:e9:c4:aa:0f:22:
07:44:e1:1e:29:20:70:59:92:77:2f:1e:8c:4a:2b:
26:ea:10:1b:bb:ee:b0:60:8b:5c:c4:cc:4c:11:f3:
7f:71:ff:52:23:a4:a8:e2:48:cb:c4:b7:3b:1a:77:
a5:d6:e8:07:67:73:4b:0b:89:ba:18:b6:1e:c6:e2:
54:3d:6a:f2:ec:ed:e9:e1:f3:31:6f:65:37:03:c3:
72:ff:38:a5:1c:4a:50:9a:85:0d:f5:5b:6a:0c:e8:
3f:09:36:e8:36:51:ac:96:b0:c0:c5:32:99:49:9d:
7c:b7:db:f7:29:34:c2:ec:87:38:26:e1:a9:4a:91:
74:6f:42:1e:a3:0e:2f:85:7e:4a:f7:50:83:8c:78:
7f:51:a5:10:72:23:c2:bc:76:66:e7:0d:15:55:fd:
60:df:d8:62:e1:c2:f9:b0:3b:c0:ea:fb:e7:d3:fa:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:74:66:D3:B1:6E:0B:51:D6:85:7A:8C:DC:6F:00:F4:DD:F9:C0:7F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:dc::/48
Signature Algorithm: sha256WithRSAEncryption
2b:2c:69:b7:7e:66:89:f4:54:5d:5b:71:8f:00:3f:8a:79:53:
47:0e:46:d5:85:5d:49:6c:70:d6:9c:3b:d6:cd:8f:a3:1a:1f:
96:8b:b7:08:53:9f:1c:82:1b:53:0e:e9:cf:a7:c5:bf:e4:df:
4f:07:59:c7:92:83:2a:1e:90:09:c7:30:61:9c:9d:62:04:d5:
0f:51:b9:69:54:3b:eb:5b:e3:27:82:75:fd:9c:09:79:bd:55:
7d:3f:a7:f9:89:f9:60:46:85:61:94:3f:ff:54:da:18:ba:cc:
f2:94:9a:50:12:da:29:b6:1c:45:71:16:a3:52:c0:e3:40:5f:
ad:57:cc:65:3b:ee:5f:b7:cb:54:4a:fa:89:88:40:f1:be:f4:
c1:13:4b:18:25:1c:31:ba:d6:79:b0:16:3b:92:2c:69:ca:e1:
f6:58:9d:f5:f9:34:d8:f3:25:51:e5:53:08:6c:aa:f7:78:bf:
0d:43:b8:95:da:9e:7c:b8:61:32:4e:70:f3:9f:80:9b:8c:f8:
dc:f4:9b:5d:bc:db:aa:ea:cb:e1:08:55:c6:94:00:9b:67:74:
ec:9a:e8:48:cd:d0:3a:9d:3d:62:00:d4:61:dc:b3:f6:3e:e4:
42:85:83:16:a6:26:04:b3:a9:e8:d1:a0:3e:3b:f0:be:88:68:
60:7b:85:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:27:30 2025 by rpki-client