Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216310.roa
File: AS216310.roa (raw, json)
Hash identifier: NiVF7KQFRDinBV1F4AOjAJaK+LyGLW/cUOBWnnOpKWI=
Subject key identifier: 48:B7:23:38:7D:9C:EB:34:20:1C:DB:09:C1:5D:64:63:A9:F4:A6:5E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 53AE4A05B39B6E67FB2E6A769C08F9C7F06ACE99
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216310.roa
Signing time: Fri 25 Jul 2025 08:07:43 +0000
ROA not before: Fri 25 Jul 2025 08:02:43 +0000
ROA not after: Fri 24 Jul 2026 08:07:43 +0000
asID: 216310
IP address blocks: 2a0f:85c1:39c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ae:4a:05:b3:9b:6e:67:fb:2e:6a:76:9c:08:f9:c7:f0:6a:ce:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:43 2025 GMT
Not After : Jul 24 08:07:43 2026 GMT
Subject: CN=48B723387D9CEB34201CDB09C15D6463A9F4A65E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:0f:56:f8:aa:25:f4:d3:ab:fd:55:15:50:
1d:35:11:7d:d5:c7:ad:c3:64:40:d0:6e:b4:04:03:
1d:a2:14:72:de:2e:30:a2:bc:3d:ec:92:c8:d8:73:
8f:24:6c:51:11:d2:c6:e7:5d:15:b5:d7:65:c3:eb:
59:40:76:fe:26:f6:f3:64:f0:1b:96:a8:a4:ca:47:
ad:09:e5:1f:c1:7d:04:f8:c0:1f:90:e9:3a:45:cd:
8c:e4:38:45:55:8f:48:df:95:a6:21:1f:2a:c0:1a:
3c:c4:92:2d:38:60:11:74:d5:b7:83:9b:20:99:98:
05:9e:c0:7e:98:9d:b4:a6:7c:de:0a:4d:c6:76:11:
e6:db:7b:1f:fb:36:72:af:14:83:ee:3c:e2:e5:66:
08:d5:c5:fc:85:b8:7c:0f:68:7b:5c:75:5b:c8:d1:
6f:90:93:fc:b2:6e:c7:af:a3:b3:c0:ff:4c:fb:93:
c1:32:fc:2a:46:d2:55:cf:72:bc:71:16:9d:ee:c5:
95:53:77:78:5e:4c:b1:5d:29:a1:6d:dd:1e:7f:40:
c4:ab:82:3d:d3:71:d0:c6:1d:07:f5:42:bd:61:de:
29:aa:24:57:a4:70:da:c9:48:98:a7:43:3e:48:41:
56:3f:fe:2d:d7:e7:4b:2f:89:d9:da:fe:56:fa:e1:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B7:23:38:7D:9C:EB:34:20:1C:DB:09:C1:5D:64:63:A9:F4:A6:5E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216310.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:39c::/48
Signature Algorithm: sha256WithRSAEncryption
7b:69:29:cf:7c:b5:22:b9:b0:6d:48:b5:9c:70:0c:be:6f:b7:
4c:dd:5a:aa:b4:aa:c5:b1:9e:84:48:fe:26:b8:e7:48:19:32:
31:6e:4a:24:bd:68:a6:df:00:bf:4e:35:61:ff:08:bf:18:bb:
a2:30:a7:25:de:b0:25:eb:fc:d3:39:4c:ea:46:34:59:84:d6:
9f:35:a3:7b:d7:28:2b:d0:a2:32:d7:0e:87:58:12:ac:96:93:
61:0d:06:76:81:ba:6b:a1:eb:4a:71:4f:f2:26:06:b1:53:bc:
9f:30:f4:c7:77:d9:22:bb:09:93:0b:69:20:53:bc:b8:35:cb:
d4:74:af:7e:5a:af:26:fe:3d:c1:3c:11:fe:45:34:e1:75:ea:
c9:83:c8:05:06:ef:4d:87:b1:04:0a:9d:36:72:0c:c0:29:4c:
86:b3:ad:86:f8:7e:4d:31:ec:11:67:cc:51:08:48:e7:51:ad:
32:43:ba:7a:e2:bc:90:12:0e:3f:a1:44:0e:37:41:e5:23:3e:
a2:34:8f:bf:a2:27:20:00:0c:b4:24:9b:51:68:6a:e0:22:05:
f0:6f:2c:b0:0b:f8:e6:99:7c:30:fe:55:3c:2e:9d:b7:c5:8a:
d9:6a:e9:aa:d6:06:3b:e3:c1:2d:af:f1:8e:d8:41:71:e9:e6:
3c:08:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:25:56 2025 by rpki-client