Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213870.roa
File: AS213870.roa (raw, json)
Hash identifier: GNCYlYkr4jTteRK5/PkA7RBWhQKab113lZWyKXJfdJM=
Subject key identifier: 8C:48:46:8D:43:4C:07:54:9D:7E:DB:F6:B5:A0:54:B5:4C:56:92:2D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 48EA89A6E33CF5D6F6212704DAB212D4F62AF9EA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213870.roa
Signing time: Tue 28 Oct 2025 03:07:57 +0000
ROA not before: Tue 28 Oct 2025 03:02:57 +0000
ROA not after: Tue 27 Oct 2026 03:07:57 +0000
asID: 213870
IP address blocks: 2a0f:85c1:8cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ea:89:a6:e3:3c:f5:d6:f6:21:27:04:da:b2:12:d4:f6:2a:f9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 28 03:02:57 2025 GMT
Not After : Oct 27 03:07:57 2026 GMT
Subject: CN=8C48468D434C07549D7EDBF6B5A054B54C56922D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:95:02:3f:73:9b:0a:3d:67:d5:4e:2a:20:
b9:20:2c:0f:e5:93:55:07:a0:7c:13:4b:16:d7:dd:
ba:a1:6a:88:25:64:22:c5:19:ae:ce:3d:bc:21:41:
b8:6c:19:43:cc:5d:09:63:3d:a6:97:53:d3:9a:bd:
25:75:57:e9:52:8c:69:eb:2e:6a:61:0d:0c:86:7c:
5e:35:a0:0e:12:80:6b:21:34:4e:6b:9a:c3:cc:5d:
50:71:d4:96:0a:cb:a0:50:ec:1a:dd:da:2f:31:ee:
8e:f1:9d:9e:1f:95:a0:b4:90:45:e5:26:68:9d:11:
34:fc:82:37:f2:d6:0b:ff:5c:9c:ef:3f:34:3b:9f:
a1:2d:ae:1f:2e:01:73:a4:da:d9:8b:ae:a8:0c:49:
15:cc:60:5f:e7:8b:cd:90:d5:91:8b:2d:4b:ad:04:
c0:6b:72:33:09:97:28:37:8c:e7:16:43:71:46:ce:
71:59:a8:0e:92:0c:c9:56:c2:67:d4:95:29:a5:43:
d7:a2:2c:2b:09:07:48:40:76:84:bf:2b:a7:58:4f:
5d:69:0a:ed:98:b6:50:0c:e2:f6:ce:85:59:df:e7:
33:41:08:1e:c7:64:e6:c2:6c:68:ad:17:af:58:35:
a0:7a:25:11:02:73:9d:d6:53:91:1f:ef:9c:e3:b6:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:48:46:8D:43:4C:07:54:9D:7E:DB:F6:B5:A0:54:B5:4C:56:92:2D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213870.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8cc::/48
Signature Algorithm: sha256WithRSAEncryption
08:a3:b5:ef:e5:11:7a:e6:73:36:3e:cb:fd:17:2f:ea:8f:fd:
72:d3:59:04:e4:ed:6c:5c:2b:c9:42:ec:e9:cb:5c:7a:58:d9:
85:f6:89:32:ba:74:c0:9e:f3:58:d1:83:55:59:bd:93:5a:dd:
97:eb:f0:c5:30:22:83:4b:67:6f:63:bb:eb:d5:d2:0e:80:9a:
2b:b5:17:65:d7:c4:c9:ed:1a:36:11:67:db:2d:ac:bb:37:67:
ca:17:d9:c4:bb:41:7c:56:f4:64:52:be:4d:40:0f:1f:08:d6:
f1:9e:87:7f:77:11:7d:05:45:5b:7a:62:88:36:bb:00:56:68:
00:ae:89:52:cf:ba:13:9a:e3:c3:05:ba:51:b7:e7:5a:e1:76:
c4:8f:8a:01:3e:35:ac:7b:2e:47:4f:72:f8:3d:6d:26:d3:be:
2c:ce:89:8e:9f:fa:42:d0:f3:af:8f:1e:b2:f6:e9:02:c2:3e:
08:da:82:0d:53:6f:95:8c:f7:a3:f7:5a:bb:13:00:ba:0f:bb:
6f:58:c5:b4:c4:4c:fa:ff:b9:b5:a8:13:87:71:f7:50:6c:dc:
7e:54:ef:b9:3c:11:6f:1a:19:ac:5f:8a:69:b3:55:66:0b:dc:
53:3a:6d:c3:50:17:5b:33:ee:a4:0e:50:f4:4e:a8:ad:a7:a3:
43:1f:85:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:49:06 2025 by rpki-client