Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213906.roa
File: AS213906.roa (raw, json)
Hash identifier: uTnUnFKhbqy3TVN0mbCOeBfSRIIIiFK24VBDkAFbAJA=
Subject key identifier: 58:F2:04:93:3A:C3:87:03:4E:04:25:AC:25:B1:E8:1A:99:C9:36:05
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 75F58BA1D938ED8FF380993B2221031D422668DD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213906.roa
Signing time: Thu 09 Oct 2025 19:07:56 +0000
ROA not before: Thu 09 Oct 2025 19:02:56 +0000
ROA not after: Thu 08 Oct 2026 19:07:56 +0000
asID: 213906
IP address blocks: 2a0f:85c1:8c5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f5:8b:a1:d9:38:ed:8f:f3:80:99:3b:22:21:03:1d:42:26:68:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 9 19:02:56 2025 GMT
Not After : Oct 8 19:07:56 2026 GMT
Subject: CN=58F204933AC387034E0425AC25B1E81A99C93605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:ed:cb:ab:d9:64:b0:95:52:92:b5:11:bf:
ca:77:e6:3a:38:c7:ef:de:46:4a:03:58:9d:eb:1e:
22:c4:c5:45:6f:c7:ab:1f:bb:0c:0b:30:ac:ae:df:
7f:38:46:83:7a:c1:26:9b:7f:4f:06:3d:25:20:2f:
07:15:ca:67:61:61:9d:85:3c:d2:46:97:4a:12:b9:
b7:13:3a:35:4c:67:9d:25:94:ef:ab:65:fe:74:e0:
4f:24:ce:1c:05:1f:93:7d:2a:50:3b:07:13:91:1a:
ce:c9:1f:8c:0f:04:ae:4c:90:ea:d7:d0:10:f7:bc:
63:d1:fc:52:3b:6f:b0:86:c9:3c:73:c4:f0:4f:28:
50:96:7a:d5:30:ce:f2:9b:6a:57:56:bd:28:fb:48:
8e:9d:39:3c:ce:a3:cc:d5:69:c7:49:b2:97:6f:ad:
ec:5e:54:6a:b8:bc:74:47:66:5d:74:d4:18:18:0c:
15:fe:e5:29:4a:b1:13:21:4d:67:e2:28:bf:fd:25:
73:aa:44:f6:72:66:59:41:bb:d8:64:12:9a:88:4b:
20:5a:69:9d:e1:68:8f:52:b2:b0:49:ea:12:b6:d3:
bd:bf:07:ec:11:99:15:ea:7e:cd:4f:97:52:fa:64:
c3:c7:aa:fa:c7:3a:76:62:e6:8a:9d:8d:06:21:09:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F2:04:93:3A:C3:87:03:4E:04:25:AC:25:B1:E8:1A:99:C9:36:05
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8c5::/48
Signature Algorithm: sha256WithRSAEncryption
67:ac:73:51:b5:96:62:66:22:28:16:59:94:ca:f4:ea:7b:aa:
1d:da:13:cb:92:b4:95:0a:f9:2b:2f:f2:72:2b:73:d5:20:12:
f5:47:48:b3:4f:7c:9b:c4:37:ab:c3:78:89:46:69:d6:31:81:
f9:d4:a0:79:fe:ae:f5:01:28:b5:6c:be:70:52:f4:e5:99:4d:
56:be:9e:4e:88:89:77:8d:10:67:19:a5:a8:e1:29:0e:3e:03:
82:b9:b8:54:a4:84:58:3c:bb:f4:a3:86:b4:9e:63:20:2b:52:
05:fe:c5:fe:e9:94:d4:f5:aa:fd:cc:a6:ce:68:cc:b8:98:17:
5b:29:0d:16:9b:20:b4:fe:64:48:b2:55:24:fd:be:8f:c7:cc:
ed:57:60:54:f1:9f:7b:95:eb:ae:46:43:a6:bb:bc:ad:5f:15:
e3:4a:c0:fb:14:5d:77:7c:3d:60:7c:c6:ed:c4:68:84:93:f9:
3e:b5:c0:f4:e9:e8:1d:4d:af:1d:c6:05:f7:2d:d9:f9:e3:a0:
28:09:32:a4:f3:21:d6:6a:ab:1f:47:43:4d:36:84:63:09:42:
cf:5b:da:e8:cd:4a:f6:ae:4d:8f:a6:f3:1e:e2:12:1a:d9:18:
40:b6:ee:69:80:9b:bc:f4:be:41:1f:b3:5d:3c:16:09:68:ad:
b6:7b:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:18 2025 by rpki-client