Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213954.roa
File: AS213954.roa (raw, json)
Hash identifier: 62lAy69UaSUb5N3veghSBzol8OPypEv1yjgTpOkvQL8=
Subject key identifier: 6C:FB:D8:6B:6A:9E:14:54:6A:CE:32:E3:42:FE:F5:72:5B:91:B1:09
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 125C6136C205050AE4537C6FD08EB0761D900ED3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213954.roa
Signing time: Thu 09 Oct 2025 19:07:56 +0000
ROA not before: Thu 09 Oct 2025 19:02:56 +0000
ROA not after: Thu 08 Oct 2026 19:07:56 +0000
asID: 213954
IP address blocks: 2a0f:85c1:8c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5c:61:36:c2:05:05:0a:e4:53:7c:6f:d0:8e:b0:76:1d:90:0e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 9 19:02:56 2025 GMT
Not After : Oct 8 19:07:56 2026 GMT
Subject: CN=6CFBD86B6A9E14546ACE32E342FEF5725B91B109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:01:f1:0f:99:4b:03:7d:92:8d:68:53:96:
4d:7d:78:c6:63:d7:6d:61:3b:17:0d:66:d1:66:e2:
0f:12:0f:ce:cb:a4:61:27:70:55:48:f6:8f:e1:6c:
e0:e6:3b:99:a8:1c:4f:e9:95:17:51:66:71:36:bd:
08:13:1c:e0:57:87:4f:df:c0:fb:53:7b:7f:72:97:
54:a1:b1:4e:b8:f7:d5:48:fc:3f:74:e4:c9:df:1e:
b5:a1:c8:a6:aa:cf:dc:71:2e:c0:bf:d0:6b:b6:e6:
71:e1:5a:e8:e5:2c:c2:91:43:dd:5f:f3:39:bb:0c:
c1:ba:71:c5:5e:f9:8d:f6:e1:f3:db:79:cd:2d:7a:
64:1c:5d:15:73:e0:f6:aa:90:ad:7d:a9:35:9b:59:
21:db:b6:a2:3b:dd:40:ad:de:80:74:23:69:24:89:
c9:be:0e:35:33:60:06:98:e3:a8:0f:a9:67:8d:46:
42:f1:6d:93:01:49:49:36:01:d8:bc:81:7f:f2:86:
f3:73:d9:21:64:7b:c4:44:ea:9b:1a:56:78:49:6d:
7d:77:bd:3c:cb:0b:17:05:16:7a:f7:5d:2d:61:be:
bb:dc:98:4b:9a:63:c8:63:3f:d7:53:e7:c9:bf:13:
e4:2b:9e:46:8c:da:20:9f:e6:c2:5d:40:bc:5e:8b:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:D8:6B:6A:9E:14:54:6A:CE:32:E3:42:FE:F5:72:5B:91:B1:09
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8c4::/48
Signature Algorithm: sha256WithRSAEncryption
d1:85:0b:e5:fd:8d:f8:b3:12:9c:1b:39:66:c5:78:06:38:62:
44:65:a2:64:cd:96:3c:65:a7:d7:7c:3c:01:64:5f:80:bc:df:
b8:87:75:32:aa:92:fa:81:d0:84:51:87:e2:a8:fa:84:fb:a1:
49:95:2d:a7:57:49:92:a5:4c:06:f8:30:ac:3f:08:3b:7b:85:
9c:44:47:b5:69:22:fc:11:41:7e:d0:e1:e2:7f:21:21:62:0e:
62:19:81:51:37:3b:4b:a7:8b:d7:0b:80:c7:2a:49:03:14:f2:
92:4f:c9:1e:5c:0c:82:17:e1:b6:db:13:5f:83:14:08:5b:18:
14:ad:12:22:96:c0:f2:51:c4:8a:da:b4:4d:32:5f:5d:ca:31:
e6:ca:90:6b:ee:8b:61:22:7d:b9:24:cb:ff:a8:a2:a5:df:af:
c8:65:ee:8b:88:c0:d6:ec:d9:1a:09:60:a0:1a:82:2e:08:92:
83:ff:b0:a2:ed:64:94:7e:25:37:50:03:e4:fc:ba:8c:f8:c7:
71:61:fa:96:e0:c2:3d:fe:1c:ac:08:3a:fb:1f:ea:e3:c9:87:
82:ae:39:e9:59:27:96:ed:cf:40:b8:b2:66:8a:a8:d3:b3:e8:
9b:a0:36:e8:08:66:8e:e9:46:8e:74:9f:51:ce:65:7d:d2:ed:
e3:74:d0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:56 2025 by rpki-client