Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210100.roa
File: AS210100.roa (raw, json)
Hash identifier: GEcpN6Vun93GIReDVv3SZLvWh4eAzhqympKSaSTnmyI=
Subject key identifier: 7E:9C:C5:21:51:CA:1B:93:80:18:F8:39:4A:CE:C2:F5:28:A3:65:8B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4C8B9CC280C614CED3CBFF7063765ED344AEC81E
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210100.roa
Signing time: Tue 02 Sep 2025 14:43:07 +0000
ROA not before: Tue 02 Sep 2025 14:38:07 +0000
ROA not after: Tue 01 Sep 2026 14:43:07 +0000
asID: 210100
IP address blocks: 2a14:7581:ff6::/48 maxlen: 48
2a14:7583:f600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 13:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8b:9c:c2:80:c6:14:ce:d3:cb:ff:70:63:76:5e:d3:44:ae:c8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 2 14:38:07 2025 GMT
Not After : Sep 1 14:43:07 2026 GMT
Subject: CN=7E9CC52151CA1B938018F8394ACEC2F528A3658B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:73:9f:63:7e:31:a5:e7:fb:28:7c:7b:e9:
02:d2:16:e7:01:12:76:20:65:71:31:c8:64:06:e2:
e9:1f:4a:1a:3f:9f:a7:93:c5:0e:d4:cd:98:a9:a0:
03:2c:ca:7c:a5:8d:0c:e2:88:d1:c3:2b:58:33:df:
a8:5c:1c:fc:4d:19:a5:c7:eb:c0:43:be:e7:e2:96:
7c:a1:38:2e:d2:59:57:b3:51:06:9a:57:41:a6:2d:
31:cf:42:e6:4c:06:fd:f3:2e:55:34:50:81:58:3d:
4e:90:20:aa:70:7b:f5:a7:d2:84:7a:9a:3c:7f:a7:
b6:a4:57:44:a6:48:9d:34:8d:01:18:80:0e:54:dd:
16:05:1e:03:79:00:45:45:b0:5d:7d:89:94:fb:be:
2a:3b:84:8b:e6:96:e9:73:51:6b:3b:e7:38:c7:7d:
4f:e5:c9:80:e5:f2:bb:e3:99:f9:2b:30:59:ed:a4:
6a:66:f0:7c:c9:ac:55:a6:1b:e0:03:7d:bb:66:dd:
d8:e5:7f:bd:fd:10:36:fd:b5:07:e8:ae:82:ee:fe:
b7:a4:dc:c3:29:58:20:61:5c:d6:62:2f:d3:f0:1f:
02:ab:66:c0:32:58:ab:1a:03:2a:55:06:1c:5b:c5:
7c:f6:fc:f8:6d:4f:09:91:02:68:0f:01:c5:cd:de:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:C5:21:51:CA:1B:93:80:18:F8:39:4A:CE:C2:F5:28:A3:65:8B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ff6::/48
2a14:7583:f600::/40
Signature Algorithm: sha256WithRSAEncryption
4d:e7:93:69:ae:61:46:34:4d:d0:f5:bd:ae:a4:cf:1f:2d:04:
ea:52:a1:c0:12:de:25:ce:66:07:54:5d:4c:3e:fd:e0:48:79:
12:ba:1a:ca:a0:83:ac:be:40:e9:48:ad:07:bf:16:b0:97:68:
93:14:90:2e:08:47:19:a6:25:86:cf:db:70:3a:8c:ef:92:26:
6b:23:01:45:71:c7:1e:7e:4e:c9:a5:10:e6:f3:bf:a5:6e:2f:
ff:f0:4f:b5:1f:e1:18:fb:fb:38:88:ca:47:a4:6a:0d:2a:06:
ff:83:ac:30:12:55:12:9d:24:d9:a0:57:2c:f0:e6:53:e1:83:
7d:fc:c7:fb:c3:3f:02:f3:54:3b:be:da:95:06:30:b6:21:4a:
c2:fd:d8:02:63:15:8d:83:d6:93:57:30:64:37:ca:f4:e3:39:
f1:b1:37:8e:d8:e3:26:32:cb:c1:a2:20:df:ae:bd:d4:2b:e4:
cd:9a:6a:68:52:ab:1e:98:73:7b:f9:43:3f:89:a0:ee:62:93:
ec:f8:31:b2:de:30:ba:2d:b6:1b:73:88:c1:b9:5c:53:fe:93:
29:40:16:79:84:71:10:98:15:e0:e6:62:f4:6c:46:f4:35:8e:
21:9f:dc:04:93:1c:e8:ca:33:ab:82:41:a5:fc:ac:c9:59:f5:
e0:3c:9a:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 7 02:20:36 2025 by rpki-client