Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213711.roa
File: AS213711.roa (raw, json)
Hash identifier: 8hNs3h8L/Qe0t8YmYFpnxfLkL/tFqPBcyyaKlBzqkY8=
Subject key identifier: 98:75:A3:55:CE:D9:8B:54:0B:86:CB:09:1B:A4:77:F7:F3:C7:11:03
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 54D473F123EB747FA71383B9CBC1085FC44006A4
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213711.roa
Signing time: Mon 10 Nov 2025 22:46:54 +0000
ROA not before: Mon 10 Nov 2025 22:41:54 +0000
ROA not after: Mon 09 Nov 2026 22:46:54 +0000
asID: 213711
IP address blocks: 2a0f:85c1:b35::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 20:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d4:73:f1:23:eb:74:7f:a7:13:83:b9:cb:c1:08:5f:c4:40:06:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Nov 10 22:41:54 2025 GMT
Not After : Nov 9 22:46:54 2026 GMT
Subject: CN=9875A355CED98B540B86CB091BA477F7F3C71103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:20:18:bf:0b:38:0e:56:eb:da:91:19:bb:
66:5b:13:ed:18:e4:ba:be:89:97:74:d0:fc:cf:e7:
10:3e:9d:64:91:5a:74:d3:b7:86:b9:24:49:e6:cd:
d9:b7:8e:23:b9:d5:37:5f:9d:b5:ba:12:a0:6e:97:
82:59:cb:52:a1:8f:bc:45:da:4d:d5:73:0d:85:a6:
2a:0f:30:cf:6b:1e:00:70:8a:52:2d:77:8d:80:bf:
39:97:22:e2:42:7e:d5:db:8c:0e:12:03:f5:6c:19:
ef:1f:8c:91:0e:25:14:a2:6d:57:c7:39:82:b0:41:
2d:b7:72:97:41:ea:11:cd:06:09:b7:03:f5:58:fe:
f9:06:c6:20:ae:ff:e2:21:f4:b4:9f:a8:c8:78:d2:
2f:9f:7f:5c:39:71:a3:dd:1d:74:2f:e4:1a:3b:d3:
12:4a:01:a7:7d:5b:cf:87:b6:91:b4:16:57:c0:ab:
aa:c5:df:5e:f9:5a:0b:fc:97:d5:96:53:fa:7a:3e:
a4:9b:18:03:26:23:f3:ee:39:8c:b1:22:05:97:c5:
1d:57:05:1a:94:21:d4:ff:71:2b:49:7d:86:41:85:
dd:c2:ae:c0:45:d3:57:12:70:e5:08:03:53:15:36:
d2:8d:8a:92:b9:56:fe:54:69:ee:de:92:29:07:1c:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:75:A3:55:CE:D9:8B:54:0B:86:CB:09:1B:A4:77:F7:F3:C7:11:03
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b35::/48
Signature Algorithm: sha256WithRSAEncryption
aa:5f:df:5c:2a:af:55:eb:2e:fa:5a:13:cb:60:45:f8:18:ae:
62:b4:5c:3b:e2:a8:33:df:f5:1c:26:24:1e:b8:99:61:49:b0:
63:d8:5c:99:c2:26:34:29:ab:14:75:e2:c8:66:e8:33:27:c0:
76:80:90:d7:ae:a5:35:52:84:6d:cc:72:8c:fc:ee:b0:d1:48:
fe:0b:27:06:23:f4:d7:5f:e2:79:47:a3:d3:2d:c6:f6:30:70:
e8:d4:b0:b1:20:fb:bb:9f:f2:55:a5:9e:81:c2:41:56:09:be:
d3:fc:ee:1e:85:f9:e5:22:5c:01:ba:84:b0:2d:ff:6b:fb:8d:
8d:92:d8:59:e2:f9:0c:33:bf:b3:42:2c:81:78:b3:aa:55:a4:
91:b9:66:1d:b7:92:c1:99:54:b4:14:21:54:3a:e5:43:e0:b6:
05:67:a8:40:69:23:79:8a:11:d2:e5:83:49:06:f6:a5:75:94:
ce:54:74:d6:13:6d:f5:3e:72:cc:06:51:d1:fa:8b:a1:62:05:
96:05:29:35:75:b6:44:f0:e4:cc:85:64:69:c3:8c:67:a5:c4:
c1:29:97:3a:4c:66:27:94:fb:9a:c6:25:55:dd:bd:d6:e7:73:
d2:c1:2a:f4:33:48:49:ea:2e:0d:c9:b9:60:e4:e2:fe:26:f8:
c2:49:01:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 06:39:09 2025 by rpki-client