Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213430.roa
File: AS213430.roa (raw, json)
Hash identifier: /uMMtzE4WsbGFO4eh1a74KvrlJ3aXoS5Z91h9aS63JA=
Subject key identifier: 28:E9:B2:B0:10:20:3C:4B:CE:00:D0:ED:50:A3:C3:65:41:83:24:F8
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 64244F1A30DD58746B368844492B95A6646DDA30
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213430.roa
Signing time: Mon 15 Sep 2025 14:33:14 +0000
ROA not before: Mon 15 Sep 2025 14:28:14 +0000
ROA not after: Mon 14 Sep 2026 14:33:14 +0000
asID: 213430
IP address blocks: 2a14:7581:9fa0::/44 maxlen: 48
2a14:7581:9fb0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:24:4f:1a:30:dd:58:74:6b:36:88:44:49:2b:95:a6:64:6d:da:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 15 14:28:14 2025 GMT
Not After : Sep 14 14:33:14 2026 GMT
Subject: CN=28E9B2B010203C4BCE00D0ED50A3C365418324F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:43:fd:90:c4:dc:0d:be:4e:56:5e:eb:94:
97:c0:6d:8f:0e:5c:36:51:6d:ad:05:98:5f:67:e4:
6c:1d:45:54:f7:ad:e3:63:25:06:55:f3:1b:d1:ef:
82:b4:a0:51:8e:90:c5:5c:94:14:d8:d9:47:52:41:
d9:9d:9a:5c:2a:36:db:76:2b:a6:7d:0b:fe:55:fc:
c4:fa:61:24:7f:34:80:a9:95:fd:ee:b1:ba:91:63:
6c:59:b8:a4:ee:2e:09:da:39:05:90:04:e2:21:3e:
85:33:01:df:9c:67:7f:cb:7d:8f:c6:17:f0:a5:d8:
d1:ea:0d:26:7e:22:f3:34:9a:dc:ca:03:72:7d:ab:
a2:5a:bb:08:53:cd:ac:b3:a6:a0:f5:12:d8:45:a0:
6f:d4:a1:26:da:84:d9:ae:e2:c1:83:72:f8:b4:1b:
78:85:d5:1f:5f:fb:6a:24:5e:13:f8:4d:38:b8:08:
e7:75:88:0f:8c:a4:8e:2b:df:19:4f:a3:55:1e:fc:
98:ac:0d:9d:59:c4:f0:04:9e:76:d3:e5:96:29:02:
ef:0e:04:f0:83:a0:46:4f:59:97:73:be:00:98:92:
72:b8:2c:0e:c9:86:65:cf:00:0d:3b:e4:00:d0:fb:
6e:51:40:71:fb:47:a4:a4:67:d8:5c:54:9c:55:9d:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E9:B2:B0:10:20:3C:4B:CE:00:D0:ED:50:A3:C3:65:41:83:24:F8
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9fa0::/43
Signature Algorithm: sha256WithRSAEncryption
8e:fe:85:ae:3a:7c:c3:78:55:37:6e:db:40:7e:84:dd:d3:7f:
7c:e0:96:66:31:44:85:33:99:fe:dc:85:6b:aa:4b:6e:60:25:
40:e7:06:c6:68:15:af:f1:2d:bb:5b:38:ac:9e:92:7d:b6:68:
a0:bd:fc:7e:5f:51:a3:51:3a:74:00:9b:de:ac:8d:29:f8:48:
e9:85:41:7a:b4:6c:5e:85:1b:19:e5:e4:38:99:00:cb:81:86:
c1:6b:1b:c2:39:93:bb:3b:d1:75:11:8b:f4:5d:e1:c4:e3:0c:
d3:29:bc:47:c1:ce:3f:ce:29:24:4b:c7:d0:16:71:a3:b1:d3:
ba:ae:bf:05:98:49:03:6f:88:7e:1d:35:8b:f1:f4:8d:c3:c8:
d3:d4:31:98:8d:ee:00:e6:20:28:a3:28:3d:ea:60:b5:c3:22:
c5:53:bc:51:30:e8:ff:ea:d6:50:47:16:ac:25:07:7a:23:e8:
90:39:74:1e:50:3f:32:d3:8c:d6:9b:22:4d:77:88:74:a2:44:
09:d3:4b:9c:f5:cc:a8:9c:b2:d9:64:8f:09:a4:e1:82:21:8b:
52:09:3b:67:08:9d:2f:c7:f5:9b:76:5f:f9:0c:7c:7c:26:46:
cb:b9:69:12:4c:6f:be:e5:69:36:e7:fe:49:b1:f8:cf:0f:55:
9e:61:0a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:22 2025 by rpki-client