Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210046.roa
File: AS210046.roa (raw, json)
Hash identifier: pjBBrXxwGto08P460KJ2KQqdDbp7iR7Cj2r/4ZGtdTk=
Subject key identifier: 84:FA:ED:3E:57:A2:72:0D:46:3B:AE:2A:38:46:58:E1:F8:DE:1A:F2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0746CA566F34996F9D0371108F28E37EB989AFB5
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210046.roa
Signing time: Mon 06 Oct 2025 21:54:52 +0000
ROA not before: Mon 06 Oct 2025 21:49:52 +0000
ROA not after: Mon 05 Oct 2026 21:54:52 +0000
asID: 210046
IP address blocks: 141.11.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:46:ca:56:6f:34:99:6f:9d:03:71:10:8f:28:e3:7e:b9:89:af:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 6 21:49:52 2025 GMT
Not After : Oct 5 21:54:52 2026 GMT
Subject: CN=84FAED3E57A2720D463BAE2A384658E1F8DE1AF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:a8:96:89:59:0e:66:b3:74:6a:f7:cf:cc:
20:41:84:e4:0a:9b:15:ce:0f:85:de:0b:1e:b2:d9:
04:00:b6:6d:03:fa:32:3d:77:3b:fe:36:4e:64:6b:
e2:b6:ac:94:22:f0:1a:e1:e7:05:c3:01:55:00:b6:
02:cc:51:0e:06:4a:63:05:a7:8c:77:26:e2:77:df:
cd:d5:cc:b3:2f:72:ea:1d:13:88:9a:82:72:e6:7f:
c0:e2:43:38:6f:ce:84:98:20:41:e3:5e:4b:62:8c:
ce:b9:d6:b1:a0:c3:e3:37:76:ff:8c:44:f9:10:b7:
21:8f:1d:d7:09:30:d6:67:4e:cf:9d:45:df:37:10:
82:2b:4a:e9:d7:a1:5c:ef:f2:74:7b:55:6a:df:84:
d6:58:0f:07:2c:00:f8:67:ba:6b:d3:d7:df:34:0f:
1a:31:f6:fc:87:92:4e:85:54:33:a2:65:d7:11:f4:
d3:15:bd:92:92:69:10:d2:71:64:ff:04:24:18:4b:
aa:63:cb:6f:c5:af:cc:a3:53:d2:45:25:b7:10:cd:
cb:87:45:ec:40:c1:78:ac:b9:a1:12:93:94:d2:80:
5e:1a:c1:03:23:ee:35:8a:bc:e6:3e:96:42:8f:19:
4c:06:33:3f:49:47:60:73:a6:92:68:39:34:49:d7:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FA:ED:3E:57:A2:72:0D:46:3B:AE:2A:38:46:58:E1:F8:DE:1A:F2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210046.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.53.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e6:2c:38:f8:f8:e3:6a:13:c0:09:61:77:60:d8:38:41:0d:
79:a2:72:0b:36:f2:e4:a5:9e:d5:26:35:09:08:ae:2c:09:ab:
db:a4:30:2d:78:30:d0:35:f3:56:53:cb:03:ca:1d:ac:46:37:
09:ab:82:25:e8:93:3b:18:75:16:7e:8e:95:41:af:69:8b:30:
3c:ff:53:96:1b:ed:78:a4:09:43:67:7c:50:5f:62:a1:de:7b:
7d:2f:4e:a1:66:b0:f4:83:43:f0:4e:0d:80:28:91:b4:5e:1b:
a9:cb:fd:43:4d:be:d3:ed:f9:f1:d9:46:fc:23:4e:e6:b2:e1:
3f:38:fc:d0:81:ed:0e:ba:30:31:63:43:c5:a7:5a:5b:02:f5:
41:91:ad:d3:79:ca:90:d1:13:9d:e5:6d:de:ce:57:7e:31:28:
1b:d3:bb:c2:bc:f8:6f:48:7d:9b:76:d5:e5:e8:18:02:a3:f9:
64:df:20:50:8a:b6:b5:7d:c3:53:5c:de:8e:25:5b:10:a5:ea:
b0:1a:7b:12:19:37:eb:36:b4:18:2b:3a:db:30:92:ad:e5:a0:
cf:ee:12:05:58:80:80:13:6e:93:8e:46:25:fc:1c:aa:33:af:
cd:20:8e:2c:be:5d:a0:f3:57:bd:40:6a:08:d9:c0:fe:49:d9:
08:ba:6d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:56 2025 by rpki-client