Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213639.roa
File: AS213639.roa (raw, json)
Hash identifier: h0304kas9wJkRQstKzwIxI1LuN5WcYUGpMtIwuAMfeM=
Subject key identifier: 6B:62:52:8F:75:7F:01:37:B8:B3:0C:85:9D:F0:97:B9:3D:1D:65:15
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1C1933DAF12BB7919318D93A61252264492BD58E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213639.roa
Signing time: Thu 31 Jul 2025 14:54:40 +0000
ROA not before: Thu 31 Jul 2025 14:49:40 +0000
ROA not after: Thu 30 Jul 2026 14:54:40 +0000
asID: 213639
IP address blocks: 143.14.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:19:33:da:f1:2b:b7:91:93:18:d9:3a:61:25:22:64:49:2b:d5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 31 14:49:40 2025 GMT
Not After : Jul 30 14:54:40 2026 GMT
Subject: CN=6B62528F757F0137B8B30C859DF097B93D1D6515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:ea:55:50:b5:ff:f9:57:69:52:78:22:11:
00:36:53:6f:7f:d4:9c:98:31:c6:11:8d:b4:96:c4:
21:42:8f:c0:bd:8a:6d:fe:4e:86:90:ca:e6:d8:ba:
af:09:da:6d:61:cf:46:c4:4a:95:ed:21:d4:cd:53:
2b:05:82:d4:1a:6f:b7:da:c0:12:53:8f:40:0a:2b:
44:b0:01:f0:91:4c:2a:cd:e1:2a:f5:43:75:e4:2a:
c5:db:fc:d0:2a:a4:93:d8:25:d5:7c:21:66:a8:95:
74:be:c1:59:7c:ff:71:f3:d0:93:52:d4:61:86:95:
ff:d5:7e:f0:8a:71:3c:c2:92:e9:51:bf:90:04:e0:
6b:3b:25:3a:29:20:6b:7a:7f:00:e2:45:65:f1:7e:
f9:88:6c:d5:5c:1a:04:d6:8c:20:47:a6:31:89:df:
6f:d0:ea:ec:d5:35:b4:53:35:89:93:2a:36:85:2c:
8e:f5:17:b0:b3:ec:2f:b4:a1:b2:13:69:ce:16:9b:
00:85:59:ec:a9:a4:06:e0:b2:f8:35:f0:4d:b9:ac:
80:05:90:1c:bf:d2:ae:00:e1:ad:4d:e8:03:7f:dd:
d7:35:b1:8f:11:1f:49:21:f2:48:8b:72:4a:25:24:
4a:23:b9:30:16:eb:c4:72:33:77:92:c8:1c:47:42:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:62:52:8F:75:7F:01:37:B8:B3:0C:85:9D:F0:97:B9:3D:1D:65:15
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.34.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1a:23:dc:b3:b7:04:7a:17:99:76:5f:dc:af:14:2e:88:e6:
ad:63:4a:cd:56:43:be:2a:14:3c:2d:58:7e:e4:de:5c:fa:aa:
f5:84:0f:b2:d1:5b:23:ff:3c:4a:1f:67:af:7f:6d:12:cf:c3:
d0:0d:b5:cc:62:25:23:28:76:11:b7:8b:f4:f4:e3:ed:7c:c0:
70:01:58:e1:58:bc:f7:2b:ca:33:49:e4:86:a6:c2:38:5a:89:
96:d0:9b:2f:40:ff:57:09:cd:fa:cf:3e:c0:03:d9:eb:f0:3c:
cf:01:05:d4:bd:7f:b4:f8:5f:d2:1a:2a:d5:78:24:88:9d:43:
aa:36:a7:67:ca:d1:ef:ba:17:5a:62:99:76:64:0e:ce:b2:52:
af:23:8c:96:22:5b:07:63:65:86:62:34:54:5a:3c:67:99:68:
6a:c5:87:8a:95:9a:4b:6f:42:a6:3b:37:e8:5f:3b:b6:06:65:
07:5d:f1:21:50:93:53:11:d5:25:a3:95:22:1e:c0:62:b6:93:
64:5d:70:5d:d8:5e:d9:51:c0:65:1c:03:6b:19:ba:eb:ab:cd:
fc:ee:10:f7:c3:f2:c0:c9:27:00:87:92:58:49:17:62:37:8d:
54:2c:0a:df:d8:00:9e:c2:94:42:0a:87:5c:90:6d:0b:9a:f4:
df:4c:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:41:57 2025 by rpki-client