Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213574.roa
File: AS213574.roa (raw, json)
Hash identifier: h5AzRwQKN6QRvsloMhBFZDIQt5gGIcwZG92XKpGZ8go=
Subject key identifier: 74:D2:7C:1E:B5:BF:00:6B:E8:FA:20:71:BE:8E:EA:55:70:F1:6A:8D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1EC68A6E8927EEB20A82F24D06CDA76C973839F7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213574.roa
Signing time: Sat 09 Aug 2025 16:25:18 +0000
ROA not before: Sat 09 Aug 2025 16:20:18 +0000
ROA not after: Sat 08 Aug 2026 16:25:18 +0000
asID: 213574
IP address blocks: 162.141.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c6:8a:6e:89:27:ee:b2:0a:82:f2:4d:06:cd:a7:6c:97:38:39:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 9 16:20:18 2025 GMT
Not After : Aug 8 16:25:18 2026 GMT
Subject: CN=74D27C1EB5BF006BE8FA2071BE8EEA5570F16A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d4:89:8f:7e:84:e0:b8:7d:c6:d1:b3:56:3e:
da:d2:20:ee:00:f9:37:8e:a3:64:5f:1b:f2:48:58:
22:71:91:a9:2e:05:ce:1c:2d:46:ff:9b:c9:b5:da:
01:09:2a:2f:9c:38:b9:3d:c4:ea:08:17:5a:9e:a5:
d5:a5:a3:65:bb:d7:ee:18:f7:fa:73:f6:6d:a5:7a:
ac:1e:1b:4d:08:e5:94:0c:57:43:d3:e3:34:e0:5b:
6f:39:bf:48:96:ee:8f:d0:e4:70:08:c8:64:cf:69:
62:72:7c:9e:93:12:dc:10:41:10:cb:5d:8b:d3:20:
be:f5:07:ae:42:03:3a:d1:a8:ad:0e:5c:3a:ef:ea:
71:af:ed:4e:4c:52:72:c4:a1:e4:3e:f8:83:35:32:
f3:18:05:42:e9:1e:a2:f9:7c:b6:06:18:85:99:fa:
a7:6e:a6:5f:6b:ba:62:5e:0a:09:ad:82:64:26:3f:
17:d2:b7:bc:08:9f:ed:3a:ec:06:d6:0d:c9:e8:63:
3d:18:de:83:80:d8:64:ae:89:1e:27:a8:b3:49:76:
33:eb:f3:cb:90:2b:cd:0a:9b:60:1f:0b:d4:21:7e:
45:1f:b3:03:3d:74:ae:1f:69:f8:67:a0:7c:4b:f4:
cd:4c:4e:8f:91:f9:9d:bb:a3:0c:60:3a:01:cb:84:
92:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:7C:1E:B5:BF:00:6B:E8:FA:20:71:BE:8E:EA:55:70:F1:6A:8D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213574.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.0.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:8b:1e:51:7c:d5:a2:84:4d:4a:bb:03:0a:7a:45:36:f9:74:
4b:d5:f8:e6:4a:18:2e:77:eb:d8:77:c3:cb:21:ab:e3:f7:61:
46:2b:49:6f:b0:dc:6c:8c:3e:01:99:7f:80:9b:aa:9e:50:8d:
2d:f3:af:24:2f:bb:da:c2:b8:58:21:ec:d8:71:9e:85:6e:30:
3c:fc:ee:1f:ee:18:59:6a:29:8f:b1:99:25:34:af:1c:71:cb:
94:21:6f:3c:5e:46:da:35:d9:c4:be:d4:dc:f8:41:1c:f1:c7:
eb:c0:54:a9:e1:3f:34:ed:e3:4d:f5:b4:9d:d1:43:51:f3:09:
33:ec:bf:12:df:10:b6:25:e2:2d:fb:fb:ad:58:fa:76:17:36:
d1:9f:8f:52:a3:4f:f5:0c:10:ab:26:b4:a8:8c:06:20:d7:c2:
25:c4:2d:db:18:eb:ea:45:b1:b9:4e:89:ad:d9:8a:2b:9f:8e:
59:f7:7e:01:d8:d1:c2:a0:35:23:2b:28:57:9b:06:ba:c3:16:
18:64:39:d4:9d:a2:b6:59:ca:22:84:60:80:a0:2e:29:4b:a2:
39:f3:0c:aa:09:cb:11:74:4a:88:ad:ca:1c:ed:38:61:d2:8c:
be:b6:e4:7b:db:b5:92:6e:04:1c:fa:88:76:10:ae:e1:fa:8c:
89:b2:62:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:54:23 2025 by rpki-client