Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210907.roa
File: AS210907.roa (raw, json)
Hash identifier: DhIJvg72qLlRB5YZtx94Z0keSgn58lmd6xkl2pGJkeM=
Subject key identifier: 01:45:7D:C0:C0:80:CC:74:1C:EC:9B:DF:DF:3C:85:D2:A5:E7:F4:A3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 46CF162D0B3A4362BF1AB9D13D169FF2C2B1C64A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210907.roa
Signing time: Thu 11 Sep 2025 09:11:44 +0000
ROA not before: Thu 11 Sep 2025 09:06:44 +0000
ROA not after: Thu 10 Sep 2026 09:11:44 +0000
asID: 210907
IP address blocks: 82.25.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cf:16:2d:0b:3a:43:62:bf:1a:b9:d1:3d:16:9f:f2:c2:b1:c6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 11 09:06:44 2025 GMT
Not After : Sep 10 09:11:44 2026 GMT
Subject: CN=01457DC0C080CC741CEC9BDFDF3C85D2A5E7F4A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:0d:92:5a:1c:63:ec:87:eb:5d:49:8b:57:
91:fe:98:90:0e:38:08:7c:d2:69:8a:77:48:88:68:
04:03:3b:a0:4b:e4:19:3f:11:28:dd:80:09:44:c9:
2b:d2:fd:4a:29:25:1f:0c:98:62:c3:1f:95:1d:99:
d6:f0:95:6c:4d:47:9b:88:d5:3d:41:26:05:e2:97:
f3:5f:91:0a:2f:66:e3:f6:5b:71:86:fc:86:8c:0c:
f0:d7:ec:e0:1e:d4:4f:44:00:a8:94:a8:dd:16:44:
da:ef:7b:8b:f7:ef:5a:f7:00:36:e1:8e:d8:82:9a:
6d:b8:dd:8a:dc:d2:7a:5f:88:7a:fc:8f:57:7a:ac:
20:6d:57:c5:d2:37:47:d6:c9:82:02:55:96:9e:ed:
df:6d:bc:b6:3b:63:b1:85:e5:f6:22:3e:c2:cf:25:
f0:65:6c:9e:0a:a3:57:25:da:ef:dc:95:b3:cc:9c:
16:a6:29:39:15:3e:62:aa:99:12:33:f9:96:62:6a:
8b:a2:70:ac:7c:1c:af:86:a1:d9:74:99:bb:5f:84:
7c:7d:75:a0:17:fb:d0:94:9e:39:7d:87:75:5a:2e:
52:c8:37:68:cf:e2:e6:9b:99:f0:79:dc:4f:78:16:
81:a9:3a:82:e7:f7:d9:74:ac:b8:f2:65:07:86:ca:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:45:7D:C0:C0:80:CC:74:1C:EC:9B:DF:DF:3C:85:D2:A5:E7:F4:A3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210907.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:78:ba:2d:32:ee:1e:f5:f8:65:5f:f7:7d:44:16:40:b7:46:
da:df:7c:f1:ef:f0:23:da:bb:ca:29:b2:ba:24:5f:2d:36:7e:
27:0c:5c:1f:2a:69:62:67:83:cc:fa:bb:11:11:b8:65:47:a5:
13:5d:4a:4c:a6:4d:fe:ef:b8:a7:ce:4a:10:5c:fa:12:0b:a3:
7e:dd:f9:02:f5:8d:54:b1:05:1f:e2:fa:7d:68:60:ea:37:4d:
4b:63:61:a7:d6:aa:5f:27:51:37:b1:a9:09:28:a1:2f:59:7e:
1e:71:99:dd:db:76:57:a5:e2:c3:9a:28:88:3e:51:da:60:89:
10:82:cd:09:81:3f:ef:96:7b:f1:f9:c6:2a:ad:9e:bf:d8:57:
82:04:32:18:d8:02:9f:99:54:6d:65:5b:a1:ce:90:c1:9d:ff:
80:3e:8b:34:0e:c7:c7:9b:c7:54:9b:cb:45:32:f2:11:a4:f9:
71:0a:fd:e7:42:f9:e1:ff:71:c6:35:d1:51:54:7b:3c:b3:45:
5e:c4:67:f7:2f:e8:36:c2:0c:1b:72:ac:aa:3f:ab:35:07:89:
2a:91:2d:1c:83:fa:71:a9:13:65:65:1c:2c:91:71:6e:12:a9:
23:ba:5b:0c:6e:e4:85:ca:dc:e6:c2:6d:05:82:b7:52:94:3f:
d3:ba:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:27:31 2025 by rpki-client