Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216085.roa
File: AS216085.roa (raw, json)
Hash identifier: srz2s3wfHiaMJVli1GlJQQ9FNMhuInqSgf2zqkV0GDU=
Subject key identifier: 1D:AA:C8:C8:AC:01:DB:74:75:53:BF:41:5E:26:CF:F3:D9:49:66:31
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 11D8670CC8BFF5B149308A93886270363B3D0AA8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216085.roa
Signing time: Tue 02 Sep 2025 16:37:00 +0000
ROA not before: Tue 02 Sep 2025 16:32:00 +0000
ROA not after: Tue 01 Sep 2026 16:37:00 +0000
asID: 216085
IP address blocks: 2a0f:85c1:d3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d8:67:0c:c8:bf:f5:b1:49:30:8a:93:88:62:70:36:3b:3d:0a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 2 16:32:00 2025 GMT
Not After : Sep 1 16:37:00 2026 GMT
Subject: CN=1DAAC8C8AC01DB747553BF415E26CFF3D9496631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:d5:47:0d:2c:63:e5:69:02:6b:a4:e7:01:
1d:e4:11:6d:32:b1:44:1b:f1:fe:49:ad:06:b6:f5:
04:0c:6f:3b:20:12:b1:42:85:91:1f:8f:08:c0:d6:
e1:80:97:b6:2b:b3:e6:dc:8b:09:ad:d9:1e:ff:a0:
59:42:87:f5:29:f5:e4:62:7a:f6:6e:55:59:d8:34:
a7:ef:9d:01:bc:b2:35:7b:fd:4d:88:87:ea:b4:4d:
ac:b4:5c:93:99:95:be:e3:59:5e:5f:ed:5e:6b:4e:
0d:4f:b8:5c:9c:53:d9:57:3c:5f:c3:be:44:e0:17:
51:cb:4e:eb:62:f4:3a:69:16:bd:a5:7a:80:a1:5f:
a6:74:ef:ed:17:e6:0d:1d:f8:d1:0b:f7:80:e0:80:
12:15:61:be:e2:27:e7:22:e0:e6:01:d4:db:9d:2a:
91:4d:6d:01:17:2a:2b:d7:4c:a9:4f:20:aa:7b:03:
87:bc:95:63:e5:fc:ec:bb:c6:3f:1e:ba:3a:97:43:
42:71:d2:95:aa:13:6c:af:18:26:3b:05:15:49:bd:
ec:4a:3d:23:5d:6d:48:77:67:eb:1c:b8:5b:16:23:
5a:3a:f5:2f:9d:d7:e6:ce:11:e8:82:1f:95:90:26:
d9:f7:c2:a4:50:db:a4:a6:38:49:e8:3a:9a:5b:45:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AA:C8:C8:AC:01:DB:74:75:53:BF:41:5E:26:CF:F3:D9:49:66:31
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d3c::/48
Signature Algorithm: sha256WithRSAEncryption
28:6a:14:60:b8:08:78:3f:9d:ae:70:84:ca:91:03:11:be:2f:
47:a8:bb:58:97:c3:57:9f:81:52:00:f1:fd:86:f5:2c:ef:42:
db:1d:ec:e7:85:93:bd:f6:5c:20:5d:fe:71:bd:9c:9f:38:b0:
e9:fc:35:41:2a:9d:90:9f:17:02:60:79:2b:ed:46:1b:bd:58:
ad:9e:b4:88:1c:c6:d2:bf:42:9f:71:31:7e:34:1a:60:de:76:
70:97:88:96:9c:40:7d:69:25:81:3c:be:c1:72:5e:fd:76:14:
1a:d5:12:35:ac:ee:e2:41:17:30:6d:4b:8d:44:81:59:90:ed:
a7:cc:88:26:39:ea:f4:c4:72:0c:7b:92:99:da:da:e6:02:c6:
0f:55:5c:96:d6:11:38:7e:92:05:c6:3c:17:85:cf:08:9a:a4:
30:b5:5f:e5:2a:b4:94:10:f8:f6:fa:93:28:9a:a1:83:a8:93:
44:ad:ce:b6:f3:17:3c:a0:d2:e9:e0:f5:9e:60:50:ec:75:df:
71:4b:28:90:5c:20:a1:3a:94:f8:68:50:73:72:da:59:bb:5d:
08:8c:7c:69:d8:d4:1c:18:74:94:8a:80:35:e6:8c:94:35:e8:
5c:83:02:2c:4b:70:cf:06:34:73:0f:1f:79:61:2c:66:b2:70:
96:10:ea:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:58:10 2025 by rpki-client