Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS211281.roa
File: AS211281.roa (raw, json)
Hash identifier: WjlbHFWF4uD5p0KjasSXS/OX42otyU+GN83zpVT7s/g=
Subject key identifier: A6:5F:65:CF:D1:89:34:16:57:37:31:34:1A:20:69:82:1E:96:98:FB
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6E3F0C359AA362808F5D4378030BC6E4DF5D52C8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS211281.roa
Signing time: Thu 18 Sep 2025 11:09:31 +0000
ROA not before: Thu 18 Sep 2025 11:04:31 +0000
ROA not after: Thu 17 Sep 2026 11:09:31 +0000
asID: 211281
IP address blocks: 2a14:7580:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3f:0c:35:9a:a3:62:80:8f:5d:43:78:03:0b:c6:e4:df:5d:52:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 18 11:04:31 2025 GMT
Not After : Sep 17 11:09:31 2026 GMT
Subject: CN=A65F65CFD1893416573731341A2069821E9698FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:5a:72:b9:76:fc:85:22:a1:af:22:13:49:
1c:6b:74:43:f1:63:ef:33:6e:51:94:0f:34:ee:0c:
cf:9d:80:20:b7:48:a6:bb:90:0b:df:3d:32:04:d5:
13:4f:88:24:36:17:4d:8f:9a:77:28:3d:55:87:e5:
72:09:da:14:11:1b:16:6a:ad:18:62:96:47:c5:ba:
e3:ed:c3:15:84:6b:bb:b9:6b:f1:8b:ef:b2:9d:17:
a3:ec:f6:bf:e9:a4:a1:3f:57:d2:1b:2f:a5:0c:d6:
e8:df:11:e4:16:aa:ff:c1:13:ae:b1:cd:41:7c:cb:
f9:14:63:13:bc:ff:b0:f2:1e:e6:94:c8:09:90:6f:
d4:16:e3:ee:c7:7a:58:c1:1a:92:cc:17:75:74:63:
3c:a1:24:ba:ee:f7:de:de:ac:e8:25:c9:40:23:f4:
bf:3b:63:6e:4c:13:76:2f:d9:e3:cb:3f:d2:8b:86:
eb:47:a1:ad:71:03:7c:af:49:0f:7e:13:a8:7a:f5:
00:10:de:ba:ac:d9:04:f1:19:45:37:90:90:0e:73:
f7:48:7d:54:01:56:68:dc:fd:bc:41:68:41:58:bb:
5f:4f:a8:fc:be:98:31:ea:59:03:70:a3:50:55:49:
d6:32:14:43:9f:03:9d:f8:11:65:a1:e6:d4:4d:4c:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:65:CF:D1:89:34:16:57:37:31:34:1A:20:69:82:1E:96:98:FB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS211281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:b000::/36
Signature Algorithm: sha256WithRSAEncryption
48:b7:30:69:9a:b6:4e:db:19:51:b8:10:62:4c:49:c0:a4:f6:
02:ad:f5:e9:21:44:e4:1a:3f:10:64:d0:84:a5:fc:9e:87:ed:
f4:fd:0c:5c:c8:aa:58:0b:54:38:ba:66:f4:7a:01:85:e8:98:
d3:6a:04:80:11:0e:8f:e2:58:e3:fc:b2:75:24:37:11:06:33:
24:bf:ee:30:79:5e:17:99:8d:c7:3d:2f:57:6b:34:27:19:32:
96:af:27:20:08:6b:06:b8:09:de:9b:2b:5a:c6:46:29:75:56:
dd:e7:3f:e1:28:6b:72:36:46:89:b8:7b:56:17:d9:5c:09:64:
df:b3:e1:ec:18:00:a2:2b:03:ff:32:f0:d7:9f:33:a1:80:2e:
97:5b:e8:4d:d5:04:6d:07:ea:f6:ba:6b:82:0c:fd:de:1d:11:
cf:f2:26:48:b9:cf:97:c5:6f:dd:a9:33:ba:8e:8d:10:e8:af:
6d:cc:5e:49:0d:06:94:5c:08:8d:f8:db:40:80:6b:66:30:24:
96:e2:70:67:72:d2:fc:d1:18:35:96:6b:3c:bb:86:90:27:ce:
76:04:08:75:c3:86:2b:87:68:1c:d5:f0:b0:6c:d1:21:0b:7c:
4b:2e:03:98:fe:5a:c6:27:87:19:95:ac:d1:8f:96:06:c0:ae:
28:00:3b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:03 2025 by rpki-client