Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213607.roa
File: AS213607.roa (raw, json)
Hash identifier: ecQhrmZLsZmTXgp6wFLkEkxufzRmgSsVaU2z8xN1WiY=
Subject key identifier: 8E:3B:2F:A6:92:5B:F7:CC:44:FF:F3:CC:B8:66:2A:B7:6E:55:76:BD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 427124F320CA145040863A6E1E04AFC510C9AF61
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213607.roa
Signing time: Thu 04 Sep 2025 06:41:26 +0000
ROA not before: Thu 04 Sep 2025 06:36:26 +0000
ROA not after: Thu 03 Sep 2026 06:41:26 +0000
asID: 213607
IP address blocks: 178.95.159.0/24 maxlen: 24
178.95.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:71:24:f3:20:ca:14:50:40:86:3a:6e:1e:04:af:c5:10:c9:af:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 4 06:36:26 2025 GMT
Not After : Sep 3 06:41:26 2026 GMT
Subject: CN=8E3B2FA6925BF7CC44FFF3CCB8662AB76E5576BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:a7:94:d5:4d:6d:5c:86:27:06:12:e1:d5:
58:b1:f5:03:d8:a8:95:a0:aa:8b:f3:ef:65:a1:d3:
5d:41:01:1e:34:db:1b:61:64:2f:98:da:43:42:55:
2f:a9:94:a2:ae:7a:1d:be:db:0c:6b:22:ec:04:0f:
f3:da:96:ea:33:bc:ee:e2:f3:dd:72:55:cb:c0:17:
4e:04:02:d8:7d:14:02:7b:a4:f4:55:05:9b:86:43:
6e:c4:44:4c:7a:75:c1:f1:b6:18:9d:06:28:72:00:
6d:5a:e8:4f:b1:91:b2:0c:77:0c:cc:24:df:2a:90:
c1:cd:2e:78:bf:8a:c6:a8:8a:b0:65:e5:d9:92:91:
5c:58:18:51:2c:43:0c:d7:3a:5a:d9:f3:4b:af:d0:
ba:2d:95:45:96:22:b0:36:ae:fe:0b:3e:cc:3a:bb:
18:7a:f8:fc:0e:a1:fe:42:e2:ec:7a:a3:00:8c:57:
a5:25:7b:0f:d2:7b:48:c3:b1:8f:a5:34:bb:56:2a:
d6:30:25:95:eb:d0:ca:a2:1f:89:5b:c9:33:71:b6:
97:79:19:62:ef:d7:7c:cb:96:8e:61:f0:c8:04:ff:
4e:c7:67:07:a0:4e:a0:f5:94:31:80:d2:05:9e:a1:
99:db:b4:e3:19:f1:63:0e:25:86:a5:b2:8b:11:c7:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3B:2F:A6:92:5B:F7:CC:44:FF:F3:CC:B8:66:2A:B7:6E:55:76:BD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.159.0/24
178.95.237.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e1:cf:d1:a9:99:04:eb:08:64:4f:68:28:af:60:57:05:64:
74:71:e4:58:90:f4:ff:ff:6b:40:1c:db:9c:b7:b1:e4:55:34:
5a:2c:ec:60:37:2f:9d:28:d4:65:5f:72:e3:e1:76:eb:72:04:
09:cc:df:c2:a5:5c:a8:6f:fc:5c:3d:d0:a8:12:09:8f:49:2b:
41:b8:39:d5:d7:8d:cf:cd:51:ee:f5:37:93:c5:06:b1:c2:f4:
71:2f:9d:c9:f9:46:ea:cd:4e:50:52:37:8d:bc:ab:ed:94:c1:
73:e3:e8:d1:26:a6:19:ff:37:a3:6b:0c:54:5b:8b:a7:26:3e:
97:66:a2:16:67:c1:1f:81:8e:3f:6d:c7:90:a6:9d:97:8e:8c:
02:e8:ed:fc:58:26:b9:9c:50:54:1a:9a:c2:a6:00:7e:f1:33:
80:04:dd:6e:35:d2:70:31:f1:72:6f:45:99:cc:e4:e2:9b:93:
07:15:79:91:ae:af:9f:35:00:d4:22:11:c1:b9:59:55:57:b6:
b4:b9:39:3f:ff:08:ca:c5:a5:05:0f:11:a6:b9:69:85:d6:07:
e6:48:11:58:89:9a:75:41:f5:e7:98:9d:f8:52:8c:8d:d4:2a:
76:53:87:df:03:35:95:1a:7a:f3:91:d1:7f:de:05:57:ed:03:
49:4c:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:35:50 2025 by rpki-client