Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213945.roa
File: AS213945.roa (raw, json)
Hash identifier: W8a8mSoQONIqlYkOVfqfZhASrJdkkAD00GCJPGSQYY8=
Subject key identifier: 33:3D:55:79:B7:A1:08:E6:D0:07:39:F4:5A:B0:97:07:FF:8D:F6:C9
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 7026AFBAAF30385348A7C66793F88F55AEFE6DB5
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213945.roa
Signing time: Mon 18 Aug 2025 13:27:56 +0000
ROA not before: Mon 18 Aug 2025 13:22:56 +0000
ROA not after: Mon 17 Aug 2026 13:27:56 +0000
asID: 213945
IP address blocks: 176.96.130.0/24 maxlen: 24
217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:26:af:ba:af:30:38:53:48:a7:c6:67:93:f8:8f:55:ae:fe:6d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Aug 18 13:22:56 2025 GMT
Not After : Aug 17 13:27:56 2026 GMT
Subject: CN=333D5579B7A108E6D00739F45AB09707FF8DF6C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:9c:9c:75:23:d9:f8:d8:59:3b:90:c6:f2:
18:c6:53:97:84:1d:16:dc:a3:38:cf:c6:26:43:3d:
4e:9f:41:62:b8:f5:86:db:75:72:f1:02:83:d2:45:
28:3a:3d:96:9b:ee:c5:16:22:77:04:77:30:d9:8b:
4d:51:9e:28:c5:9b:46:95:63:d8:5a:86:3e:8c:34:
0a:d3:d3:9b:08:04:0f:44:96:ce:d6:8f:d5:3a:b3:
f5:99:91:cd:bd:7e:b8:03:cd:64:3d:02:28:4a:1c:
0c:64:29:aa:d8:89:c4:b4:b5:07:18:7a:e0:73:d1:
56:47:28:2a:6a:f3:ea:ab:7d:34:83:54:27:ae:2d:
b7:be:15:7c:4c:bd:ac:44:6d:bb:a9:53:da:66:a3:
ff:d5:05:f3:31:58:0d:39:6b:b4:2f:bc:88:62:73:
98:76:ec:c7:10:0d:3c:92:ea:fe:f1:d2:83:9d:e0:
16:c2:8f:0c:93:7b:9b:fa:1e:72:35:f4:43:b6:34:
40:13:43:ea:7b:42:a4:24:52:de:25:25:6b:cb:bf:
45:26:00:10:1b:2a:f4:ed:bb:f6:29:3b:54:87:14:
0e:78:ea:5e:f8:c5:9b:74:25:8e:4b:a7:92:83:bb:
57:d0:ce:cd:20:ad:99:63:9f:a8:b9:09:7d:0a:e1:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3D:55:79:B7:A1:08:E6:D0:07:39:F4:5A:B0:97:07:FF:8D:F6:C9
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213945.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.130.0/24
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
14:62:84:60:6a:bf:24:6c:2e:51:2a:e7:b9:26:f6:b8:a2:f6:
6d:7a:0d:f8:97:51:2b:a1:8c:05:68:53:26:0c:93:e5:24:c2:
e4:5e:9a:1b:5c:48:0a:fc:c8:00:0e:7f:ea:02:d6:5d:70:fc:
16:b7:c9:ef:99:40:58:d9:a1:e4:9c:16:ab:77:4e:cb:c1:34:
e6:97:66:b8:a9:c4:80:f8:fb:9b:2b:ed:0f:38:cb:89:c8:bc:
6f:ec:03:21:19:af:e8:6e:7d:25:46:1d:47:29:d0:06:27:22:
33:33:2d:ad:e8:ae:ab:78:7d:9e:05:5f:b2:1c:93:39:06:1f:
60:e2:09:82:a2:48:c5:7f:f8:25:94:d6:9e:2e:4c:a3:27:b4:
49:eb:4c:1d:c4:84:29:99:dd:39:5d:a9:73:6a:7b:92:59:22:
ee:8b:e8:fa:44:a0:7a:fb:73:74:91:26:40:c3:5b:57:d3:3d:
e4:7c:3e:82:da:8b:84:9d:a3:9d:bb:c5:36:b3:94:aa:ea:3c:
91:da:ee:3b:5e:7a:b0:ac:3a:54:b6:f2:ab:9e:3b:2c:2e:8c:
0a:c2:9e:ac:26:75:2a:f8:ce:22:2e:67:eb:c6:44:10:52:c2:
07:f9:52:c3:73:a1:8a:32:34:0b:f6:2e:a5:88:ba:db:f4:4a:
da:92:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:23 2025 by rpki-client