Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210812.roa
File: AS210812.roa (raw, json)
Hash identifier: fflzrUcMJvbKN2migvsINuzVtRvAj8BexPMpJBPglng=
Subject key identifier: 0C:F7:CD:EB:EF:0A:2E:6D:8D:83:04:19:7B:6D:F9:7A:16:3A:D7:EA
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4F0460FD630AB2EFB15E757D75414E9466DC320B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210812.roa
Signing time: Tue 14 Oct 2025 20:27:22 +0000
ROA not before: Tue 14 Oct 2025 20:22:22 +0000
ROA not after: Tue 13 Oct 2026 20:27:22 +0000
asID: 210812
IP address blocks: 2a0f:85c1:d65::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:04:60:fd:63:0a:b2:ef:b1:5e:75:7d:75:41:4e:94:66:dc:32:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 14 20:22:22 2025 GMT
Not After : Oct 13 20:27:22 2026 GMT
Subject: CN=0CF7CDEBEF0A2E6D8D8304197B6DF97A163AD7EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:55:37:58:db:18:dd:81:48:c6:d4:92:7d:
ba:04:74:fd:e6:d3:95:70:a8:a2:68:16:8d:2f:f7:
bd:a8:f5:28:c1:51:f9:18:2b:2c:06:42:02:44:24:
4a:91:f4:05:8a:a5:bb:1a:a6:43:71:1b:e7:99:48:
48:f6:fa:53:3e:25:2f:a3:57:0d:4e:b9:3b:19:45:
a1:fd:a9:64:08:54:82:c8:eb:d9:a4:d4:0e:48:98:
9f:05:0d:2e:4e:3e:4a:27:49:4e:f6:25:e7:30:27:
64:cf:a4:ce:0c:09:1f:65:ee:b5:2a:1c:c4:6c:ea:
7d:32:0a:12:1b:f1:47:5e:94:6b:e1:70:a2:0d:d5:
16:ab:f1:dc:e0:f9:57:22:d7:03:5c:5c:23:a8:00:
3b:bd:4c:bf:01:42:61:e6:a5:5d:51:8c:9d:36:52:
b1:4e:7e:c8:ee:8c:22:12:dc:b2:de:d7:3d:52:8f:
40:57:39:af:ed:ff:28:67:12:56:65:37:8c:9a:93:
b9:8a:c6:12:cf:20:e1:d2:17:58:08:7f:cc:ae:d0:
0e:cb:e3:7a:1f:b8:92:76:d3:1d:15:01:a8:ee:53:
cb:72:4d:41:20:c0:4b:44:a8:96:42:a7:54:9b:8a:
70:c6:fe:95:88:70:e2:77:2b:11:6c:f9:48:14:b8:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F7:CD:EB:EF:0A:2E:6D:8D:83:04:19:7B:6D:F9:7A:16:3A:D7:EA
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d65::/48
Signature Algorithm: sha256WithRSAEncryption
e5:ac:49:b9:42:b3:3c:6c:8e:3f:be:df:c8:9f:93:87:c0:8b:
24:c4:b5:11:b7:22:9e:c7:31:c8:47:a1:fd:d4:eb:50:0d:39:
17:c4:b0:d0:bf:87:7a:ec:3d:d0:7c:78:06:95:3a:84:29:8c:
bf:e2:75:a3:a1:9a:b1:51:de:bc:6a:83:42:2a:90:56:53:a4:
73:4c:14:a8:e7:6e:68:e3:26:23:de:ef:9e:e9:c5:67:74:91:
f0:0e:92:94:44:db:67:36:6f:51:6d:49:3b:0d:16:98:4a:af:
a3:d7:33:3e:a2:74:20:95:cd:ae:80:3f:f8:01:c8:69:5b:1b:
dc:d2:6a:36:f4:2b:5d:7c:08:f0:3d:6c:9f:28:e8:35:ce:f6:
39:fa:e4:60:1c:c3:84:43:42:25:f5:c0:7f:b6:da:f1:fe:34:
dd:a5:7f:ba:6a:5e:61:d5:2d:f3:81:82:9a:3a:d1:8b:e9:4c:
b0:5b:a5:e0:69:a7:ba:55:c4:f6:69:be:ea:21:a1:07:85:eb:
88:df:96:f4:26:29:38:1b:9c:03:29:20:f1:11:fe:00:ee:2f:
5d:e4:1f:dc:0f:32:56:32:cd:b4:e2:4b:f8:bc:29:60:1a:3a:
d5:ca:a4:e1:1b:3e:f9:44:8c:d6:e9:05:9d:e7:71:aa:6e:0a:
10:39:36:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:52:31 2025 by rpki-client