Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211818.roa
File: AS211818.roa (raw, json)
Hash identifier: jy6n+veJt96Ov55gUdW/UGbBvc2vtzLzOjPuowVmgLM=
Subject key identifier: 52:6B:5C:F1:BE:2B:F9:C5:72:8C:94:DB:30:C4:03:87:50:69:75:8F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 14D91862AD8F816408900715EB4B01737DC703BC
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211818.roa
Signing time: Tue 07 Oct 2025 11:04:44 +0000
ROA not before: Tue 07 Oct 2025 10:59:44 +0000
ROA not after: Tue 06 Oct 2026 11:04:44 +0000
asID: 211818
IP address blocks: 2a0f:85c1:d61::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d9:18:62:ad:8f:81:64:08:90:07:15:eb:4b:01:73:7d:c7:03:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 7 10:59:44 2025 GMT
Not After : Oct 6 11:04:44 2026 GMT
Subject: CN=526B5CF1BE2BF9C5728C94DB30C403875069758F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:27:54:ed:6d:10:a9:b5:9f:4c:cc:5d:57:
27:a6:77:45:1b:2e:f0:1d:d5:62:4f:70:76:51:c8:
98:e4:a9:c7:66:75:04:36:39:11:5d:3f:e0:99:fa:
f3:a9:50:92:12:91:0d:ab:0a:1d:da:b9:20:e4:a7:
05:56:d7:55:0b:5e:96:9a:1e:54:6b:da:43:a7:b3:
36:fb:96:c2:31:7c:3c:ed:60:69:d0:60:ee:25:3f:
f5:08:38:15:cf:a3:cb:0a:a1:50:ef:6e:8a:31:d5:
cb:b4:91:48:fe:b2:0f:8d:33:6c:3a:4f:ea:2c:ea:
57:17:1e:21:b1:03:6e:6b:68:ee:6a:a0:fa:f6:85:
95:a2:06:ef:33:50:1b:ec:a4:0e:a4:3f:fd:db:58:
3f:3d:9c:e3:0e:23:53:b8:79:ac:15:ff:6d:f4:7c:
66:ce:91:5f:7c:32:cf:b0:e9:c7:54:a4:0f:7f:7e:
96:92:75:66:ec:58:55:be:9c:e7:5c:a8:db:fe:08:
cc:33:f7:ea:37:02:97:36:09:e1:d6:9b:fa:ad:e9:
0a:40:ab:8b:9e:e2:d5:2c:14:ae:41:45:aa:bd:84:
56:5f:38:af:99:be:45:1a:8d:e1:60:4d:40:e3:5b:
6c:5c:19:8b:76:f2:ec:c4:33:be:16:e1:5e:e2:a2:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6B:5C:F1:BE:2B:F9:C5:72:8C:94:DB:30:C4:03:87:50:69:75:8F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d61::/48
Signature Algorithm: sha256WithRSAEncryption
db:fd:2b:b8:39:cd:1c:e0:9f:7e:36:0a:be:a8:79:02:b8:6c:
d8:48:da:93:3d:ae:62:b1:cf:07:f9:ba:42:dd:33:98:4b:5c:
57:45:9c:5f:1c:9e:c9:8e:a6:b7:85:18:a2:63:b5:51:6c:3c:
fe:db:c0:69:30:3c:a9:99:ad:73:c4:84:76:5a:04:e5:d8:06:
62:81:e8:1c:1d:7d:e2:57:ee:d9:9b:5d:b0:a8:79:1e:d7:17:
04:62:02:3c:97:77:52:8c:1d:27:d3:21:eb:b2:81:e9:8f:49:
2a:66:0a:ca:85:36:e9:00:bd:53:6d:9b:12:3d:9e:7d:90:28:
34:cc:f3:dc:80:26:2f:c5:b8:4c:07:0f:2c:49:ce:8b:46:01:
77:3d:fe:6b:e1:3f:7f:90:65:14:6d:c8:9d:fa:0a:dd:31:0c:
fe:aa:e8:03:15:0c:5c:52:ce:ed:5d:b4:fb:62:2a:2e:61:95:
e0:d8:35:f5:52:2b:af:51:de:0c:81:67:b7:66:6d:57:b1:a7:
78:5d:47:50:7a:51:44:04:d5:1f:9e:1a:9b:ae:5f:49:a9:95:
8a:b6:61:16:6d:bf:ea:25:c9:e2:be:75:d0:c2:ac:04:36:fe:
f2:e3:06:b6:19:a3:d0:c0:c8:04:3f:b9:83:e1:9b:bd:b9:64:
50:ed:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:24 2025 by rpki-client