Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213465.roa
File: AS213465.roa (raw, json)
Hash identifier: cJuo01B+C6Y22P6ywT91Puxa+1KJ+taak9mbEz738kk=
Subject key identifier: 0A:1C:8B:CD:19:C3:FB:91:56:5A:16:F5:82:76:86:21:1F:5F:4E:1E
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 626A59D59C3801137C09B8E5866F6A78E2787091
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213465.roa
Signing time: Sat 25 Oct 2025 21:06:56 +0000
ROA not before: Sat 25 Oct 2025 21:01:56 +0000
ROA not after: Sat 24 Oct 2026 21:06:56 +0000
asID: 213465
IP address blocks: 143.20.15.0/24 maxlen: 24
143.20.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6a:59:d5:9c:38:01:13:7c:09:b8:e5:86:6f:6a:78:e2:78:70:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 25 21:01:56 2025 GMT
Not After : Oct 24 21:06:56 2026 GMT
Subject: CN=0A1C8BCD19C3FB91565A16F5827686211F5F4E1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:e4:08:1f:b9:23:ee:10:81:45:c8:83:5d:
cd:3c:95:0a:2b:9f:2d:d9:bc:7f:bd:d7:16:91:62:
e5:57:b9:1e:fe:c9:bc:c3:70:49:87:51:8a:54:0e:
2c:82:ee:ad:8b:a2:3b:cf:f3:f5:5d:a5:9b:18:4e:
3b:d4:b6:12:73:61:83:9f:ea:fc:24:04:41:c0:b8:
36:b3:b0:3b:70:4a:27:a7:58:6a:66:87:7a:5a:63:
03:53:3b:91:26:05:0f:42:af:4f:3a:cc:05:0e:aa:
c4:1d:59:39:92:80:ee:60:cb:89:72:26:f1:77:7b:
62:57:4f:41:40:6c:2b:6a:97:18:f5:d2:0b:22:9c:
29:de:d1:12:ab:ba:ad:16:80:bd:c4:f7:37:b4:0e:
1d:ec:c2:5c:7e:fa:b5:27:79:f1:9c:85:33:0f:76:
b6:05:94:32:a5:a4:47:68:e3:a2:ff:6c:42:01:65:
71:39:2a:08:69:c7:6e:3e:ca:95:55:82:59:de:bb:
2f:ab:88:19:9c:ac:ff:c7:61:85:13:e8:96:95:a6:
fd:89:fd:b7:8b:1f:4e:55:e7:19:08:ba:f0:ab:2c:
91:4b:29:50:78:79:7a:af:38:3d:91:9f:14:b4:e7:
74:95:4f:f8:f8:bb:91:67:69:29:00:a0:f5:d8:6f:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1C:8B:CD:19:C3:FB:91:56:5A:16:F5:82:76:86:21:1F:5F:4E:1E
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.15.0/24
143.20.77.0/24
Signature Algorithm: sha256WithRSAEncryption
69:50:7c:a6:fb:23:00:44:2c:1a:41:2e:24:81:1d:61:64:8d:
83:17:72:24:0c:5c:a1:a8:6b:45:be:08:6d:d2:e7:63:f1:69:
8e:c1:41:56:db:14:57:13:c1:11:70:4d:60:29:00:93:6f:d7:
c7:61:eb:07:ce:f2:b1:eb:75:82:3f:52:fd:b4:8e:ca:a3:e1:
e2:a7:f1:a7:83:00:2e:f5:6d:9f:f8:15:c3:18:20:e8:a1:23:
a1:ed:eb:be:c6:f1:8f:cb:74:7d:b6:68:57:c6:ca:1a:2b:d9:
ef:bc:e3:f4:ae:e6:4b:f3:02:9d:39:66:96:fd:0b:8a:e9:bf:
ab:b2:be:26:75:7b:d9:43:e3:b2:68:e3:25:d1:c0:cc:93:e9:
76:79:cb:48:eb:ec:59:05:76:ab:ac:8e:e9:63:e6:c5:08:15:
6f:8a:83:8f:d1:8f:e6:5b:14:7d:15:52:16:b5:e0:30:1c:37:
bd:c7:ff:61:bc:ca:74:91:57:cf:1e:12:e2:5b:10:94:a3:5e:
77:db:f6:c0:57:b3:5c:52:1f:75:e5:fe:0e:0a:c0:c3:18:dd:
e8:1a:6a:ce:37:ec:bc:3f:50:df:ed:a8:32:78:09:c8:3b:29:
35:7e:3f:28:d5:72:c7:33:c5:d2:41:32:3c:da:56:f2:9c:76:
d8:39:13:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:29:55 2025 by rpki-client