Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213257.roa
File: AS213257.roa (raw, json)
Hash identifier: 3jB76iG2GRbYBPd6+Jwax0eCV+HHTLMhFUmGMf6QxaI=
Subject key identifier: 61:2C:76:D0:6D:51:E3:3B:EB:C2:97:68:EE:2D:23:6D:84:40:9A:F0
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 76B33EF1614C703ABD76D5A3B1C70D2CF1550FE6
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213257.roa
Signing time: Sat 26 Jul 2025 13:00:53 +0000
ROA not before: Sat 26 Jul 2025 12:55:53 +0000
ROA not after: Sat 25 Jul 2026 13:00:53 +0000
asID: 213257
IP address blocks: 37.221.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b3:3e:f1:61:4c:70:3a:bd:76:d5:a3:b1:c7:0d:2c:f1:55:0f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jul 26 12:55:53 2025 GMT
Not After : Jul 25 13:00:53 2026 GMT
Subject: CN=612C76D06D51E33BEBC29768EE2D236D84409AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:cc:b8:87:7a:c1:49:d8:c8:17:3e:1a:ed:
b3:52:ca:da:19:49:3e:b0:ac:c1:cd:98:aa:ab:6c:
84:f5:29:cc:48:51:96:fd:de:54:2b:24:7b:3d:19:
bd:60:dc:52:f0:3f:81:33:49:08:74:aa:1b:f3:bb:
20:dc:c9:cc:56:b9:1b:61:e9:ee:01:68:b9:9d:fb:
39:7a:31:bc:e8:b9:0a:73:be:0e:cc:0f:3d:e2:8b:
84:62:29:5d:c2:94:dd:78:50:8f:f5:69:7f:78:50:
be:64:e8:f2:27:7a:ce:bf:5f:36:bd:25:d9:73:3d:
f2:8d:f3:a5:4f:fd:62:51:af:8e:ef:9e:4e:e9:94:
0f:da:d6:bf:4b:11:20:cc:aa:c9:c1:00:48:d8:f5:
65:e3:a8:9e:1b:29:d4:95:37:21:b1:fc:9a:85:df:
e0:d9:59:05:2e:08:14:24:e2:3f:dc:53:5b:e6:dc:
4b:c9:69:2c:ef:00:99:ef:b6:95:0c:56:b4:a6:1f:
2c:1f:02:71:55:5f:64:54:e7:0b:db:42:80:50:2f:
89:6e:31:d8:89:9f:89:f0:d9:31:df:04:40:3b:f6:
9a:e5:c7:2f:7d:a0:75:6d:49:57:02:db:4e:0a:82:
d2:b7:b2:b9:4c:48:7e:b9:b7:6b:4d:63:11:dd:ca:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2C:76:D0:6D:51:E3:3B:EB:C2:97:68:EE:2D:23:6D:84:40:9A:F0
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:da:f7:55:7b:3c:37:e9:30:8c:b4:4f:94:96:50:5c:e4:2f:
30:85:a7:fc:71:05:0d:1a:c6:35:98:a3:da:fa:4b:84:14:3a:
eb:7c:f9:e6:2c:19:4a:ff:a7:3e:ef:75:44:7e:8c:6b:47:78:
fb:ca:27:b4:38:fc:3d:78:7c:d5:67:0c:8d:5e:91:da:b6:47:
12:ba:84:be:09:07:7a:4f:5b:96:2a:d9:c0:41:8d:c8:27:e5:
3d:06:d3:9b:ab:c2:e2:ed:d4:3b:07:ac:d0:a1:4c:cb:72:97:
93:e2:83:d3:4c:e3:4c:1e:d9:90:14:ec:3b:20:8d:67:2b:7e:
ca:a9:59:47:80:d1:38:fb:87:8c:1a:ca:2c:fd:47:94:d1:f5:
e2:6d:ba:b6:59:b5:a0:86:e3:7a:bb:f4:73:d8:56:8a:42:bf:
64:29:54:bd:e0:65:ca:66:b1:c7:14:ff:cf:6c:05:76:ad:57:
70:cc:7a:06:4a:17:b8:14:4b:7b:61:dd:3e:1d:d7:bf:61:68:
98:da:73:c5:a4:8f:bd:30:e4:0a:44:7d:7b:e3:88:33:f7:e8:
97:7f:d6:21:c3:78:c2:b1:6e:0f:2c:c2:51:9a:ec:10:5c:d2:
a2:9e:7f:f7:54:15:27:3b:0e:d3:84:dd:6b:f4:b1:ff:37:4e:
50:3b:26:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:50 2025 by rpki-client