Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213796.roa
File: AS213796.roa (raw, json)
Hash identifier: VaF4XOkBSdQwmwcaPsUFkw/VXK5IXRwYa75FECSW3qQ=
Subject key identifier: F3:05:82:BB:87:8E:85:2A:66:59:67:9B:9F:E7:47:CB:76:60:4F:B1
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 50DB4F81E69E2E2C0D42B18F823326E2E3F256B1
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213796.roa
Signing time: Tue 04 Nov 2025 01:07:58 +0000
ROA not before: Tue 04 Nov 2025 01:02:58 +0000
ROA not after: Tue 03 Nov 2026 01:07:58 +0000
asID: 213796
IP address blocks: 2a0f:85c1:8f3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:db:4f:81:e6:9e:2e:2c:0d:42:b1:8f:82:33:26:e2:e3:f2:56:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Nov 4 01:02:58 2025 GMT
Not After : Nov 3 01:07:58 2026 GMT
Subject: CN=F30582BB878E852A6659679B9FE747CB76604FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:a1:61:34:05:49:50:9a:67:73:c3:4b:e2:
1a:56:b9:00:e7:60:9e:84:c0:0f:24:3d:ae:a6:56:
78:fd:33:5f:30:3a:04:43:5f:d6:99:6f:40:02:a1:
d2:af:2b:29:37:53:8a:af:8e:9a:ca:22:46:42:6b:
68:df:f6:d1:de:87:46:ce:54:15:df:4c:1b:9e:f4:
41:85:be:16:ce:3e:6a:2c:5f:65:38:7b:a9:a4:de:
05:77:d7:35:8b:f4:eb:86:65:53:05:35:8d:4a:2c:
fd:c6:63:3e:79:69:3a:32:1b:41:14:3a:29:68:cb:
f3:b9:ac:52:5c:c9:2c:a7:e6:17:b9:e6:8e:02:a0:
35:59:d5:53:b4:c4:fe:6f:83:29:89:d8:92:bd:58:
a8:bf:82:64:6c:58:e1:23:36:2a:3d:9e:1b:86:ad:
85:15:72:21:0a:6b:5b:54:40:e1:ca:55:91:59:38:
91:cd:f0:a7:5c:74:5d:ee:ea:3e:c1:5d:29:49:dd:
7d:ef:5b:0d:5b:c1:0a:55:3a:f3:dc:90:8d:fb:40:
b4:70:83:14:81:59:05:84:8b:e5:f7:7d:08:61:9a:
31:24:29:ca:05:c3:ec:a7:2a:39:eb:e4:eb:d0:18:
67:40:8e:8e:57:9c:3a:d3:15:7a:aa:e5:cc:e8:86:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:82:BB:87:8E:85:2A:66:59:67:9B:9F:E7:47:CB:76:60:4F:B1
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213796.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8f3::/48
Signature Algorithm: sha256WithRSAEncryption
32:94:9a:22:fd:48:80:42:0f:a1:fa:08:66:e1:1f:33:11:8e:
0c:a9:cd:05:aa:81:a2:18:3d:3d:66:f1:3c:00:d8:8c:81:9a:
eb:66:4a:b5:87:04:6e:a3:16:bc:6e:82:c0:9c:74:78:d7:bf:
a5:81:92:de:e9:0d:97:d0:67:f7:2f:ba:4d:43:30:ff:2f:8b:
cb:f2:5f:34:84:d6:16:62:41:86:ec:0e:af:13:40:37:14:07:
d8:21:ad:45:6a:7d:cb:da:94:cc:42:f0:2e:ee:19:33:d8:33:
c0:50:44:9a:20:53:1d:8f:87:d4:bb:e3:0f:1a:17:93:9f:af:
3c:31:b1:ee:38:a7:1f:ff:a1:90:0d:8a:85:6f:d2:9f:0e:f0:
06:56:26:1b:28:fa:4d:7a:f8:f1:59:fb:03:57:0b:fd:d7:5e:
38:62:59:73:80:da:c1:56:d2:f2:d3:63:9a:85:5a:b2:2e:32:
31:42:92:85:57:08:3c:18:d4:39:7e:e0:c7:a0:23:9f:ce:f4:
1c:f2:3c:2e:6b:59:1c:d9:35:58:38:5b:ed:fb:26:8a:73:90:
04:a4:44:3c:e8:57:95:d2:2b:71:cb:9c:49:bc:ed:58:db:d3:
78:47:76:e1:ed:2f:cc:8f:6b:93:e9:92:07:c4:a0:ad:0f:fc:
5a:14:61:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:44:17 2025 by rpki-client