Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213866.roa
File: AS213866.roa (raw, json)
Hash identifier: LAY5sgWeP3icqAPJQV1eeGKyYBiUAwjr7LnXij+F5Uw=
Subject key identifier: 87:F0:8A:5F:E3:30:86:B3:19:3E:B4:00:9A:EC:2D:23:FE:61:E8:59
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1F61D0AF14DEE538B80F92DD29BC932CF728F3EE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213866.roa
Signing time: Tue 19 Aug 2025 17:18:08 +0000
ROA not before: Tue 19 Aug 2025 17:13:08 +0000
ROA not after: Tue 18 Aug 2026 17:18:08 +0000
asID: 213866
IP address blocks: 2a0f:85c1:8f7::/48 maxlen: 48
2a0f:85c1:c17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:61:d0:af:14:de:e5:38:b8:0f:92:dd:29:bc:93:2c:f7:28:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 17:13:08 2025 GMT
Not After : Aug 18 17:18:08 2026 GMT
Subject: CN=87F08A5FE33086B3193EB4009AEC2D23FE61E859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:4b:95:9c:1d:1f:fd:4a:21:c8:13:fc:69:
22:7f:9e:9c:9c:85:a8:6c:85:22:55:27:9d:3d:d2:
51:fe:0f:af:fb:00:a9:61:fa:ed:4a:29:17:ac:8a:
42:e3:fe:2e:f6:53:ce:88:2c:84:f7:fa:44:1a:e3:
1f:f0:4d:a6:f6:1a:27:59:8c:8d:cf:67:44:09:0c:
55:de:9e:cf:c2:58:f9:03:e4:5e:4f:ac:af:d8:2e:
9f:4a:fc:45:a8:3f:8b:4e:1a:b6:da:f4:0c:bf:c6:
50:12:11:ce:88:b7:ef:a7:23:f8:31:27:15:35:39:
63:ab:e1:c8:24:d5:46:ac:f6:b8:9c:a3:83:2a:9e:
11:9b:7b:43:93:eb:6f:a3:bf:a8:af:8a:ae:31:05:
ae:c9:cf:8c:30:40:5a:55:d4:7c:34:d3:df:b7:ee:
0f:55:e8:99:ea:43:97:93:5b:33:fe:a0:2a:25:e9:
a3:70:46:56:51:cd:27:52:36:eb:ec:a3:61:12:2f:
9b:1f:95:ee:55:5a:99:5b:8e:d6:bc:5a:da:84:ff:
0f:2b:93:0d:18:f8:5d:f7:8e:67:d5:08:f5:95:a6:
ec:5c:0e:da:3a:e2:89:55:cd:5c:cb:59:df:48:22:
26:07:19:75:e7:39:f8:39:74:96:46:ab:cb:46:74:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F0:8A:5F:E3:30:86:B3:19:3E:B4:00:9A:EC:2D:23:FE:61:E8:59
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8f7::/48
2a0f:85c1:c17::/48
Signature Algorithm: sha256WithRSAEncryption
e8:4c:d7:02:09:94:74:b6:8e:c8:8d:a9:69:ad:16:f0:f1:20:
59:19:d6:9c:43:09:c8:0c:b8:4f:63:d0:af:de:57:e5:06:31:
35:a5:56:bb:4e:d4:bc:42:de:c3:12:6f:d8:74:4f:65:ee:4c:
59:cb:68:7a:e6:c7:cb:7c:11:6f:70:8b:29:c6:54:c1:bf:b9:
a0:f8:27:fe:20:53:77:ad:3d:fa:83:ce:b0:5e:ec:c4:d8:f3:
20:0f:97:36:40:4c:2f:e5:ac:0d:99:a7:01:3e:ed:7e:14:0f:
9c:5b:ef:df:ad:4d:30:88:0f:1e:06:6c:3e:4d:c1:03:68:65:
c2:d8:b5:e2:14:7b:de:32:51:24:27:bc:21:0b:35:9d:96:9f:
87:03:29:af:73:d5:23:2a:85:e9:15:12:87:30:11:68:ac:bf:
93:a0:ae:0b:65:30:0d:e5:0c:ae:d2:f6:4a:d0:6c:ab:05:77:
99:ae:1b:69:64:01:ea:d6:09:a9:a5:49:8f:94:2c:50:d3:1b:
92:b4:de:9c:a8:90:8b:95:b7:c8:69:f4:f4:5a:bf:3e:58:3f:
93:ee:75:88:2b:e9:39:cc:ec:20:7c:89:f2:1b:90:76:10:e1:
0e:62:7c:24:53:37:c5:2d:84:57:fd:10:64:0d:9e:c4:2e:66:
64:46:6e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:47 2025 by rpki-client