Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216255.roa
File: AS216255.roa (raw, json)
Hash identifier: UlPPXuOfczLQROjZUZiy5lQhsiwvp8OMv5m4yG5m2K8=
Subject key identifier: E2:34:03:9B:C0:CB:AF:F8:70:79:57:74:BF:41:29:F9:BA:E0:91:FC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 19A960A28036CE59E01F3D80D7BEB5FE37DDA67C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216255.roa
Signing time: Sat 13 Sep 2025 02:22:38 +0000
ROA not before: Sat 13 Sep 2025 02:17:38 +0000
ROA not after: Sat 12 Sep 2026 02:22:38 +0000
asID: 216255
IP address blocks: 2a0f:85c1:d3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a9:60:a2:80:36:ce:59:e0:1f:3d:80:d7:be:b5:fe:37:dd:a6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 13 02:17:38 2025 GMT
Not After : Sep 12 02:22:38 2026 GMT
Subject: CN=E234039BC0CBAFF870795774BF4129F9BAE091FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:95:af:89:9a:46:44:4b:a2:da:84:53:a0:
e5:e4:80:69:42:36:be:83:45:35:11:ea:ba:d9:47:
6e:04:af:06:e1:3b:98:cb:f1:89:bf:48:21:26:23:
f8:f9:72:6b:e0:0b:27:9e:8f:6d:50:86:63:c0:56:
fb:39:cb:a8:47:c6:ad:b7:1e:a4:4e:d4:f2:7f:b0:
44:c6:27:a9:c7:dc:46:59:87:98:60:f2:80:d4:7e:
14:7c:e4:60:eb:85:da:01:7c:ad:98:c0:38:7e:09:
b6:d2:80:ac:d4:50:b6:b5:d1:ef:2a:b4:13:d0:5e:
78:1b:49:f2:ba:15:dc:93:45:b6:12:79:41:84:8e:
08:02:e1:97:c2:26:76:fd:68:8c:31:0a:76:94:a5:
85:c3:e8:b8:07:3f:cf:ed:ca:d7:48:0b:21:22:2e:
fd:0a:f7:41:f9:07:61:7f:6d:24:2e:72:bf:b6:96:
af:6f:7d:df:9c:1f:08:60:4a:e0:ad:e2:11:df:89:
6b:60:a7:20:0a:e6:95:04:a6:ae:dd:84:97:85:ca:
39:82:e9:96:31:e0:85:0d:31:9e:ba:a6:e3:30:d1:
f7:3e:7f:eb:be:88:c7:8c:2f:89:d0:f5:0f:f3:42:
39:90:69:ed:02:47:7a:d5:30:db:de:36:28:6e:b0:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:03:9B:C0:CB:AF:F8:70:79:57:74:BF:41:29:F9:BA:E0:91:FC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d3a::/48
Signature Algorithm: sha256WithRSAEncryption
ed:1d:dd:6b:6f:71:6c:46:2e:21:21:96:14:70:03:99:97:fc:
18:e0:fd:b6:f7:1e:19:68:f0:8a:c1:47:56:a6:f5:15:17:70:
44:e8:7c:17:be:c7:7a:cb:61:9e:aa:4c:b9:5b:dd:4a:8f:96:
a3:ed:2a:bc:70:56:d9:04:bf:18:c5:81:db:3b:33:54:0c:ee:
38:87:98:11:97:3d:b1:97:17:9d:c2:6c:a7:bd:82:2a:c1:8b:
c8:d3:72:8c:66:fb:e8:be:27:90:ec:ac:74:89:a6:d9:20:b5:
ee:35:72:00:2e:c9:0a:5f:78:b0:0b:6f:18:09:15:8b:69:87:
19:08:68:23:fe:ae:b7:ee:f3:5c:70:49:51:23:0e:61:07:f6:
e7:f2:5c:3e:3e:a2:d5:d7:f7:a8:1f:c6:36:2c:18:3a:cd:8c:
77:07:80:1a:5c:5a:6a:44:ca:15:f7:50:e1:86:c1:8b:e6:db:
cd:53:55:39:29:83:36:33:e7:e8:aa:ea:95:be:fc:15:27:1e:
71:6f:9e:48:e0:32:9e:a2:4e:50:d6:cc:83:59:ce:99:91:31:
bd:ff:f5:40:1e:a4:99:6d:41:6b:43:6f:a0:3d:f5:39:c0:06:
c4:04:a8:db:b0:a0:5f:0c:f1:e3:eb:80:c5:b3:3e:f5:84:3d:
66:e9:d1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:19 2025 by rpki-client