Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211851.roa
File: AS211851.roa (raw, json)
Hash identifier: LE/KThKaLZvhyO7IWstgXRu2CsgCFZqBbEOOyKBlMEk=
Subject key identifier: 15:DA:CB:2D:E4:EB:09:E4:70:80:2A:C1:7E:86:D4:6A:95:E3:58:32
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 16E4CEB9E5C5D9AF00083FAE6780914916D5FAD1
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211851.roa
Signing time: Tue 02 Sep 2025 18:52:11 +0000
ROA not before: Tue 02 Sep 2025 18:47:11 +0000
ROA not after: Tue 01 Sep 2026 18:52:11 +0000
asID: 211851
IP address blocks: 45.157.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e4:ce:b9:e5:c5:d9:af:00:08:3f:ae:67:80:91:49:16:d5:fa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 2 18:47:11 2025 GMT
Not After : Sep 1 18:52:11 2026 GMT
Subject: CN=15DACB2DE4EB09E470802AC17E86D46A95E35832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:cb:23:1c:70:44:c2:65:15:1d:0c:7c:e6:
2b:2c:f8:bb:82:bd:80:49:8d:d2:0c:a0:8a:7a:7f:
0e:de:2c:9c:81:dc:e0:57:10:ba:6a:89:4d:2a:fe:
33:30:97:ef:02:df:2c:f3:c9:db:35:71:e3:80:b5:
3b:b0:c2:67:c9:d8:64:be:98:c3:6e:3b:ef:95:e5:
aa:81:8e:f2:e7:f9:00:da:e7:e6:ef:8b:e1:b8:fa:
7d:62:61:de:c8:17:f4:6f:14:ab:73:52:ac:e0:4d:
b2:f8:ef:ac:72:8f:28:b6:a5:74:27:01:60:73:5b:
44:e1:59:08:49:4e:18:c8:8b:6e:94:3f:32:59:28:
38:d0:f9:31:b9:98:b2:e6:a5:b0:da:b1:48:3f:4c:
35:48:4c:f8:3b:b9:e3:d1:73:18:21:77:8d:a5:fd:
47:59:a2:28:d5:d2:dd:eb:16:ee:e3:d1:cd:8e:ae:
57:5e:d4:20:39:97:61:15:d7:f9:72:c5:9b:b6:64:
df:81:cd:4e:ee:d9:dd:ff:eb:06:62:4c:34:24:3a:
98:cb:08:75:e8:7b:d1:f0:f5:df:ab:fc:03:a2:4d:
39:35:74:0b:54:a1:cc:fd:57:f4:17:8e:11:c1:65:
6e:41:af:b3:6f:ed:e9:d5:d7:ab:ef:c9:f6:86:e4:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DA:CB:2D:E4:EB:09:E4:70:80:2A:C1:7E:86:D4:6A:95:E3:58:32
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211851.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e1:5a:af:b2:2e:82:1a:45:9c:b9:15:de:1a:30:da:83:dd:
dd:13:e1:a0:87:bb:87:49:cd:4b:4e:24:27:a6:04:be:9c:c4:
79:e2:e9:65:37:4f:91:ed:5f:68:c5:35:2f:a1:e2:e9:0f:be:
4d:dd:b2:26:95:4c:3f:b6:2f:bd:42:2a:c0:73:60:3f:f4:8c:
be:92:12:d1:da:14:d8:bb:82:e0:a0:d2:16:0a:55:c1:a9:b8:
50:90:61:35:ea:20:5e:5c:1a:5f:4b:ba:79:de:3b:70:19:12:
cb:6d:30:a9:c7:2c:d3:c8:af:71:bd:bb:ac:1e:e9:cb:49:04:
c2:5a:97:1e:94:e7:c7:ff:01:8c:25:79:2d:56:ec:fb:3d:37:
ca:56:de:e8:08:58:7e:0e:b4:18:a5:26:cf:61:35:71:d0:0b:
a4:c8:b3:b4:68:70:61:6a:7f:b6:d4:f9:af:79:54:c7:15:9c:
26:94:7a:f7:51:6a:fc:be:12:75:ec:f6:e7:8e:52:a1:6e:34:
78:9e:62:ea:73:90:23:a0:51:68:2e:23:94:35:1f:c3:27:94:
0c:c3:a6:01:d4:51:87:f7:e7:61:af:95:ee:2b:b5:17:90:a1:
0d:b9:9d:85:1a:68:1e:1a:23:0e:ce:fd:39:f5:e8:df:b1:76:
84:0d:7e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:02:44 2025 by rpki-client