Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216104.roa
File: AS216104.roa (raw, json)
Hash identifier: 17AvuM2fdwT6rOHRLqUBDkW3xqUYWCGwTrIHUNNaMpY=
Subject key identifier: EC:E5:7F:32:AB:49:2F:B2:A5:DB:B2:68:F6:22:01:3F:FB:D8:0E:D9
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 015888EE1C4308FC43AF6DA1AD9E6FC297C9E9A5
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216104.roa
Signing time: Fri 26 Sep 2025 13:00:43 +0000
ROA not before: Fri 26 Sep 2025 12:55:43 +0000
ROA not after: Fri 25 Sep 2026 13:00:43 +0000
asID: 216104
IP address blocks: 141.11.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:58:88:ee:1c:43:08:fc:43:af:6d:a1:ad:9e:6f:c2:97:c9:e9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 26 12:55:43 2025 GMT
Not After : Sep 25 13:00:43 2026 GMT
Subject: CN=ECE57F32AB492FB2A5DBB268F622013FFBD80ED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:98:c8:bb:66:4b:b4:04:d3:c3:8c:c6:2b:
60:6c:39:cb:17:5f:c0:13:f2:7e:ae:11:d5:33:50:
82:15:69:99:8c:03:67:6a:70:24:cc:5a:4f:81:2c:
16:a6:05:3e:f0:b7:dc:10:8c:0c:fe:21:6e:a7:55:
3b:f5:60:bd:40:c2:73:f1:46:fe:d6:ad:e5:68:5a:
db:c2:bb:78:2c:f6:3b:bf:c4:74:04:a0:ae:a4:c5:
61:f2:e2:19:a5:fc:c8:56:62:31:b4:d7:28:d8:06:
25:d1:dd:e6:93:60:93:12:de:89:21:50:22:92:b2:
4d:a5:db:f5:31:00:df:30:4d:f9:fb:44:31:05:66:
58:4d:fe:02:89:4c:b3:46:a0:82:02:c3:90:ef:40:
40:cf:2d:cc:99:3f:4e:1a:39:50:a7:0e:30:cb:3b:
5e:fe:6b:f8:93:c8:84:6e:a0:13:33:96:19:0a:4c:
4d:3f:ce:84:4e:62:b3:af:e9:4c:f5:2f:b9:3d:45:
1a:d2:49:98:95:99:7a:6f:89:39:c1:c7:69:cc:40:
44:72:1a:b5:39:9d:87:47:9b:af:1b:81:e8:cb:96:
ad:9a:e0:06:7c:e1:d3:ac:c9:fd:0f:cf:ad:31:bf:
81:6b:40:f0:44:8f:73:41:92:92:89:0b:0d:76:78:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E5:7F:32:AB:49:2F:B2:A5:DB:B2:68:F6:22:01:3F:FB:D8:0E:D9
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:22:c7:c8:87:bd:05:3d:63:a8:1f:6a:da:41:75:ec:8c:f9:
ae:74:78:3d:38:0d:4a:41:71:8a:50:00:87:38:0f:04:9e:d7:
2f:e3:10:ba:a8:ef:82:de:f1:87:e7:14:22:0b:30:5a:72:12:
a7:5a:9c:28:d9:36:9f:7a:9f:a2:84:5a:9e:c6:42:89:10:89:
69:cf:83:ec:63:cb:b9:09:e5:c0:29:80:96:9c:b1:86:17:f2:
a6:20:b7:25:48:dd:e5:ff:73:2d:eb:8c:15:0f:9a:c2:87:43:
d2:9e:82:6c:88:a3:6a:36:e5:e7:eb:de:a0:f6:0e:0a:61:81:
a2:04:1d:3f:60:35:c9:7c:ab:b4:da:b6:cb:5e:e3:96:65:b9:
f2:5e:16:b7:17:c6:da:58:f2:1e:99:5d:6c:b6:e0:47:79:63:
19:22:3b:98:c8:16:26:d8:0a:e4:75:62:fa:4c:e4:9d:20:a6:
fa:79:24:e9:b0:2e:bd:65:95:c3:34:24:87:46:c2:3b:57:c1:
7a:d9:2c:0f:6c:e7:18:13:df:91:1a:da:3a:f9:30:be:bb:ab:
10:d5:ae:79:0d:12:ba:03:ba:82:05:95:89:b3:f5:9c:6b:7f:
6f:fa:fe:4a:c1:6e:78:7c:3b:8e:91:35:b9:41:84:56:44:69:
26:63:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:50 2025 by rpki-client