Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211549.roa
File: AS211549.roa (raw, json)
Hash identifier: g7lkZ8nKvW3VTEEsusn5l7Dt2Jbmj2nus3piaQJEJQc=
Subject key identifier: 88:42:67:D1:20:B3:CE:BC:7F:80:1A:17:13:DB:F1:E1:5A:5C:7D:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 456C4574B10E93F71AB59B4B5442E632DE1256D3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211549.roa
Signing time: Tue 16 Sep 2025 20:28:55 +0000
ROA not before: Tue 16 Sep 2025 20:23:55 +0000
ROA not after: Tue 15 Sep 2026 20:28:55 +0000
asID: 211549
IP address blocks: 2a0f:85c1:d4b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6c:45:74:b1:0e:93:f7:1a:b5:9b:4b:54:42:e6:32:de:12:56:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 16 20:23:55 2025 GMT
Not After : Sep 15 20:28:55 2026 GMT
Subject: CN=884267D120B3CEBC7F801A1713DBF1E15A5C7D1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:8e:22:c0:9b:9f:bd:42:61:83:47:48:fa:
a7:c1:e4:ef:6e:0d:f6:dd:c9:b2:5c:37:24:0a:14:
fe:d0:48:b5:86:52:bf:ba:a7:09:5a:f8:dd:9a:d7:
40:72:6d:c7:e9:04:bb:4f:7c:fc:73:95:db:31:ec:
b8:a6:5f:5c:f2:ff:e8:75:ac:3f:2e:18:18:80:32:
31:d8:29:14:ae:11:2c:63:55:60:8b:67:e3:d1:26:
6b:29:77:25:c8:2d:65:68:db:54:e5:79:13:78:47:
76:20:8b:ed:5d:0f:2d:1c:7b:77:9c:6d:01:d2:cb:
87:5c:b0:58:5b:80:c0:cd:08:af:16:e1:d2:04:0f:
bb:18:28:c3:70:d1:c8:d4:06:a4:98:9a:48:4a:95:
2b:70:29:8c:7e:67:87:e5:78:86:e1:d4:cd:79:61:
8b:73:dd:9e:5f:a5:ce:38:e8:d1:13:b7:7e:66:0f:
54:26:f8:67:6f:1c:13:25:cc:12:19:f4:68:39:eb:
1a:d6:01:19:05:91:06:62:77:b3:7e:50:e5:54:7d:
43:7d:5a:c5:30:2b:c3:9c:fc:95:3d:83:7c:cd:82:
68:8a:77:b8:5e:2a:40:3e:44:1c:75:1c:c8:cb:d5:
ed:d3:43:6f:25:4e:d9:4b:a7:87:41:e0:bd:68:5f:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:42:67:D1:20:B3:CE:BC:7F:80:1A:17:13:DB:F1:E1:5A:5C:7D:1C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211549.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d4b::/48
Signature Algorithm: sha256WithRSAEncryption
4f:2d:ac:7d:9f:a8:2d:87:94:06:40:56:3f:df:37:e3:a3:9f:
54:49:40:34:79:25:2d:4a:cc:a6:b2:d6:69:48:94:2e:7a:a4:
51:ba:a6:71:82:1b:02:bd:9f:be:26:0a:8e:b8:ee:c6:e3:8e:
b3:6b:2d:eb:dd:f4:b1:fa:25:a4:6c:1a:89:ed:86:b9:ec:28:
e6:b7:78:24:7e:60:ba:12:39:e6:07:e1:ff:f8:76:4c:4b:76:
7d:86:75:30:a2:41:70:f8:89:ff:96:68:4b:3f:e1:18:e0:9e:
56:96:9d:5d:c9:be:84:4d:2e:92:95:fb:9d:ec:76:da:52:7b:
12:3f:db:c9:23:5d:98:79:9d:bc:ea:49:a2:fa:ac:8f:a2:7a:
6a:ea:72:3d:46:57:c9:7a:96:3e:9f:58:26:ea:3d:c4:09:7b:
61:9e:a6:d1:d3:0f:0e:8c:0d:0e:a1:68:83:c1:21:a7:c4:f0:
6b:19:3f:04:06:92:44:d5:59:27:c5:f3:cd:00:32:fb:f3:22:
4a:73:a2:51:4e:31:05:71:08:92:67:3d:9b:36:8f:2c:9b:90:
6f:12:37:85:df:0f:5c:04:d3:b9:9a:02:3d:a0:d9:ae:97:60:
4a:46:bc:4d:30:04:1e:39:fe:cd:32:3e:bf:f8:6d:4f:ea:8f:
12:0d:51:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:23 2025 by rpki-client