Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213525.roa
File: AS213525.roa (raw, json)
Hash identifier: JLNsfb287GODFZhm3IyF3DGuST3BXpWFJalaZqdYoeE=
Subject key identifier: 76:00:46:4B:21:F4:31:B3:0F:8A:9B:37:29:2A:7B:E7:14:58:3E:DE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0108E6F33DF400355707691F294DE97719BF0286
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213525.roa
Signing time: Sun 21 Sep 2025 14:51:23 +0000
ROA not before: Sun 21 Sep 2025 14:46:23 +0000
ROA not after: Sun 20 Sep 2026 14:51:23 +0000
asID: 213525
IP address blocks: 195.200.21.0/24 maxlen: 24
2a0f:85c1:32b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:08:e6:f3:3d:f4:00:35:57:07:69:1f:29:4d:e9:77:19:bf:02:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 21 14:46:23 2025 GMT
Not After : Sep 20 14:51:23 2026 GMT
Subject: CN=7600464B21F431B30F8A9B37292A7BE714583EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:c2:60:4a:5e:69:a6:29:a3:05:20:ac:b7:
3f:59:20:4c:38:ec:3e:c5:f9:0e:7d:bd:7b:72:23:
1d:0d:e0:51:ac:39:44:48:49:7d:eb:c3:de:8a:60:
ac:8a:5a:04:24:f9:ef:7a:cf:85:7e:bc:9c:68:72:
19:21:9b:a1:7b:5b:07:c2:93:4e:96:f0:9b:e6:f1:
43:a1:5c:eb:91:f1:07:08:10:df:72:18:27:38:91:
ea:ff:50:5d:ce:31:65:af:5b:90:fe:32:49:08:63:
a0:6f:69:eb:6b:ab:41:c2:ba:4a:a1:4c:f0:34:10:
df:fc:4e:94:79:c0:e0:6b:92:3b:0d:bf:06:19:a9:
ca:38:e5:39:b0:42:16:70:7c:47:0c:c2:6a:1d:4f:
03:3d:a6:c0:5b:fd:6f:02:95:9d:99:57:aa:75:51:
7b:73:6e:71:72:12:d7:79:b0:95:ae:d1:d0:e3:f5:
2d:0a:5c:3a:17:2e:a3:21:2f:cc:da:c1:51:09:07:
8e:8d:ae:eb:fc:79:2a:b8:9a:1d:91:aa:d9:9e:c8:
71:bf:3e:48:03:e4:54:19:82:3d:de:b1:3e:95:96:
a9:0c:e6:9f:78:4c:6a:df:59:0b:1b:6d:00:56:32:
b9:cf:6f:e1:10:6e:06:68:e3:06:44:ea:85:47:67:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:00:46:4B:21:F4:31:B3:0F:8A:9B:37:29:2A:7B:E7:14:58:3E:DE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213525.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.21.0/24
IPv6:
2a0f:85c1:32b::/48
Signature Algorithm: sha256WithRSAEncryption
c3:9d:12:98:56:cc:50:1c:55:18:da:3e:c1:4c:ae:5c:30:26:
63:43:bd:83:1d:31:a7:5c:3a:eb:fe:ad:17:1e:f9:7c:59:03:
20:45:7e:c2:86:80:72:20:b9:9a:d1:c2:86:5b:49:b3:98:b0:
fb:4d:f3:a0:17:df:18:ec:5c:23:7a:c3:ba:76:f2:00:36:b6:
31:41:3c:6c:a4:68:95:47:d6:1e:e4:ac:ce:5c:7a:f0:38:2c:
f7:15:35:be:98:fb:72:31:a5:54:d1:8f:9a:42:1c:65:35:96:
d6:21:05:71:8f:0e:84:29:9c:83:26:b1:40:2e:d0:2a:c6:80:
12:da:9e:c0:5b:59:f3:98:40:f6:f0:0c:31:63:0c:a8:27:28:
ee:98:c2:4b:2a:18:82:41:ba:f9:9b:13:42:73:44:29:be:18:
75:14:8d:35:b1:95:d2:2c:9f:a9:33:76:5e:75:cc:9a:85:47:
23:88:99:ae:01:9e:43:7f:9e:43:23:67:93:98:21:ee:89:bd:
c4:c6:fe:cd:25:e8:3b:6c:20:f1:cc:17:b8:a5:11:08:b4:51:
a8:1b:a2:b8:c1:4a:5e:08:90:4e:02:c1:fc:62:f9:5c:ac:23:
35:57:f9:82:68:72:2f:59:96:09:59:d0:e4:b0:e3:10:64:45:
6e:58:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:00 2025 by rpki-client