Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213436.roa
File: AS213436.roa (raw, json)
Hash identifier: c8gkmTTIIruxsEM5crQXJaumiBoUMY9I56AzmWg7d5k=
Subject key identifier: B9:AD:3E:15:17:A2:BC:0E:CE:4C:62:3C:67:57:0C:4C:C9:7E:F2:B1
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7F9E6708D7800606FFC2963416A4FF4ABD5ED177
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213436.roa
Signing time: Thu 25 Sep 2025 03:32:34 +0000
ROA not before: Thu 25 Sep 2025 03:27:34 +0000
ROA not after: Thu 24 Sep 2026 03:32:34 +0000
asID: 213436
IP address blocks: 2a14:7583:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9e:67:08:d7:80:06:06:ff:c2:96:34:16:a4:ff:4a:bd:5e:d1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 25 03:27:34 2025 GMT
Not After : Sep 24 03:32:34 2026 GMT
Subject: CN=B9AD3E1517A2BC0ECE4C623C67570C4CC97EF2B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:57:e1:84:ea:66:06:56:8e:e7:2e:c9:d2:
57:91:47:95:03:41:28:d3:f8:41:52:33:3f:94:8e:
79:e1:fd:a7:d8:4b:e0:5d:a2:af:19:91:2e:e8:5a:
0e:15:90:08:ad:94:3d:2b:e2:60:85:0d:f1:78:81:
61:3f:b0:a8:0c:a1:81:59:f6:47:5c:96:4c:9a:8a:
7b:34:a8:57:ae:92:8c:c6:6c:b1:06:98:d3:12:96:
2d:e9:d4:6e:ba:db:c3:4f:88:e8:15:ea:39:5e:47:
a6:de:7d:ba:0e:64:1a:ba:e9:17:d2:c1:ea:64:b0:
e3:1e:83:2a:b3:dc:d4:e6:bf:01:a5:35:42:62:49:
2d:29:85:e3:02:38:12:a7:d1:40:b5:71:0d:b5:64:
93:f1:8b:3a:42:0f:3d:7e:66:de:fc:e4:7d:84:85:
cc:b6:2c:b7:ec:f7:c5:1a:f4:81:45:a8:8c:7d:79:
75:50:2b:dd:70:ee:19:e7:20:9b:fc:c5:5d:32:3f:
9b:79:fb:eb:bc:be:90:9d:e9:1e:f9:a1:be:d6:fa:
8b:a7:07:09:2c:e4:b3:ce:31:b1:27:cb:8a:7c:4a:
b1:18:77:6a:48:06:10:a2:64:ea:9e:2e:e8:e2:7b:
11:8e:dc:3e:f9:b8:18:c6:51:07:7c:d8:05:40:c4:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AD:3E:15:17:A2:BC:0E:CE:4C:62:3C:67:57:0C:4C:C9:7E:F2:B1
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:b000::/36
Signature Algorithm: sha256WithRSAEncryption
8e:b6:cb:18:eb:f2:2c:dc:b0:22:93:15:b0:de:56:22:22:36:
5e:12:9d:b2:47:9d:76:09:4d:d1:88:cb:7b:7c:88:e6:5d:6f:
9a:b3:45:6b:e2:7c:aa:fb:a3:68:dd:dc:b2:f0:04:16:ad:71:
5d:5c:e1:3e:55:1b:91:0b:65:ac:b4:f0:28:e7:dd:be:1b:59:
c4:2a:de:86:3c:de:20:10:27:6f:35:93:21:fa:24:21:e5:84:
fb:ab:44:f2:40:08:01:7d:09:39:b8:50:02:89:88:ca:55:8c:
ca:8f:0f:ee:44:ac:fb:4a:ea:e1:63:24:3b:a7:e3:d8:64:e0:
cd:ca:0b:4f:1b:ea:67:ba:01:6d:2a:48:19:73:c5:50:30:65:
7e:6b:19:75:56:3a:c9:67:a7:93:87:e9:98:7e:46:f4:34:e8:
e7:82:15:df:de:9c:5c:93:e8:da:0c:a0:ce:3a:db:e9:ce:1d:
30:d4:46:28:1f:50:6b:bc:0a:5e:86:ce:b7:b8:9e:4e:5e:0f:
e2:37:4f:38:9a:67:c7:97:b9:f0:2c:08:77:f0:9f:b5:f5:f6:
4f:05:8d:72:3f:a7:f5:91:c6:2b:6a:95:80:77:9a:f8:90:34:
35:71:65:26:72:e9:9f:2a:ba:ab:9b:7d:70:bf:c4:df:e8:88:
36:34:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:18 2025 by rpki-client