Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213865.roa
File: AS213865.roa (raw, json)
Hash identifier: Ocszn2uAWXxH5OnbldChO+hmOrkXgk91oShudZGh9Vs=
Subject key identifier: BF:3F:79:28:AC:91:86:D3:51:35:E5:82:AB:47:7E:51:75:57:B9:26
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 49448FDAF97387CB82BCAE5C168B0779C6466D38
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213865.roa
Signing time: Tue 28 Oct 2025 22:07:57 +0000
ROA not before: Tue 28 Oct 2025 22:02:57 +0000
ROA not after: Tue 27 Oct 2026 22:07:57 +0000
asID: 213865
IP address blocks: 2a0f:85c1:8ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:44:8f:da:f9:73:87:cb:82:bc:ae:5c:16:8b:07:79:c6:46:6d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 28 22:02:57 2025 GMT
Not After : Oct 27 22:07:57 2026 GMT
Subject: CN=BF3F7928AC9186D35135E582AB477E517557B926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:cb:0f:4c:9e:f4:e6:8d:6e:98:32:b0:bf:
1f:45:83:0a:d4:05:e6:17:4f:e2:f3:ef:83:4a:56:
ce:e7:6b:6f:bd:15:10:b8:d0:39:b7:f7:d2:bd:9e:
df:bb:b8:94:5a:12:09:48:78:b2:e4:82:c5:6f:25:
42:3d:ce:6f:cc:ca:5e:6c:33:9c:e2:d3:05:07:29:
aa:aa:07:2b:56:db:33:bc:17:04:79:8e:ee:52:d8:
a0:54:de:f1:f5:50:da:61:37:be:15:0d:47:5c:cf:
dd:d9:79:8c:78:87:92:07:89:df:7b:b2:a6:95:c9:
4f:af:71:a2:6f:c2:37:06:2c:3e:91:ac:8b:22:de:
36:cc:84:11:42:a5:4c:b2:6b:a9:62:22:20:61:f1:
44:d6:53:36:19:c3:ad:86:ec:35:7e:b4:db:3b:bc:
ec:30:a2:ef:a3:22:44:da:4f:61:cd:42:19:8e:a8:
23:35:5c:eb:6f:23:82:95:f7:d4:18:ea:ad:bf:03:
52:4c:01:21:1d:a9:ce:b8:35:33:c6:7c:12:04:f3:
fe:76:74:dd:7d:21:0a:1b:89:2d:1d:84:47:8d:9b:
71:52:ef:96:33:b0:3b:c6:2d:b2:03:e1:4b:d4:bb:
26:7d:37:aa:8c:37:54:86:a0:4e:5c:ee:bd:ff:bb:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3F:79:28:AC:91:86:D3:51:35:E5:82:AB:47:7E:51:75:57:B9:26
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8ce::/48
Signature Algorithm: sha256WithRSAEncryption
11:62:c1:c1:0a:41:c5:56:64:9f:f4:fb:a7:fe:c9:1e:f8:63:
77:fa:af:55:61:cc:f8:72:53:c0:57:cd:07:d2:e8:2f:b1:3e:
f6:95:73:42:08:15:9d:fd:71:49:9d:65:22:7b:af:2a:25:c6:
02:56:06:0a:41:70:48:b1:64:43:a1:db:1e:1a:be:d2:24:93:
cc:39:12:7f:c5:2f:43:28:cf:1b:45:32:a8:a0:d9:27:87:7e:
82:50:43:0a:8b:f4:c9:85:5a:ec:41:c8:67:31:b2:32:94:72:
7f:e0:7c:50:5f:13:07:eb:81:b8:be:d7:75:f8:e3:50:05:89:
28:33:9d:9b:11:83:f2:19:6d:73:cf:ba:22:b4:90:7e:07:15:
20:9f:50:ec:07:d3:c9:70:15:c3:c2:cd:3b:7a:d4:83:14:37:
a8:c0:1e:f8:f0:ec:79:a1:05:54:25:14:d5:a5:7a:57:48:ae:
bf:d4:a1:c9:ab:69:42:40:ef:27:d9:33:c3:33:53:ae:55:f0:
8b:d6:2a:3c:7b:b0:52:7e:8b:0c:e2:64:a9:25:d1:b6:36:71:
a5:bb:43:67:fb:37:72:88:2e:a6:33:8b:05:c7:46:45:ec:5c:
21:87:4d:8f:1d:a3:1e:b8:fc:9d:e1:83:a4:de:47:cb:8a:db:
29:45:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:16:36 2025 by rpki-client