Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216199.roa
File: AS216199.roa (raw, json)
Hash identifier: DhcsNypPXK83ZEdnFXJ5LYy4W3Ngw5O0fyu7nK3tuVQ=
Subject key identifier: 62:05:0C:52:48:DA:0E:01:35:7F:9A:81:7E:98:A5:F3:03:B2:84:79
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6F1BF4769885056261A0A67BA501FE62480D5344
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216199.roa
Signing time: Mon 18 Aug 2025 20:56:03 +0000
ROA not before: Mon 18 Aug 2025 20:51:03 +0000
ROA not after: Mon 17 Aug 2026 20:56:03 +0000
asID: 216199
IP address blocks: 2a0f:85c1:ce4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:1b:f4:76:98:85:05:62:61:a0:a6:7b:a5:01:fe:62:48:0d:53:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 20:51:03 2025 GMT
Not After : Aug 17 20:56:03 2026 GMT
Subject: CN=62050C5248DA0E01357F9A817E98A5F303B28479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:12:a9:ac:f6:3b:38:81:65:f0:f2:80:78:1e:
87:21:c4:a1:32:0e:a7:1e:4d:57:86:bc:63:eb:57:
56:19:ce:47:46:44:8e:a8:77:eb:da:91:79:e0:1c:
08:02:4a:78:83:4f:f2:05:fb:69:2d:fd:78:1f:cb:
bf:f6:3d:54:a8:7b:92:bb:56:8b:ed:29:ac:7c:5d:
42:c7:14:92:fd:e8:35:eb:6a:5e:05:e6:c5:08:55:
08:c7:82:b0:70:e4:d7:14:c0:de:e6:9f:f5:8b:ac:
95:1f:e3:82:45:e2:b8:e9:d8:fa:8e:fa:96:5a:59:
fd:55:75:7a:ef:30:ec:a2:78:10:de:b0:16:1a:68:
ef:29:f4:77:7c:a7:f5:27:95:57:a4:e1:98:fc:56:
6b:48:c3:c9:f8:65:a1:3e:d8:91:33:d2:cc:8d:76:
e2:00:7f:8c:3e:d3:25:9f:56:48:67:20:69:71:ce:
0c:22:97:64:f7:f9:90:f6:27:0a:7e:5e:1f:1c:71:
eb:41:fa:50:f5:f7:46:88:0a:49:5c:ea:4f:ad:8b:
a1:9a:7a:fd:4c:97:36:06:0a:ae:81:6b:89:d2:b8:
c7:fd:90:0e:e4:74:c0:8a:0d:45:2a:ab:72:57:81:
47:be:3b:2c:11:b7:4c:ab:48:e0:3a:61:40:d4:74:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:05:0C:52:48:DA:0E:01:35:7F:9A:81:7E:98:A5:F3:03:B2:84:79
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ce4::/48
Signature Algorithm: sha256WithRSAEncryption
63:48:75:5c:02:d6:28:58:3b:f8:0a:dc:00:48:f4:3d:c2:19:
b1:cb:22:c8:c4:6f:f2:f8:5f:8d:3d:cb:cf:c9:f0:45:db:6a:
1b:62:95:3a:c5:ba:35:12:9a:36:39:35:68:68:1c:e5:7c:a9:
bc:7d:1a:ab:03:0a:6e:be:cc:86:f8:fd:1c:82:f0:ce:1b:cc:
38:4b:93:36:ff:43:bb:f0:0f:e2:59:6b:e8:73:bc:95:7f:42:
58:cc:a1:97:21:e1:b5:3e:b4:53:2f:47:91:69:f8:43:ec:72:
d1:2d:88:e2:d0:39:8a:57:d1:75:9e:c0:1e:0d:b2:25:c1:ba:
af:cc:19:c7:d6:de:40:57:c5:7d:06:ba:bd:fa:bd:88:56:3d:
30:e4:3d:d1:49:de:18:00:04:a6:ba:6e:44:65:c5:92:1b:6b:
4a:a8:2f:a5:9b:5d:19:63:1a:b2:33:0d:dd:6e:c1:f4:b5:d0:
ee:61:d2:38:80:ff:3c:21:1d:ef:9c:44:72:93:2d:3b:9f:8e:
87:e4:c7:5c:ce:65:62:18:8e:99:84:af:67:6f:83:24:e8:76:
03:cb:7c:d4:f4:3f:20:43:d9:87:f7:7a:11:97:fc:4f:71:ad:
16:0d:3b:6c:e5:ce:a3:57:ca:ce:0c:03:bf:c6:b0:54:f0:6d:
f0:41:8c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:51 2025 by rpki-client