Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211224.roa
File: AS211224.roa (raw, json)
Hash identifier: d7o/maze06X7sT5TLqigBDvQveVLoBiOEbFBqn3A238=
Subject key identifier: 49:9B:CE:69:6A:AF:B4:37:D4:88:30:AF:21:1A:7C:E2:CA:D0:22:2E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7731092C2C5F8E841780DDF98B4D7280EF43A4A6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211224.roa
Signing time: Fri 25 Jul 2025 08:07:45 +0000
ROA not before: Fri 25 Jul 2025 08:02:45 +0000
ROA not after: Fri 24 Jul 2026 08:07:45 +0000
asID: 211224
IP address blocks: 2a0f:85c1:23::/48 maxlen: 48
2a0f:85c1:60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:31:09:2c:2c:5f:8e:84:17:80:dd:f9:8b:4d:72:80:ef:43:a4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:45 2025 GMT
Not After : Jul 24 08:07:45 2026 GMT
Subject: CN=499BCE696AAFB437D48830AF211A7CE2CAD0222E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:21:b3:32:22:87:7a:aa:f8:32:fd:94:6d:d7:
25:83:7f:f6:98:34:18:8b:46:dc:fa:4b:d6:8f:0b:
26:8d:94:ca:37:7c:86:86:25:58:4f:d9:98:f5:7d:
44:34:34:c6:1e:fe:31:23:d5:7a:03:2c:e4:07:ac:
28:c6:c3:67:1e:b1:35:c6:82:80:a4:a7:c2:67:99:
6a:dc:4d:36:73:d7:a7:d0:3a:1b:fb:79:53:89:d7:
ba:c8:a4:8d:5f:09:f2:3e:93:f7:27:f6:9e:91:01:
4d:17:25:db:2e:5e:1c:be:9e:64:14:4d:f0:2b:7d:
12:e0:f8:69:e7:f0:a5:4e:3f:a1:37:35:7f:22:51:
26:4d:a7:33:e0:d9:cc:1d:e2:62:3f:6f:25:a5:44:
4d:c1:93:ef:7e:ec:24:03:8d:77:2e:2f:02:88:a8:
be:12:3e:23:fb:17:c0:94:2c:e9:a5:85:a8:d5:bc:
d9:8c:49:e1:7c:07:72:30:54:de:be:4d:58:39:ef:
8e:02:fc:8f:f2:4e:33:9f:c4:22:0f:4e:b8:b0:b9:
cb:16:ef:8a:98:7a:f1:6a:18:a0:c0:01:9e:00:ca:
46:b6:28:d4:a2:50:85:f1:d2:1d:98:d6:5a:26:48:
b9:9a:e4:79:e1:b7:03:53:29:2b:7a:d3:37:86:3a:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9B:CE:69:6A:AF:B4:37:D4:88:30:AF:21:1A:7C:E2:CA:D0:22:2E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:23::/48
2a0f:85c1:60::/44
Signature Algorithm: sha256WithRSAEncryption
b7:58:99:11:3b:97:24:76:7e:cc:8d:80:de:d1:da:6a:03:c6:
89:59:f9:7c:e6:bc:f4:eb:48:49:9e:9d:33:91:75:5b:99:27:
75:3a:db:c2:df:de:a6:8e:62:ef:cb:a3:a4:e3:01:e1:29:e6:
8c:ab:3d:22:b8:7f:89:21:bc:81:b4:8b:81:9f:94:1a:57:f9:
05:e6:6b:14:d2:c6:21:4d:bd:8d:7d:6f:8a:0d:47:7d:ba:f1:
09:ee:3e:74:01:9b:14:5d:8f:d7:00:fc:ae:8f:cc:62:9f:58:
4b:0e:1e:53:a1:f2:fc:63:31:62:2a:3e:54:d4:ab:5e:3e:e3:
43:84:ce:06:34:54:ae:0c:34:b8:f5:96:a5:12:00:18:5e:72:
23:a4:cd:22:86:8e:b2:e2:db:d0:b2:54:fd:2e:35:48:91:31:
d4:98:18:d5:b5:b6:b4:ed:ac:fe:ed:e7:6a:48:ba:6f:a1:04:
bf:38:49:ad:ba:22:b0:88:29:95:08:14:20:ca:56:bc:de:27:
f2:e2:c5:15:c6:a3:75:e7:a0:73:bb:12:81:59:34:7d:6f:20:
eb:a0:56:52:5b:df:15:29:b0:0c:75:24:0d:d9:d6:de:b5:f8:
88:f5:5a:f7:b6:bf:a8:6f:13:80:a9:65:ad:6d:71:ee:f7:9d:
43:b1:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:27:19 2025 by rpki-client