Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213568.roa
File: AS213568.roa (raw, json)
Hash identifier: RGYrdRBpP+AtStXL4AsDhYsO5gfFvgO0EKfiBgLTvN4=
Subject key identifier: 50:B4:B3:8F:51:0B:78:C4:A3:D0:FC:59:AB:38:1D:25:7B:55:B9:A8
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 27530BA93EB8FCB02E35A9151DD92FCD38FFADD4
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213568.roa
Signing time: Tue 16 Sep 2025 11:12:12 +0000
ROA not before: Tue 16 Sep 2025 11:07:12 +0000
ROA not after: Tue 15 Sep 2026 11:12:12 +0000
asID: 213568
IP address blocks: 85.235.73.0/24 maxlen: 24
92.249.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:53:0b:a9:3e:b8:fc:b0:2e:35:a9:15:1d:d9:2f:cd:38:ff:ad:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Sep 16 11:07:12 2025 GMT
Not After : Sep 15 11:12:12 2026 GMT
Subject: CN=50B4B38F510B78C4A3D0FC59AB381D257B55B9A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:13:ef:f0:f8:1b:73:6a:04:38:1d:05:26:68:
3b:60:20:14:58:a2:9c:a0:8a:29:f3:15:a1:28:5f:
a5:c1:f9:7f:31:a8:0b:3d:97:6a:f6:27:1c:41:39:
3e:30:27:ee:7f:fd:7c:71:81:26:1c:6e:a4:75:30:
21:eb:dd:2f:bc:89:5d:96:4b:42:8d:8a:9a:60:b2:
94:28:26:d5:cb:66:04:2d:4f:98:65:ec:2f:d8:c0:
a9:9c:e0:57:53:a3:8a:e5:eb:ef:20:2d:2f:b2:f1:
2f:bf:14:92:b5:92:fe:0d:52:cf:e3:66:24:15:a6:
e9:dc:77:0f:4d:8d:86:05:f7:ca:5c:75:6e:52:17:
9f:30:e0:7a:a9:f9:c5:95:61:eb:c1:95:07:38:36:
64:6c:2a:b8:57:a3:a2:20:a5:40:d8:d0:ef:aa:5f:
8e:a6:11:83:29:e0:42:69:ff:19:bb:12:ff:81:20:
8d:91:6e:47:5c:66:f2:e2:f4:36:a5:92:be:bc:e4:
a8:4c:7e:b2:37:b4:20:8a:18:40:3b:9c:65:08:a3:
8d:ec:82:0b:79:6e:ab:b6:04:88:ef:70:9a:c4:ac:
09:c7:08:4a:52:ca:00:75:3b:b9:14:ad:c2:2c:53:
83:9a:9c:b8:f1:4d:46:69:fa:1f:15:21:9c:e6:85:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B4:B3:8F:51:0B:78:C4:A3:D0:FC:59:AB:38:1D:25:7B:55:B9:A8
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213568.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.73.0/24
92.249.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fe:6c:ff:40:07:7e:f7:1d:6a:7b:35:eb:cc:50:b2:75:5c:
21:c3:96:67:e3:e9:15:bb:30:a5:ea:7e:e1:63:db:58:a4:b4:
24:6c:f9:6f:53:52:88:ce:12:62:b9:43:15:90:1d:c5:f5:d7:
fd:bf:47:24:d8:a3:2e:b2:0f:c4:ab:65:25:4e:70:ce:69:73:
80:39:97:7c:9a:84:47:1d:fd:03:bf:ec:50:eb:35:38:ae:00:
0a:eb:1a:74:32:82:0a:2c:2b:96:8d:ae:c5:fd:2a:2b:69:bb:
33:f7:1b:52:3d:2a:79:d2:46:29:46:0f:05:ad:e0:64:4f:c2:
dd:51:49:06:cd:cd:d0:1f:2d:4a:3e:78:a3:64:d9:f9:4e:c4:
c8:e5:5a:de:d7:e3:7a:53:5c:25:58:cb:82:86:aa:36:ca:43:
a2:8a:24:07:77:b1:4a:6f:af:c5:37:36:ae:2c:b8:12:20:e4:
ef:86:44:20:1c:66:ac:a9:c6:ea:e0:d6:48:be:dd:9d:3b:b8:
58:72:06:3a:0e:8b:6d:36:9a:1e:3a:cf:c6:1a:5f:43:c7:fe:
86:cb:49:98:a8:c4:3c:d5:9b:19:87:41:52:fa:46:da:46:85:
88:da:86:06:d3:e2:fd:c1:b1:69:88:96:a1:52:fd:9c:3a:96:
e1:74:20:4f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUJ1MLqT64/LAuNakVHdkvzTj/rdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTA5MTYxMTA3MTJaFw0yNjA5MTUxMTEyMTJaMDMxMTAvBgNV
BAMTKDUwQjRCMzhGNTEwQjc4QzRBM0QwRkM1OUFCMzgxRDI1N0I1NUI5QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyE+/w+BtzagQ4HQUmaDtgIBRY
opygiinzFaEoX6XB+X8xqAs9l2r2JxxBOT4wJ+5//XxxgSYcbqR1MCHr3S+8iV2W
S0KNippgspQoJtXLZgQtT5hl7C/YwKmc4FdTo4rl6+8gLS+y8S+/FJK1kv4NUs/j
ZiQVpuncdw9NjYYF98pcdW5SF58w4Hqp+cWVYevBlQc4NmRsKrhXo6IgpUDY0O+q
X46mEYMp4EJp/xm7Ev+BII2RbkdcZvLi9Dalkr685KhMfrI3tCCKGEA7nGUIo43s
ggt5bqu2BIjvcJrErAnHCEpSygB1O7kUrcIsU4OanLjxTUZp+h8VIZzmhanVAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUULSzj1ELeMSj0PxZqzgdJXtVuagwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjEzNTY4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVetJ
AwQAXPk+MA0GCSqGSIb3DQEBCwUAA4IBAQAu/mz/QAd+9x1qezXrzFCydVwhw5Zn
4+kVuzCl6n7hY9tYpLQkbPlvU1KIzhJiuUMVkB3F9df9v0ck2KMusg/Eq2UlTnDO
aXOAOZd8moRHHf0Dv+xQ6zU4rgAK6xp0MoIKLCuWja7F/Sorabsz9xtSPSp50kYp
Rg8FreBkT8LdUUkGzc3QHy1KPnijZNn5TsTI5Vre1+N6U1wlWMuChqo2ykOiiiQH
d7FKb6/FNzauLLgSIOTvhkQgHGasqcbq4NZIvt2dO7hYcgY6DottNpoeOs/GGl9D
x/6Gy0mYqMQ81ZsZh0FS+kbaRoWI2oYG0+L9wbFpiJahUv2cOpbhdCBP
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:49 2025 by rpki-client