Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213186.roa
File: AS213186.roa (raw, json)
Hash identifier: jaTw2jwrYYMkeNf68csNftP5660j0Omi0FlkfmrPBpM=
Subject key identifier: 3A:19:B7:EE:B1:FB:FF:18:A1:77:74:0A:91:71:92:45:FD:C1:35:8D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6DBD2EFE3A4C3E6837FD1145D1E8B7CD57F6E17B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213186.roa
Signing time: Thu 02 Oct 2025 13:55:08 +0000
ROA not before: Thu 02 Oct 2025 13:50:08 +0000
ROA not after: Thu 01 Oct 2026 13:55:08 +0000
asID: 213186
IP address blocks: 45.158.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:bd:2e:fe:3a:4c:3e:68:37:fd:11:45:d1:e8:b7:cd:57:f6:e1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 2 13:50:08 2025 GMT
Not After : Oct 1 13:55:08 2026 GMT
Subject: CN=3A19B7EEB1FBFF18A177740A91719245FDC1358D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:9c:09:f7:81:16:b6:7c:9a:0f:10:3d:eb:
7a:7b:48:5a:98:14:68:e0:51:9d:f7:bb:48:5c:3c:
14:85:8b:9b:96:3f:0c:6b:01:d1:19:91:03:f1:b8:
67:57:41:03:e6:56:14:29:f3:31:d7:fa:0e:bc:62:
0f:2d:61:5e:e2:64:99:3c:f5:8f:5f:85:56:f5:2d:
d6:20:98:12:d3:d3:29:37:73:12:3d:47:be:80:8f:
70:ac:73:08:91:ac:27:99:a4:4a:b6:0e:3d:ab:d5:
85:4b:85:0d:3e:78:5a:e7:42:f2:c8:27:e1:15:d7:
41:00:d6:97:d3:57:83:a1:fb:60:bd:51:40:16:41:
9e:4e:cf:ff:ad:a2:bf:4c:f2:12:a0:6c:0e:75:4f:
f6:93:0c:c0:bd:29:ca:cb:a9:14:f5:b3:09:77:f6:
41:dd:b7:03:96:cc:fc:41:9f:60:db:0f:ad:b0:82:
d0:4b:1d:fc:47:0a:cb:72:f1:df:3f:31:a3:31:a0:
63:ef:67:31:60:22:19:18:48:ca:19:55:df:32:ee:
96:24:01:45:81:a7:c2:6f:e4:10:f9:39:63:63:6f:
8f:c5:bf:5a:cf:1d:39:94:61:9a:48:d0:73:2f:36:
75:6c:d1:4f:07:da:96:e0:52:ce:aa:50:3d:55:0b:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:19:B7:EE:B1:FB:FF:18:A1:77:74:0A:91:71:92:45:FD:C1:35:8D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.10.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:e2:1a:94:39:d5:47:a1:71:e2:20:7a:05:19:c4:c2:3b:f5:
08:c0:d7:ac:0d:0e:75:94:a7:c2:81:c2:8b:78:a4:ac:fe:2c:
a3:a0:7a:0c:c2:de:08:d1:a0:a2:1d:ea:5c:93:c9:80:f4:e8:
76:af:61:69:d9:72:44:3d:fa:60:98:2b:16:46:79:25:f3:37:
9a:f0:fc:e7:95:8f:80:64:00:46:c7:93:46:2e:da:cf:11:b8:
9f:28:9e:d4:37:8a:e8:d2:30:87:e5:66:96:e7:61:e6:b9:ec:
b3:68:14:0e:ff:e9:19:08:fc:58:96:33:50:c0:13:ca:6c:f6:
cd:cd:60:ca:79:45:17:30:2d:38:00:7e:41:91:f4:4e:13:0a:
9b:0e:16:75:f9:29:ce:06:67:fa:9a:b2:bd:d0:df:9c:52:0e:
3d:2d:b3:f1:c3:28:b9:73:04:c6:72:82:3a:33:a4:71:64:b7:
cd:18:04:5e:51:00:5f:a7:b2:03:00:62:d3:49:09:3b:b5:12:
07:12:e7:20:c5:3e:9c:24:33:b4:76:7c:e1:af:35:71:97:a3:
c7:84:9e:ff:e6:fb:bd:c2:a4:fa:f2:ff:5a:63:f8:40:7e:57:
fc:f5:28:c1:fc:e2:a0:ba:10:61:b6:50:8c:78:ff:06:e6:40:
2b:87:9d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:46:35 2025 by rpki-client