Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216022.roa
File: AS216022.roa (raw, json)
Hash identifier: EvqPt22lnMwnVui1c45z5qVmxD6nJ3nr70yyg0abM6k=
Subject key identifier: 80:B8:85:E7:6C:EB:19:6D:B5:4F:9A:2F:32:35:39:6A:21:BA:2B:BF
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1A867467110561DBE5B6A662456ED37E8C86297E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216022.roa
Signing time: Mon 06 Oct 2025 14:55:08 +0000
ROA not before: Mon 06 Oct 2025 14:50:08 +0000
ROA not after: Mon 05 Oct 2026 14:55:08 +0000
asID: 216022
IP address blocks: 141.11.32.0/24 maxlen: 24
141.11.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:86:74:67:11:05:61:db:e5:b6:a6:62:45:6e:d3:7e:8c:86:29:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 6 14:50:08 2025 GMT
Not After : Oct 5 14:55:08 2026 GMT
Subject: CN=80B885E76CEB196DB54F9A2F3235396A21BA2BBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:c9:38:fa:90:16:44:b4:d0:1d:3d:87:e8:
80:19:32:d3:31:f9:54:31:6c:e7:00:84:12:e3:62:
60:8f:e5:4c:be:be:5b:a3:2f:04:ed:1d:bb:40:53:
7c:bc:58:52:12:77:51:5b:da:4c:94:5c:d7:d0:7d:
0a:60:cd:96:e5:67:00:04:94:8b:f5:af:ac:63:ab:
0f:de:ca:43:9e:3b:44:f7:6e:17:8e:ed:d9:5a:85:
ac:d5:ef:7e:91:6c:17:aa:a9:cf:7a:18:9f:2a:71:
1b:50:94:26:30:e2:b5:e1:2f:a9:e8:db:38:c0:4a:
32:0f:8b:cd:2e:38:71:1c:33:60:59:e9:e6:88:c2:
04:4a:7e:3c:31:7d:f2:a0:8f:3e:d8:e9:24:2a:92:
b3:3d:f9:84:58:0c:c8:ec:cd:4f:6f:22:df:55:0e:
d4:c2:b7:b7:c8:aa:4e:44:1a:dc:c3:ea:49:52:0c:
87:4d:6a:c5:91:13:ff:a3:ba:ca:e4:e6:c9:60:ed:
da:a0:5a:83:99:7c:81:7c:31:9b:e9:80:95:c0:1c:
ae:4d:7b:7a:c3:13:87:f4:b8:1b:ce:fa:79:36:79:
32:c7:65:f9:ff:1a:a1:e4:a9:48:9a:b0:ff:68:cb:
26:75:d9:9b:f1:b6:12:3b:f5:c0:6b:05:7b:b1:a6:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B8:85:E7:6C:EB:19:6D:B5:4F:9A:2F:32:35:39:6A:21:BA:2B:BF
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216022.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.32.0/24
141.11.60.0/24
Signature Algorithm: sha256WithRSAEncryption
67:1c:91:8e:cd:b7:bf:fa:0d:4b:a4:85:5f:8a:63:31:70:e1:
b0:d0:ec:90:b1:44:b6:e5:3c:8a:6e:95:b4:79:3f:38:b2:17:
ff:a8:19:12:ad:9b:d1:90:26:73:a9:a2:dc:7a:1e:2d:93:3d:
48:dd:94:6c:a9:2a:17:00:89:1c:48:e4:06:5c:e6:fb:2b:73:
35:78:47:d1:93:97:82:c6:cb:08:02:37:fd:72:78:0d:fe:e9:
ec:e3:90:a7:c7:4c:b3:40:d2:e9:90:8e:ff:b7:0c:0f:51:8e:
fd:c7:10:e8:6b:cb:7b:7f:1f:0f:21:fa:92:97:32:27:9d:0f:
e4:52:08:fb:7a:d1:4c:38:fc:9e:72:c0:c2:77:61:bc:36:28:
93:1f:db:70:2a:20:91:32:48:18:ac:26:83:2f:40:f5:ef:94:
92:83:e2:08:96:77:ff:00:c7:3d:92:13:32:20:8e:43:f8:ee:
31:58:8a:95:33:f6:bb:f0:b7:6c:99:1d:9e:21:4a:30:91:5c:
da:89:36:45:c5:1b:c0:d2:86:86:6f:e2:0b:4b:b7:fa:e4:b8:
da:2e:f4:88:f9:d5:72:4f:30:8f:c1:0a:dd:12:83:4b:d8:e5:
81:3b:7a:2d:e9:4b:3d:eb:f6:ec:de:05:0d:9f:1b:8c:bf:25:
24:88:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:00 2025 by rpki-client